Mitel 5000 v6.0 CPU- 100%

[jmarcwsp1]

Our customer has 2- 5000s v6.0 networked together working as one system.  They have 80 digital  extensions , 16 VM ports, 2 PRI, 32 IP phones on one node.  112 digital extensions, 4 VM ports on the other node.  They also have CSM, 3 Attendant Consoles, and IP network 4 other locations.  The system utilization diagnostics show the CPU is 100% use even after hours when there is minimal activity.  Any thoughts?  Would it be better to split the systems and have them run independently?

[Tech Electronics]

Jmarcwsp1,

Do they have UM running?

Thanks,

TE

[jmarcwsp1]

Yes they are using the UM.

[NTEDave]

Do they have PEC or PS-1 hardware installed?

[jmarcwsp1]

PEC was added to try and recfify this problem.  They only have 30-40 IP phones.

[Tech Electronics]

Jmarcwsp1,

So what other symptoms were they having that prompted you to look at the CPU load?

How are the attachments formatted for UM are they .wav or .mp3? It takes more processing power to format the files to .mp3 and is recommended by Mitel to use a PS-1 for that if there are a lot of mailboxes that need that format for their smartphones; this should only be used for smartphones.

Do they use SIP devices on their network or externally? If not then disable the SIP Listening Port under System > IP Settings > Advanced IP Settings > SIP Listening Port set to No.
If SIP is used, the IP Access Control List on the Mitel 5000 Webpage can be used to allow or deny specific IP addresses.  If the IP address sending the continuous SIP register messages is identified, this individual address can be blocked using the IP Access Control List as a temporary measure.  A more permanent solution is to only allow the valid IP address(s) of the sip provider or sip devices.  In addition to these settings on the Mitel 5000 system, the customer firewall should also be set to guard against these types of sip register or sip denial of service attacks.

We have also seen recently that the SSH port is being attacked as well so you may want to disable that if you see someone trying to access port 22 on the system.

You could also temporarily disable networking of the phone systems, but unless there is a bug in the software version that I am not aware of yet I do not think that is it.

Thanks,

TE

[jmarcwsp1]

UM –they only set up 10 mailboxes.  We use .wav format.

SIP is still disabled (though we do need to use it at some point once we figure out issues) and UDP listening port is not enabled.

How do you disable the SSH port?

[Tech Electronics]

Jmarcwsp1,

You can disable SSH and Web through the following steps.

System > IP Settings > Web/SSH Settings > SSH Server Enabled set it to No

System > IP Settings > Web/SSH Settings > Web Server Enabled set it to No <- Keep in mind this will turn off the adminstrative web service for the 5000 which is used for troubleshooting and other tasks.

Have you called Mitel about this issue? You also never stated what other issues you were seeing that prompted you to look at the CPU statistic in the first place. You do realize that pressing the > button and then looking at the SAaD tabs does cause an increase in CPU load. There are other things that will increase it as well, such as a lot of phones ringing at the same time via an extension list, CSM has been know to put a load on the CPU as well. Having a lot of phones viewing other phones who statuses change a lot can also cause it to go up. So there are many things that can put a load on the CPU, but if you are not experiences slow downs it is most likely none of those that I just stated. The CPU could also be getting DoS attacks that force the CPU to respond and eventually shut down if it gets overloaded.

Thanks,

TE

Thanks,

TE

[Hovus]

And unless you have all those attendant consoles registered at individual nodes, having 3 OAI connections is the recommended max by Mitel. Having 3 consoles + CSM on a single node, I'm sure will make the CPU spike.