Исходное сообщение
"Cisco 871 & Dilaer PPPOE" Отправлено sysadm, 22-Авг-11 15:14
Товарищи. Помогите пожалуйста разобраться с проблемой. Есть Cisco 877 . У ней отключен ATM интерфейс.  Созданы 2 Vlan интерфейса  на Ethernet интерфейсах . Dialer1   поднимается PPPOE сессию  к провайдеру. Всё бы хорошо, но через  неопределённые промежутки времени (чаще всего неделя,  реже две, три не более) интерфейсы на маршрутизаторе вдруг перестают отвечать. Естественно пробовал диагностировать. show ip nat stat, show processes cpu , show buffers - всё в норме.  Больше всего грешил на переполнение буферов. Но show buffers в момент проблемы не показало ни одного no buffers... Через консоль спокойно захожу, остальные интерфейсы не отвечайт, хотя находятся в up. shutdown, no shutdown для dialer 1 никакого эффекта. только перезапуск роутера. При работе с консоли никаких тормозов. От безысходности настроил раз в неделю reload роутера, но это не выход, вернее это временное решение. Единственное что заметил в момент проблемы это разница в выводе show int Dialer1: Вот в момент проблемы: (нет вообще упоминания об Virtual-Access1+ не показывается внешний ip) Dialer1 is up, line protocol is up (spoofing)   Hardware is Unknown   Internet address will be negotiated using IPCP   MTU 1492 bytes, BW 56 Kbit, DLY 20000 usec,      reliability 255/255, txload 1/255, rxload 1/255   Encapsulation PPP, loopback not set   Keepalive set (10 sec)   DTR is pulsed for 1 seconds on reset   Last input never, output never, output hang never   Last clearing of "show interface" counters 1w2d   Input queue: 0/300/0/0 (size/max/drops/flushes); Total output drops: 0   Queueing strategy: weighted fair   Output queue: 0/1000/300/0 (size/max total/threshold/drops)      Conversations  0/0/16 (active/max active/max total)      Reserved Conversations 0/0 (allocated/max allocated)      Available Bandwidth 42 kilobits/sec   5 minute input rate 0 bits/sec, 0 packets/sec   5 minute output rate 0 bits/sec, 0 packets/sec      1347913 packets input, 531312992 bytes      1277062 packets output, 608373118 bytes А вот когда всё ок: Dialer1 is up, line protocol is up (spoofing)   Hardware is Unknown   Internet address is xxxxxxx/32   MTU 1492 bytes, BW 56 Kbit, DLY 20000 usec,      reliability 255/255, txload 1/255, rxload 1/255   Encapsulation PPP, loopback not set   Keepalive set (10 sec)   DTR is pulsed for 1 seconds on reset   Interface is bound to Vi1   Last input never, output never, output hang never   Last clearing of "show interface" counters 01:41:48   Input queue: 0/300/0/0 (size/max/drops/flushes); Total output drops: 0   Queueing strategy: weighted fair   Output queue: 0/1000/300/0 (size/max total/threshold/drops)      Conversations  0/0/16 (active/max active/max total)      Reserved Conversations 0/0 (allocated/max allocated)      Available Bandwidth 42 kilobits/sec   5 minute input rate 0 bits/sec, 0 packets/sec   5 minute output rate 0 bits/sec, 0 packets/sec      37365 packets input, 4999448 bytes      43031 packets output, 52920616 bytes Bound to: Virtual-Access1 is up, line protocol is up   Hardware is Virtual Access interface   MTU 1492 bytes, BW 56 Kbit, DLY 20000 usec,      reliability 255/255, txload 1/255, rxload 1/255   Encapsulation PPP, LCP Open   Open: IPCP   PPPoE vaccess, cloned from Dialer1   Vaccess status 0x44, loopback not set   Keepalive set (10 sec)   DTR is pulsed for 5 seconds on reset   Interface is bound to Di1 (Encapsulation PPP)   Last input 00:00:39, output never, output hang never   Last clearing of "show interface" counters 01:40:51   Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0   Queueing strategy: fifo   Output queue: 0/40 (size/max)   5 minute input rate 0 bits/sec, 0 packets/sec   5 minute output rate 0 bits/sec, 0 packets/sec      37375 packets input, 4999776 bytes, 0 no buffer      Received 0 broadcasts, 0 runts, 0 giants, 0 throttles      0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort      43041 packets output, 52920949 bytes, 0 underruns      0 output errors, 0 collisions, 0 interface resets      0 output buffer failures, 0 output buffers swapped out т.е. в момент проблемы отсутствует Bound to: Virtual-Access1 is up, и не показывает внешний ip. Вся эта проблема не может быть со стороны провайдера? вот конфиг роутера. Заранее спасибо за совет... version 12.4 no service pad service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption service sequence-numbers ! hostname cisco-mmp ! boot-start-marker boot-end-marker ! security authentication failure rate 3 log security passwords min-length 6 logging buffered 128000 debugging logging console critical enable secret 5 xxxxxx ! no aaa new-model ! resource policy ! clock timezone MSK 3 clock summer-time MSD recurring last Sun Mar 3:00 last Sun Oct 2:00 no ip source-route ip cef ! ! ! ! ip tcp synwait-time 10 no ip bootp server ip name-server 192.168.10.252 ip ssh time-out 60 ip ssh authentication-retries 2 ip inspect name DEFAULT100 ntp ip inspect name DEFAULT100 tcp ip inspect name DEFAULT100 udp ip inspect name DEFAULT100 h323 ! ! crypto pki trustpoint TP-self-signed-2593702234 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-2593702234 revocation-check none rsakeypair TP-self-signed-2593702234 ! ! crypto pki certificate chain TP-self-signed-2593702234 certificate self-signed 01 xxxxxxxxxxxxx   quit username sysadm privilege 15 secret 5 xxxxxxxxxxxxxxxxxxxxxxxxxx ! ! policy-map test ! ! ! buffers large permanent 2 buffers large min-free 1 ! ! ! interface ATM0 no ip address no ip redirects no ip unreachables no ip proxy-arp shutdown no atm ilmi-keepalive dsl operating-mode auto ! interface ATM0.1 point-to-point description $ES_WAN$$FW_OUTSIDE$ shutdown no snmp trap link-status pvc 0/35   pppoe-client dial-pool-number 1 ! ! interface FastEthernet0 ! interface FastEthernet1 switchport access vlan 3 ! interface FastEthernet2 switchport access vlan 4 ! interface FastEthernet3 ! interface Vlan1 description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$ES_LAN$$FW_INSIDE$ ip address 192.168.10.137 255.255.255.0 ip access-group 100 in no ip redirects no ip unreachables no ip proxy-arp ip nat inside ip virtual-reassembly ip route-cache flow ip tcp adjust-mss 1412 hold-queue 300 in ! interface Vlan3 no ip address ip mtu 1492 pppoe enable group global pppoe-client dial-pool-number 2 ! interface Dialer1 mtu 1492 ip address negotiated ip access-group 101 in no ip redirects no ip unreachables no ip proxy-arp ip nat outside ip inspect DEFAULT100 out ip virtual-reassembly rate-limit input access-group 199 2496000 468000 600000 conform-action transmit exceed-action drop rate-limit output access-group 199 2496000 468000 600000 conform-action transmit exceed-action drop encapsulation ppp ip route-cache flow ip tcp adjust-mss 1452 no ip mroute-cache dialer pool 2 dialer-group 2 fair-queue 300 16 0 no cdp enable ppp authentication chap pap callin ppp chap hostname officecentre ppp chap password 7 xxxxxxxxxxxxx ppp pap sent-username xxxxxxxxxxxxx password 7 xxxxxxxxxxxxxxxxx hold-queue 300 in ! ip route 0.0.0.0 0.0.0.0 Dialer1 ! ip flow-export version 5 ip flow-export destination 192.168.10.70 9996 ! no ip http server no ip http secure-server ip nat translation timeout 130 ip nat translation tcp-timeout 200 ip nat translation udp-timeout 200 ip nat translation syn-timeout 200 ip nat translation max-entries 500 ip nat translation max-entries all-host 400 ip nat inside source list 1 interface Dialer1 overload ip nat inside source static tcp 192.168.10.252 25 xxxxxxxxxxx 25 extendable ip nat inside source static tcp 192.168.10.252 53 xxxxxxxxxxxx 53 extendable ip nat inside source static udp 192.168.10.252 53 xxxxxxxxx 53 extendable ! kron occurrence weekly_reebot at 5:00 Sun recurring policy-list clear_dialer ! kron policy-list clear_dialer cli reload ! logging trap debugging logging facility local6 logging 192.168.10.102 access-list 1 permit 192.168.10.49 access-list 1 permit 192.168.10.24 access-list 1 permit 192.168.10.254 access-list 1 permit 192.168.10.252 access-list 1 permit 192.168.10.140 access-list 2 permit 192.168.10.102 access-list 2 permit 192.168.10.34 access-list 2 permit 192.168.10.49 access-list 100 deny   ip host 255.255.255.255 any access-list 100 deny   ip 127.0.0.0 0.255.255.255 any access-list 100 permit ip host 192.168.10.254 any access-list 100 permit ip host 192.168.10.34 any access-list 100 permit ip host 192.168.10.70 any access-list 100 permit ip host 192.168.10.49 any access-list 100 permit ip host 192.168.10.102 any access-list 100 permit ip host 192.168.10.116 any access-list 100 permit ip host 192.168.10.252 any access-list 100 deny   ip any any access-list 101 deny   ip 192.168.0.0 0.0.0.255 any log access-list 101 deny   ip 192.168.10.0 0.0.0.255 any log access-list 101 permit tcp any host xxxxxxxx gt 1024 access-list 101 permit udp any host xxxxx gt 1024 access-list 101 permit tcp any host xxxxxx eq 389 access-list 101 permit tcp any any established access-list 101 permit tcp any host xxxxxx eq smtp access-list 101 permit tcp any host xxxxxx eq domain access-list 101 permit udp any host xxxxxxxx eq domain access-list 101 permit tcp any eq domain any gt 1023 access-list 101 permit udp any eq domain any gt 1023 access-list 101 permit tcp any eq ftp-data any gt 1023 access-list 101 deny   icmp any any redirect log access-list 101 permit icmp any any access-list 101 permit udp any any eq ntp access-list 101 deny   tcp any any log access-list 101 deny   udp any any log access-list 101 deny   ip any any log access-list 102 permit ip any any access-list 199 permit tcp any any eq smtp dialer-list 1 protocol ip permit no cdp run ! ! ! ! control-plane ! banner login Authorized access only! Disconnect IMMEDIATELY if you are not an authorized user! ! line con 0 login local no modem enable transport output telnet line aux 0 login local transport output telnet line vty 0 4 privilege level 15 login local transport input telnet ssh ! scheduler max-task-time 5000 scheduler allocate 4000 1000 scheduler interval 500 ntp clock-period 17175038 ntp server 192.168.10.254 ! webvpn context Default_context ssl authenticate verify all ! no inservice ! end