CiscoForums.it

Ciao a tutti, dopo varie prove fatte con un tecnico telecom e dopo alcune verifiche, la conclusione per capire come risolvere il mio problema è trovare una configurazione funzionante con un contratto di questo genere per vedere dove si insidia il problema. Fondamentalmente bassa velocità con molti errori CRC.
Tra le prove effettuate quella che secondo lui è significativa è data dal comando ping, fatto su google (un altro era lo stesso!) dove veniva aumentato il traffico per vedere dove si sedeva il router o la linea.
Nel comando in questione è stato solo variato il valore di Datagram size, superando il valore di 1500 non si ottiene più risposta.
A suo dire l'MTU non va, il router non è configurato a dovere in quanto sino a 1500 avviene di default il "reimbustamento" dei pacchetti, per valori superiori dovrebbe provvedere il router con il giusto incapsulamento. Morale, la velocità è bassa in quanto molti pacchetti non raggiungono la destinazione. Il problema è che lui non ha nessuna configurazione del 878 in quanto non utilizzato da Telecom.
Qualcuno di voi può darmi una dritta o una configurazione di esempio oppure un aiuto risolutore.
Mi affido a voi.
Grazie.

Nike

Facciamo prima a controllare la tua config attuale...
Cmq, come al solito, aggiorna ios e firmware del modulo adsl

Considerando che i comandi non sono tutti compatibili (per es sh dsl o sh shdsl danno errore), come vuoi che legga la config, da telnet?
Ho già pensato di aggiornare ios e firmware (questo è un router senza moduli installabili, è un router dove l'entrata è un doppino telefonico per shdsl ed ho una isdn. O aggiorno tutto o nulla.

Il lato DSL0 da:
mode atm
line-term cpe
line-mode 2-wire line-zero
dsl-mode shdsl symmetric annex B
line-rate auto

Comunque grazie.
Che faccio?

Ecco il mio config



Building configuration...

Current configuration : 7783 bytes
!
! Last configuration change at 22:00:03 PCTime Tue Feb 19 2008 by cisco
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname cisco
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 debugging
logging console critical
enable secret 5 bzLBYInA0
!
no aaa new-model
!
resource policy
!
clock timezone PCTime 1
clock summer-time PCTime date Mar 30 2003 2:00 Oct 26 2003 3:00
ip subnet-zero
no ip source-route
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 10.1.1.1
ip dhcp excluded-address 10.1.1.155 10.1.1.254
!
ip dhcp pool sdm-pool1
import all
network 10.1.1.0 255.255.255.0
dns-server 151.99.125.2 151.99.0.100
default-router 10.1.1.1
!
!
ip inspect log drop-pkt
ip inspect name SDM_HIGH appfw SDM_HIGH
ip inspect name SDM_HIGH icmp
ip inspect name SDM_HIGH dns
ip inspect name SDM_HIGH esmtp
ip inspect name SDM_HIGH https
ip inspect name SDM_HIGH imap reset
ip inspect name SDM_HIGH pop3 reset
ip tcp synwait-time 10
no ip bootp server
ip domain name mysite.com
ip name-server 151.99.0.100
ip name-server 151.99.125.2
ip ssh time-out 60
ip ssh authentication-retries 2
!
appfw policy-name SDM_HIGH
application im aol
service default action reset alarm
service text-chat action reset alarm
server deny name login.oscar.aol.com
server deny name toc.oscar.aol.com
server deny name oam-d09a.blue.aol.com
audit-trail on
application im msn
service default action reset alarm
service text-chat action reset alarm
server deny name messenger.hotmail.com
server deny name gateway.messenger.hotmail.com
server deny name webmessenger.msn.com
audit-trail on
application http
strict-http action reset alarm
port-misuse im action reset alarm
port-misuse p2p action reset alarm
port-misuse tunneling action reset alarm
application im yahoo
service default action reset alarm
service text-chat action reset alarm
server deny name scs.msg.yahoo.com
server deny name scsa.msg.yahoo.com
server deny name scsb.msg.yahoo.com
server deny name scsc.msg.yahoo.com
server deny name scsd.msg.yahoo.com
server deny name cs16.msg.dcn.yahoo.com
server deny name cs19.msg.dcn.yahoo.com
server deny name cs42.msg.dcn.yahoo.com
server deny name cs53.msg.dcn.yahoo.com
server deny name cs54.msg.dcn.yahoo.com
server deny name ads1.vip.scd.yahoo.com
server deny name radio1.launch.vip.dal.yahoo.com
server deny name in1.msg.vip.re2.yahoo.com
server deny name data1.my.vip.sc5.yahoo.com
server deny name address1.pim.vip.mud.yahoo.com
server deny name edit.messenger.yahoo.com
server deny name messenger.yahoo.com
server deny name http.pager.yahoo.com
server deny name privacy.yahoo.com
server deny name csa.yahoo.com
server deny name csb.yahoo.com
server deny name csc.yahoo.com
audit-trail on
!
!
crypto pki trustpoint TP-self-signed-214
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-214
revocation-check none
rsakeypair TP-self-signed-214
!
!
crypto pki certificate chain TP-self-signed-214
certificate self-signed 01
XXXXXXXXXXXX

quit
username cisco privilege 15 secret 5 s7NYB1H0
!
!
controller DSL 0
mode atm
line-term cpe
line-mode 2-wire line-zero
dsl-mode shdsl symmetric annex B
line-rate auto
!
!
!
!
interface BRI0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
encapsulation hdlc
ip route-cache flow
shutdown
!
interface ATM0
no ip address
no atm ilmi-keepalive
!
interface ATM0.1 point-to-point
description $ES_WAN$$FW_OUTSIDE$
ip address XX.XX.XX.XXX 255.255.255.252
ip verify unicast reverse-path
ip nat outside
ip virtual-reassembly
pvc 8/35
protocol ip XX.XX.XX.XXX broadcast
oam-pvc manage
encapsulation aal5snap
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$ES_LAN$$FW_INSIDE$
ip address XX.XX.XXX.XXX 255.255.255.248
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1452
!
ip classless
ip route 0.0.0.0 0.0.0.0 ATM0.1
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 1 interface ATM0.1 overload
!
logging trap debugging
logging 10.1.1.XXX
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark SDM_ACL Category=2
access-list 1 permit XX.XX.XXX.XXX 0.0.0.7
access-list 100 remark auto generated by SDM firewall configuration
access-list 100 remark SDM_ACL Category=1
access-list 100 permit ip XX.XX.XX.XXX 0.0.0.3 any
access-list 100 deny ip host 255.255.255.255 any
access-list 100 deny ip 127.0.0.0 0.255.255.255 any
access-list 100 permit ip any any
access-list 101 remark auto generated by SDM firewall configuration
access-list 101 remark SDM_ACL Category=1
access-list 101 permit udp host 151.99.0.100 eq domain host XX.XX.XX.XXX
access-list 101 permit udp host 151.99.125.2 eq domain host XX.XX.XX.XXX
access-list 101 deny ip XX.XX.XXX.XXX 0.0.0.7 any
access-list 101 permit icmp any host XX.XX.XX.XXX echo-reply
access-list 101 permit icmp any host XX.XX.XX.XXX time-exceeded
access-list 101 permit icmp any host XX.XX.XX.XXX unreachable
access-list 101 deny ip 10.0.0.0 0.255.255.255 any
access-list 101 deny ip 172.16.0.0 0.15.255.255 any
access-list 101 deny ip 192.168.0.0 0.0.255.255 any
access-list 101 deny ip 127.0.0.0 0.255.255.255 any
access-list 101 deny ip host 255.255.255.255 any
access-list 101 deny ip host 0.0.0.0 any
access-list 101 deny ip any any log
no cdp run
!
control-plane
!
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
login local
no modem enable
transport output telnet
line aux 0
login local
transport output telnet
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
scheduler max-task-time 5000
scheduler allocate 4000 1000
scheduler interval 500
end

era questo che volevi?
Ivan