>>Привет!
>>Ни с того, ни с сего 2600 кошка стала терять пакеты между
>>fa 0/0 и портом свича. Причём, как выяснилось, в этом не
>>виноваты ни свитч, ни витая пара.
>>После того как я потёр конфиг и заново прописал линковочную со свичом
>>сетку - потери исчезли. Далее стал исследовать кофиг кошки и смотреть,
>>что могло бы такое вызвать. Кошка используется для ната клиентов (порядка
>>20) и нарезки трафика. Для каждого клиента подняты саб-инты. При отключенных
>>клиентах - всё те же потери, но, что характерно, выглядят как
>>7 пакетов прошло, 1-нет, 7 прошло, 1 -нет... Включен rip.
>>После "no ip routing" - потери также исчезают.
>>Манипуляции с 10/100 halp/full duplex не помогают.
>>
>>Буду премного благодарен, если кто подскажет с чем это может быть связано....
>>
>sh ver
>sh run
>sh int
>sh ip int
>и таблицу ната на момент потерь
sh ver
=======
Cisco Internetwork Operating System Software
IOS (tm) C2600 Software (C2600-TELCO-M), Version 12.2(4)T, RELEASE SOFTWARE (fc1)
TAC Support: http://www.cisco.com/tac
Copyright (c) 1986-2001 by cisco Systems, Inc.
Compiled Thu 27-Sep-01 23:58 by ccai
Image text-base: 0x80008088, data-base: 0x80E0F63C
ROM: System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)
aqua uptime is 18 hours, 40 minutes
System returned to ROM by reload
System image file is "flash:c2600-telco-mz.122-4.T.bin"
cisco 2620 (MPC860) processor (revision 0x102) with 36864K/4096K bytes of memory.
Processor board ID JAD04270GKU (2418300301)
M860 processor: part number 0, mask 49
Bridging software.
SuperLAT software (copyright 1990 by Meridian Technology Corp).
X.25 software, Version 3.0.0.
1 FastEthernet/IEEE 802.3 interface(s)
32K bytes of non-volatile configuration memory.
16384K bytes of processor board System flash (Read/Write)
Configuration register is 0x2102
This image supports System Controller functionality
sh run
======
Current configuration : 25629 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname router
ip subnet-zero
ip cef
ip name-server xxx.xxx.xx.xx
ip name-server xxx.xxx.xx.xx
!
interface Loopback1
ip address xx.xx.xx.xx 255.255.255.255
!
interface FastEthernet0/0
ip address xx.xx.xx.xx 255.255.255.252 secondary - для свитча
ip address xx.xx.xx.xx 255.255.255.252 - для центральной кошки
no ip redirects
no ip proxy-arp
ip accounting output-packets
ip nat outside
ip route-cache flow
speed 100
full-duplex
no cdp enable
!
interface FastEthernet0/0.2
encapsulation dot1Q 2
ip address xx.xx.xx.xx 255.255.255.252
rate-limit input 256000 8000 8000 conform-action transmit exceed-action drop
rate-limit output 256000 8000 8000 conform-action transmit exceed-action drop
no cdp enable
!
...etc (ещё несколько с реальными адресами)...
interface FastEthernet0/0.14
encapsulation dot1Q 14
ip address 192.168.1.1 255.255.255.0
ip nat inside
rate-limit input 512000 8000 8000 conform-action transmit exceed-action drop
rate-limit output 512000 8000 8000 conform-action transmit exceed-action drop
no cdp enable
!
...etc (ещё несколько с фейковыми адресами)..
router rip
version 2
redistribute connected
redistribute static
network xx.xx.xx.0
network xx.xx.xx.0
neighbor xx.xx.xx.xx
distribute-list RIP out
no auto-summary
ip nat inside source list 1 interface Loopback1 overload
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 xx.xx.xx.xx
ip route [парочка статиков]
ip flow-export source FastEthernet0/0
ip flow-export version 5
ip flow-export destination xxx.xxx.xxx.xx 9996
no ip pim bidir-enable
!
ip access-list standard 1
permit 192.168.1.0 0.0.0.127
ip access-list extended CiscoDoS170703
deny 53 any any
deny 55 any any
deny 77 any any
deny pim any any
permit ip any any
ip access-list extended Microsoft-SQL-Monitor
deny udp any any eq 1434
permit ip any any
!
line con 0
line aux 0
line vty 0 4
login
!
end
sh int fa0/0
======
FastEthernet0/0 is up, line protocol is up
Hardware is AmdFE, address is 0002.b991.a440 (bia 0002.b991.a440)
Internet address is xx.xx.xx.xx/30
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 1., loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters 23:10:07
Queueing strategy: fifo
Outp13141708 packets input, 1030699907 bytes
Received 163416 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog
0 input packets with dribble condition detected
12179094 packets output, 119147565 bytes, 0 underruns
5 output errors, 29 collisions, 6 interface resets
0 babbles, 5 late collision, 115 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped outut queue 0/40, 121772 drops; input queue 0/75, 1 drops
5 minute input rate 671000 bits/sec, 181 packets/sec
5 minute output rate 452000 bits/sec, 156 packets/sec
sh ip int
==========
FastEthernet0/0 is up, line protocol is up
Internet address is xx.xx.xx.xx/30
Broadcast address is 255.255.255.255
Address determined by non-volatile memory
MTU is 1500 bytes
Helper address is not set
Directed broadcast forwarding is disabled
Secondary address xx.xx.xx.xx/30
Secondary address xx.xx.xx.xx/30
Secondary address xx.xx.xx.xx/30
Secondary address xx.xx.xx.xx/30
Multicast reserved groups joined: 224.0.0.9
Outgoing access list is not set
Inbound access list is not set
Proxy ARP is disabled
Security level is default
Split horizon is enabled
ICMP redirects are never sent
ICMP unreachables are always sent
ICMP mask replies are never sent
IP fast switching is enabled
IP fast switching on the same interface is disabled
IP Flow switching is enabled
IP CEF switching is enabled
IP CEF Flow Fast switching turbo vector
IP multicast fast switching is enabled
IP multicast distributed fast switching is disabled
IP route-cache flags are Fast, Flow, CEF
Router Discovery is disabled
IP output packet accounting is enabled
IP access violation accounting is disabled, system threshold is 512
TCP/IP header compression is disabled
RTP/IP header compression is disabled
Probe proxy name replies are disabled
Policy routing is disabled
Network address translation is enabled, interface in domain outside
WCCP Redirect outbound is disabled
WCCP Redirect inbound is disabled
WCCP Redirect exclude is disabled
BGP Policy Mapping is disabled
Вариант для распечатки
Маршрутизаторы CISCO и др. оборудование. (Public)
on
14-Авг-03, 22:52 (MSK)
