CiscoForums.it

Ho impostato il numero massimo su eDonkey di connessioni a 90 e il router in oggetto ha iniziato dopo 1 settimana di up a non navigare in nessun sito anche se si riusciva dai PC a pingare l'esterno ed anche a risolvere gli indirizzi.
Praticamente a fatto ciò che mi faceva il vecchio router Dlink 504T quotidianamente.
Ho riiniziato a navigare corrrettamente da tutti i PC dopo una serie di tentativi:
- Ho spento e riacceso il router = sempre 'fermo', perchè non chide tutte le connessioni nat se lo spengi e lo riaccendi?
- Ho fatto un clear ip nat translation * e poi ha rifunzionato

La mia domanda è: ma con 90-100 connessioni si deve bloccare anche un router soho 97 anche se ha 32MB di DRAM? Se faccio uno sh ip nat statistics mi dava durante il blocco della navigazione circa 1600, non dovrebbe sopportarle?
Sicuramente mi sfugge qualcosa.

Mi fa un'altra cosa strana: se tengo chiuso edonkey navigo tranquillamente, se lo tengo aperto non navigo.
Questo succede appena aperto e chiuso, così non mi era mai capitata, che cosa può essere?

Non è quello il problema. Bisogna ridurre il timeout delle connessioni nel router. Le connessioni "morte" restano lì, a macerare finché non scadono.
Viene spiegato come fare qui: http://www.ciscoforums.it/viewtopic.php?t=166
Nel link, utilizza 3600 come tempo di timeout, ma può tranquillamente scendere.

Per il secondo problema, mi viene in mente che forse potrebbe trattarsi di un'operazione di debug molto pesante ancora attiva.
Prova a dargli un undebug all.

Ho modificato la configurazione come nel post che mi hai indicato.
Anche facendo però un un undebug all mi continua a fare la stessa cosa: appena apro edonkey mi smette di navigare.
Di seguito la configurazione corrente tante volte fosse utile.



!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname stefano
!
logging queue-limit 100
no logging buffered
no logging console
ip subnet-zero
ip name-server 212.216.112.112
ip name-server 212.216.172.62
ip name-server 62.149.128.4
ip name-server 62.149.132.4
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 192.168.1.1
ip dhcp excluded-address 0.0.0.0
ip dhcp excluded-address 192.168.1.2
!
ip dhcp pool CLIENT
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
lease 0 2
!
!
ip inspect name myfw cuseeme timeout 3600
ip inspect name myfw ftp timeout 3600
ip inspect name myfw rcmd timeout 3600
ip inspect name myfw realaudio timeout 3600
ip inspect name myfw smtp timeout 3600
ip inspect name myfw tftp timeout 30
ip inspect name myfw udp timeout 15
ip inspect name myfw tcp timeout 3600
ip inspect name myfw h323 timeout 3600
!
!
!
!
!
!
!
interface Ethernet0
description CRWS Generated text. Please do not delete this:192.168.1.1-255.255.255.0
ip address 192.168.0.1 255.255.255.0 secondary
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip tcp adjust-mss 1452
no ip mroute-cache
hold-queue 100 out
!
interface ATM0
no ip address
no ip mroute-cache
atm vc-per-vp 64
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
dsl operating-mode auto
hold-queue 224 in
!
interface Dialer0
no ip address
!
interface Dialer1
ip address negotiated
ip access-group 111 in
ip mtu 1492
ip nat outside
ip inspect myfw out
encapsulation ppp
dialer pool 1
dialer remote-name redback
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname xx
ppp chap password xx
ppp pap sent-username xx password xx
ppp ipcp dns request
ppp ipcp wins request
hold-queue 224 in
!
ip nat translation timeout 3600
ip nat translation tcp-timeout 3600
ip nat translation udp-timeout 1200
ip nat translation finrst-timeout 300
ip nat translation syn-timeout 120
ip nat translation dns-timeout 300
ip nat translation icmp-timeout 120
ip nat translation max-entries 4096
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source list 102 interface Dialer1 overload
ip nat inside source static tcp 192.168.1.2 6881 interface Dialer1 6881
ip nat inside source static tcp 192.168.1.2 80 interface Dialer1 80
ip nat inside source static udp 192.168.1.2 3863 interface Dialer1 3863
ip nat inside source static tcp 192.168.1.2 4662 interface Dialer1 4662
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
ip http server
no ip http secure-server
!
access-list 23 permit 192.168.1.0 0.0.0.255
access-list 23 permit 192.168.0.0 0.0.0.255
access-list 102 permit ip 192.168.1.0 0.0.0.255 any
access-list 111 permit tcp any any eq www
access-list 111 permit udp any any eq 3863
access-list 111 permit tcp any any eq 4662
access-list 111 permit icmp any any administratively-prohibited
access-list 111 permit icmp any any echo
access-list 111 permit icmp any any echo-reply
access-list 111 permit icmp any any packet-too-big
access-list 111 permit icmp any any time-exceeded
access-list 111 permit icmp any any unreachable
access-list 111 permit udp any eq bootps any eq bootpc
access-list 111 permit udp any eq bootps any eq bootps
access-list 111 permit udp any eq domain any
access-list 111 permit esp any any
access-list 111 permit udp any any eq isakmp
access-list 111 permit udp any any eq 10000
access-list 111 permit tcp any any eq 1723
access-list 111 permit tcp any any eq 139
access-list 111 permit udp any any eq netbios-ns
access-list 111 permit udp any any eq netbios-dgm
access-list 111 permit gre any any
access-list 111 deny ip any any
dialer-list 1 protocol ip permit
!
line con 0
exec-timeout 120 0
no modem enable
stopbits 1
line aux 0
stopbits 1
line vty 0 4
access-class 23 in
exec-timeout 120 0
login local
length 0
!
scheduler max-task-time 5000
!
end

C'è un po' di confusione in questa conf. Vediamo di mettere le cose a posto.

interface Dialer0

Cos'è? è inutile. no interface dialer0.
E quindi anche

ip nat inside source list 1 interface Dialer0 overload

è conseguentemente inutile.
Per quanto riguarda il tuo problema, ho come il sospetto che il limitatore di eMule faccia riferimento alle connessioni vive, e temo quindi che il limite di connessioni da te impostato sia assolutamente restrittivio.
In più, come dice Cisco, il limitatore del numero delle traduzioni è da evitare, almeno che non sia necessario per requisiti particolari.
Ergo, lascia i timeout di traduzione, ma rimuovi:

ip nat translation max-entries 4096

Questo comando serve in rari casi e questo non ne fa parte.

Ecco la configurazione un pò più pulita:

!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname stefano
!
logging queue-limit 100
no logging buffered
no logging console
enable secret 5 $1$UygP$jGC3iXbv9qLVMijfWNjTo/
!
username CRWS_Kannan privilege 15 password 7
username admin password
username CRWS_Santhosh privilege 15 password 7
username CRWS_Shashi privilege 15 password 7
username CRWS_Giri privilege 15 password 7
username CRWS_Venky privilege 15 password 7
ip subnet-zero
ip name-server 62.149.128.4
ip name-server 62.149.132.4
ip dhcp excluded-address 192.168.1.1
ip dhcp excluded-address 0.0.0.0
ip dhcp excluded-address 192.168.1.2
ip dhcp excluded-address 192.168.1.3
!
ip dhcp pool CLIENT
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
lease 0 2
!
!
ip inspect name myfw cuseeme timeout 3600
ip inspect name myfw ftp timeout 3600
ip inspect name myfw rcmd timeout 3600
ip inspect name myfw realaudio timeout 3600
ip inspect name myfw smtp timeout 3600
ip inspect name myfw tftp timeout 30
ip inspect name myfw udp timeout 15
ip inspect name myfw tcp timeout 3600
ip inspect name myfw h323 timeout 3600
!
!
!
!
!
!
!
interface Ethernet0
description CRWS Generated text. Please do not delete this:192.168.1.1-255.255.255.0
ip address 192.168.0.1 255.255.255.0 secondary
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip tcp adjust-mss 1452
no ip mroute-cache
hold-queue 100 out
!
interface ATM0
no ip address
no ip mroute-cache
atm vc-per-vp 64
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
dsl operating-mode auto
hold-queue 224 in
!
interface Dialer1
ip address negotiated
ip access-group 111 in
ip mtu 1492
ip nat outside
ip inspect myfw out
encapsulation ppp
dialer pool 1
dialer remote-name redback
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname xxx
ppp chap password 7 xxx
ppp pap sent-username xxx password 7 xxx
ppp ipcp dns request
ppp ipcp wins request
hold-queue 224 in
!
ip nat translation timeout 3600
ip nat translation tcp-timeout 3600
ip nat translation udp-timeout 1200
ip nat translation finrst-timeout 300
ip nat translation syn-timeout 120
ip nat translation dns-timeout 300
ip nat translation icmp-timeout 120
ip nat inside source list 102 interface Dialer1 overload
ip nat inside source static tcp 192.168.1.2 6881 interface Dialer1 6881
ip nat inside source static tcp 192.168.1.2 80 interface Dialer1 80
ip nat inside source static udp 192.168.1.2 3863 interface Dialer1 3863
ip nat inside source static tcp 192.168.1.2 4662 interface Dialer1 4662
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
ip http server
no ip http secure-server
!
access-list 23 permit 192.168.1.0 0.0.0.255
access-list 23 permit 192.168.0.0 0.0.0.255
access-list 102 permit ip 192.168.1.0 0.0.0.255 any
access-list 111 permit tcp any any eq www
access-list 111 permit udp any any eq 3863
access-list 111 permit tcp any any eq 4662
access-list 111 permit icmp any any administratively-prohibited
access-list 111 permit icmp any any echo
access-list 111 permit icmp any any echo-reply
access-list 111 permit icmp any any packet-too-big
access-list 111 permit icmp any any time-exceeded
access-list 111 permit icmp any any unreachable
access-list 111 permit udp any eq bootps any eq bootpc
access-list 111 permit udp any eq bootps any eq bootps
access-list 111 permit udp any eq domain any
access-list 111 permit esp any any
access-list 111 permit udp any any eq isakmp
access-list 111 permit udp any any eq 10000
access-list 111 permit tcp any any eq 1723
access-list 111 permit tcp any any eq 139
access-list 111 permit udp any any eq netbios-ns
access-list 111 permit udp any any eq netbios-dgm
access-list 111 permit gre any any
access-list 111 deny ip any any
dialer-list 1 protocol ip permit
!
line con 0
exec-timeout 120 0
no modem enable
stopbits 1
line aux 0
stopbits 1
line vty 0 4
access-class 23 in
exec-timeout 120 0
login local
length 0
!
scheduler max-task-time 5000
!
end

Facendo :
stefano#sh ip nat statistics
Total active translations: 11883 (0 static, 11883 dynamic; 11883 extended)
Outside interfaces:
Dialer1, Virtual-Access2
Inside interfaces:
Ethernet0
Hits: 1408987 Misses: 3485
Expired translations: 23340
Dynamic mappings:
-- Inside Source
[Id: 1] access-list 102 interface Dialer1 refcount 260

Chiudendo eDonkey non navigavo comunque ho dovuto pulire:
stefano#clear ip nat translation *

senza eDonkey aperto ora è arrivato:
stefano#sh ip nat statistics
Total active translations: 1849 (0 static, 1849 dynamic; 1849 extended)
Outside interfaces:
Dialer1, Virtual-Access2
Inside interfaces:
Ethernet0
Hits: 1453899 Misses: 3717
Expired translations: 23688
Dynamic mappings:
-- Inside Source
[Id: 1] access-list 102 interface Dialer1 refcount 96

Come mai per una settimana ha funzionato ed ora appena apro eDonkey non navigo?

Questo è MOLTO strano. Prova a diminuire i tempi di traduzione, chessò, da 3600 a 1200. A parte questo, ripeto, mi sembra molto strano.

Ho diminuito da 3600 a 1200.

ip nat translation timeout 1200
ip nat translation tcp-timeout 1200

Sulle prime continuava a fare lo stesso verso ma poi ho iniziato a rinavigare con edonkey aperto anche se il numero di connessioni di edonkey è sceso notevolmente.

Dopo 2 giorni di up trovo che il router non scambia più dati con l'esterno praticamente i pc non navigano ed edonkey è sconnesso.
Faccio un reload e raggiungo dai pc nuovamente l'esterno.
Questo router preso su ebay ha qualche problema hardware secondo voi?

faresti uno show ver per favore?

Eccolo:
stefano#sh ver
Cisco Internetwork Operating System Software
IOS (tm) SOHO97 Software (SOHO97-K9OY1-M), Version 12.2(13)ZH2, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
Synched to technology version 12.2(14.5)T
TAC Support: http://www.cisco.com/tac
Copyright (c) 1986-2003 by cisco Systems, Inc.
Compiled Tue 22-Jul-03 13:43 by ealyon
Image text-base: 0x800131C0, data-base: 0x808D0C84

ROM: System Bootstrap, Version 12.2(8r)YN, RELEASE SOFTWARE (fc1)
ROM: SOHO97 Software (SOHO97-K9OY1-M), Version 12.2(13)ZH2, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)

stefano uptime is 1 hour, 0 minutes
System returned to ROM by reload
System image file is "flash:soho97-k9oy1-mz.122-13.ZH2.bin"

CISCO SOHO97 (MPC857DSL) processor (revision 0x400) with 29492K/3276K bytes of memory.
Processor board ID AMB0827065Y (1689324732), with hardware revision 0000
CPU rev number 7
Bridging software.
1 Ethernet/IEEE 802.3 interface(s)
1 ATM network interface(s)
128K bytes of non-volatile configuration memory.
8192K bytes of processor board System flash (Read/Write)
2048K bytes of processor board Web flash (Read/Write)

Configuration register is 0x2102