cisco 3600 memory maximum?

[hellboy101]

Hello all-

My company is looking to maximize our bandwidth potential. The carrier has the ability to bring in close to a 100mg pipe, and we could carve out the any amount (T1) capacity specific for voice and data as we see fit. Now the meat and potatoes.. My perimeter router needs 2 FAe/o ports (which it has available) however.. memory might be an issue. I did a "show memory" on this device and I receive:
sho mem
Head Total(b) Used(b) Free(b) Lowest(b) Largest(b)

Processor 62257300 23760128 5375456 18384672 16921648 18229012

I/O 3900000 7340032 2341088 4998944 4764464 4962524

Not sure if I can upgrade current processor capability, and memory. how can I be certain whether I can or can't.. the carrier unfortunately won't/isn't allowed to make suggestions.

thx for any help provided.

hb101

 

[JOAMON]

With that kind of bandwidth and voice and data on the same box the 3600 may be questionable for the volume. Especially if you have a lot of VPN connections and with IDS Firewall and QOS you will utilize a lot of the CPU. Might want to consider the newer 3800 platform.

http://www.cisco.com/en/US/products/ps5855/

 

[hellboy101]

Well JOAMON,

I should apologize. The voice T1's will be segmented to an Avaya telephony system and will circumvent the 3640. We do have afew (less than 5 folks) that VPN thru this router to a PIX 515E... not tremendous. But I would like to carve out a bunch of Data T's reaching that 90mg pipe number.. thinks it's still not do-able? if you feel it still isn't based on this assessment, then I could look at the 3800.

Thanks JOAMON.. very much!
hb101

 

[JOAMON]

Take a look at the output from show process cpu and show process cpu history and if typically less that 50% you would probably be ok with current hardware. You are not really adding any new services to the router....just bandwidth. So if current CPU useage is in acceptable limits then you should be ok. A less cost alternative to the 3800 would be the 2800. The 2800 would be an upgrade to the 3600 and is among the new integrated service routers that Cisco offers. Make sure you also consider if your current modules will work in the new series router as you may need to replace them as well.

 

[hellboy101]

Hi JOAMON,

I can understand the sho process cpu, which depicts % usage for 5 sec, 1 min, 5 min - 6%

but i can't make heads or tails of the history hee hee!

it looks like this:
11111 11111 11111 22222666661111111111222
100
90
80
70
60
50
40
30
20
10 *****
0....5....1....1....2....2....3....3....4....4....5....5....
0 5 0 5 0 5 0 5 0 5

CPU% per second (last 60 seconds)

not sure how to read.

thanks so much, this will help determine what I need.
hb101

 

[JOAMON]

100
90
80
70
60
50
40
30
20
10 *****
0....5....1....1....2....2....3....3....4....4....5....5....
0 5 0 5 0 5 0 5 0 5

Left column ic CPU % *** is CPU utilization during that period. Further graphs CPu utilization are depicted with the # sign and the * sign.
100
90
80
70
60
50
40
30
20 ** * * *
10 ***** *******###*#**####*##*****#*********** *#* #*##* *#***
0....5....1....1....2....2....3....3....4....4....5....5....
0 5 0 5 0 5 0 5 0 5
CPU% per minute (last 60 minutes)
* = maximum CPU% # = average CPU%

 

[Jynxx]

The bottom numbers are the seconds (over the last minute)...5, 10, 15, 20, 25, 30, 35, 40, 45, 50, and 55.

The numbers read like

2
5

For 25 for instance.

The * indicates the CPU value at that point. It has to hit at least 10% in order to "plot" the point. It has to hit at least 20% to plot for the 20, etc. It does not round at all.

 

[hellboy101]

Thanks to all, now I follow reading this interesting chart..
Based on this, CPU utilization is extremely low, not a problem.


Thanks
hb101

 

[JOAMON]

Good idea to always look at this before and after any config or hardware changes to see the impact of those modifications.

 

[hellboy101]

thanks again Joamon,

You wouldn't happen to know what my memory "overall" upgrade would be for a 3640 router would you? If I end up keeping this router for my 100mbit/s pipe, I want to know I won't issued a "gotcha" later.


hb101

 

[KiscoKid]

If memory serves, I think you can upgrade the 3640 up to about 128mb DRAM (I had to upgrade about 10 of them 18 months ago).

 

[hellboy101]

Thats great news KiscoKid.

10 -3640's eh? nice

Do you remember whether you removed the original 64mb mem chip and replaced it with a 128? or were you able to just add it to the original existing mem but in a 2nd slot..


thanks for all your support

hb101

 

[KiscoKid]

HB101

I know the 3640 has 4 slots but I couldnt remember what SIMM configuration was supported. I found the following link which shows you can use all 4 slots with 32mb in each.

http://www.cisco.com/en/US/products...figuration_guide09186a008007ce07.html#wp26613

 

[hellboy101]

Thats GREAT!

thanks again KiscoKid!

If you were local, I'd buy ya a beer!!

hb101

 

[hellboy101]

Hi CiscoKid,

It's been a while since we last collaborated, hope all is well!

My supervisor just ordered the memory for this router 2X32DRAM for a total of 128 DRAM (router currently has 64)

Since we are going to bring in a "carvable" but overall 100mbps pipe, I was wondering if there's a need to add another T1 card?? we currently (physically have three T1 cards configured on our 3640. Just to be sure, I'd like to know before he orders the memory incase we need another card he should order this too. here's my config incase you wanted to take a peak for an assessment.
Using 3826 out of 129016 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname bogus
!
enable secret 5 $1$1i9e$K.R5HFZxDolTeDZny3QWg0
!
ip subnet-zero
!
!
no ip domain-lookup
!
call rsvp-sync
!
!
!
!
!
!
controller T1 0/0
framing esf
linecode b8zs
channel-group 0 timeslots 1-24 speed 64
!
controller T1 0/1
framing esf
linecode b8zs
channel-group 0 timesl
!
controller T1 0/2
framing esf
linecode b8zs
channel-group 0 timeslots 1-24 speed 64
!
controller T1 0/3
framing sf
linecode ami
!
controller T1 3/0
framing sf
linecode ami
!
!
!
interface Loopback0
ip address 192.168.xx.xx 255.255.255.0
!
interface Tunnel1
description SNMP tunnel
ip address 192.168.xx.xx 255.255.255.0
ip mtu 1400
load-interval 30
tunnel source xx.xx.xx.xx
tunnel destination xx.xx.xx.xx
!
interface Serial0/0:0
description ckt id 01DHXS100255
ip address xx.xx.xx.xx 255.255.255.252
ip access-group infilter in
load-interval 30
!
interface Serial0/1:0
description ckt id 01DHXS100253
ip address xx.xx.xx.xx 255.255.255.252
ip access-group infilter in
load-interval 30
!
interface Serial0/2:0
description ckt id 01DHXS100254
ip address xx.xx.xx.xx 255.255.255.252
load-interval 30
!
interface FastEthernet1/0
no ip address
no ip mroute-cache
shutdown
duplex auto
speed auto
!
interface FastEthernet3/0
ip address xx.xx.xx.xx 255.255.255.224
speed 100
full-duplex
!
ip classless
ip route 0.0.0.0 0.0.0.0 xx.xx.xx.xx
ip route 0.0.0.0 0.0.0.0 xx.xx.xx.xx
ip route 0.0.0.0 0.0.0.0 xx.xx.xx.xx
ip route 10.10.19.0 255.255.255.0 192.168.10.1
ip route 10.15.0.44 255.255.255.255 192.168.10.1
ip route 10.15.1.150 255.255.255.255 192.168.10.1
ip http server
!
!
ip access-list extended infilter
deny 53 any any
deny 55 any any
deny pim any any
deny udp any any eq 135
deny udp any any eq netbios-ns
deny udp any any eq netbios-dgm
deny tcp any any eq 135
deny tcp any any eq 444
deny tcp any any eq 445
deny tcp any any eq 593
deny ip 10.0.0.0 0.255.255.255 any
deny ip 192.168.0.0 0.0.255.255 any
deny ip xx.xx.0.0 0.15.255.255 any
deny ip 127.0.0.0 0.255.255.255 any
deny ip 224.0.0.0 0.255.255.255 any
deny icmp 10.0.0.0 0.255.255.255 any
deny icmp 192.168.0.0 0.0.255.255 any
deny icmp xx.xx.0.0 0.15.255.255 any
deny icmp 127.0.0.0 0.255.255.255 any
deny icmp 224.0.0.0 0.255.255.255 any
deny udp any host 69.74.53.100 eq ntp
permit icmp any 69.74.53.
permit tcp 209.74.96.0 0.0.31.255 host 69.74.13.138 eq telnet
permit tcp 209.74.96.0 0.0.31.255 host 69.74.13.130 eq telnet
permit tcp 209.74.96.0 0.0.31.255 host 69.74.13.134 eq telnet
permit tcp 209.74.96.0 0.0.31.255 host 69.74.53.100 eq telnet
deny tcp any any eq telnet
permit udp host 209.74.97.199 host 69.74.53.100 eq isakmp
permit gre host 209.74.97.199 host 69.74.53.100
permit esp host 209.74.97.199 host 69.74.53.100
permit udp host 209.74.98.199 host 69.74.53.100 eq isakmp
permit gre host 209.74.98.199 host 69.74.53.100
permit esp host 209.74.98.199 host 69.74.53.100
permit ip any 69.74.53.96 0.0.0.31 log
deny ip any any
access-list 99 permit 10.2.20.17
access-list 99 permit 10.2.10.13
access-list 99 permit 10.10.254.224
access-list 99 permit xx.131.169.251
access-list 99 permit xx.131.168.155
access-list 99 permit xx.131.160.39
access-list 99 permit 10.0.5.253
access-list 99 permit xx.131.160.27
access-list 99 permit 10.10.0.0 0.0.255.255
access-list 99 permit 10.0.16.0 0.0.3.255
access-list 99 permit 10.15.0.0 0.0.255.255
access-list 99 deny any log
!
snmp-server community XXXXXXXX
snmp-server community XXXX
!
dial-peer cor custom
!
!
!
alias exec siib sho ip int br
!
line con 0
line aux 0
line vty 0 4
password 7 0013400A070B065538
login
!
end


thank you for any info on this!
hb101