>> Доброй ночи. Моя проблема в том что я начинаю уже тупить с
>> с маршрутизатором за одно. Уже 2 дня пропадает интернет. После перезагрузки
>> маршрутизатора худо бедно работает. Но хватает часа на 2. Вываливает ошибки
>> что не хватает памяти. Я начинающий сисадмин. Сильно не печальтесь уж.
>> Направьте на путь куда копать проблему. Есть подозрение что организовано что
>> то топа DDoS
> Штатные телепаты в отпуске.
> show ver
> show run 2821#show ver
Cisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 12.4(18), RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2007 by Cisco Systems, Inc.
Compiled Fri 30-Nov-07 16:36 by prod_rel_team
ROM: System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)
2821 uptime is 2 minutes
System returned to ROM by power-on
System image file is "flash:c2800nm-advipservicesk9-mz.124-18.bin"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
2821 (revision 53.50) with 249856K/12288K bytes of memory.
Processor board ID FCZ110570HN
2 Gigabit Ethernet interfaces
1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity enabled.
239K bytes of non-volatile configuration memory.
62720K bytes of ATA CompactFlash (Read/Write)
Configuration register is 0x2102
2821#show run
Building configuration...
Current configuration : 5633 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname 2821
!
boot-start-marker
boot system flash:c2800nm-advipservicesk9-mz.124-18.bin
boot-end-marker
!
logging buffered 52000 debugging
enable secret 5 ******
!
no aaa new-model
!
!
ip cef
!
!
ip domain name yourdomain.com
ip name-server 192.168.0.1
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
voice-card 0
no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
username admin privilege 0 password
!
!
!
!
crypto isakmp policy 2
authentication pre-share
!
crypto isakmp policy 3
authentication pre-share
group 2
crypto isakmp key 01234 address 91.135.202.82
crypto isakmp key 01234 address 89.107.97.68
crypto isakmp invalid-spi-recovery
!
!
crypto ipsec transform-set myset1 esp-null esp-md5-hmac
!
crypto map shar 11 ipsec-isakmp
set peer 89.107.97.68
set transform-set myset1
match address 102
!
!
!
!
interface GigabitEthernet0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$
ip address 123.456.789.10 255.255.255.252
ip nat outside
ip nat enable
ip virtual-reassembly
duplex auto
speed 100
crypto map shar
!
interface GigabitEthernet0/1
ip address 192.168.21.1 255.255.255.0
ip nat inside
ip nat enable
ip virtual-reassembly
duplex auto
speed auto
!
no ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 123.456.789.11
ip route 987.654.321.0 255.255.255.240 192.168.21.2
ip route 192.168.0.0 255.255.0.0 192.168.21.2
ip route 192.168.1.0 255.255.255.0 192.168.21.2 permanent
!
!
ip http server
ip http access-class 23
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat pool NAT_COMSTAR 123.456.789.10 123.456.789.10 prefix-length 1
ip nat source list 108 pool NAT_COMSTAR overload
ip nat source route-map nonat pool NAT_COMSTAR overload
!
access-list 23 permit 91.135.202.82
access-list 23 permit 2.72.171.142
access-list 23 permit 83.146.115.28
access-list 23 permit 91.185.6.10
access-list 23 permit 192.168.0.0 0.0.255.255
access-list 23 permit 212.30.182.0 0.0.0.255
access-list 23 permit 2.72.0.0 0.0.255.255
access-list 23 permit 2.73.0.0 0.0.255.255
access-list 23 permit 95.71.0.0 0.0.255.255
access-list 23 permit 178.44.0.0 0.0.255.255
access-list 23 permit 85.192.0.0 0.0.255.255
access-list 102 permit ip 192.168.21.0 0.0.0.255 172.17.0.0 0.0.255.255
access-list 102 permit ip 192.168.21.0 0.0.0.255 192.168.100.0 0.0.0.255
access-list 108 deny ip 192.168.21.0 0.0.0.255 172.17.0.0 0.0.255.255
access-list 108 deny ip 192.168.21.0 0.0.0.255 192.168.100.0 0.0.0.255
access-list 108 permit ip host 192.168.0.208 any
access-list 108 permit ip host 192.168.0.201 any
!
route-map nonat permit 10
match ip address 108
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
escape-character 3
line aux 0
line vty 0 4
access-class 23 in
exec-timeout 55 0
password
login local
transport input telnet
escape-character 3
line vty 5 1180
access-class 23 in
password
login
transport input telnet
escape-character 3
!
scheduler allocate 20000 1000
!
end
