Virtual-Access Flapping

Configurazioni per connettività ADSL, ISDN e switch per privati e piccole network

Moderatore: Federico.Lagni

Rispondi
Avatar utente
Manny
n00b
Messaggi: 16
Iscritto il: dom 22 giu , 2008 7:07 pm

Hola,
ho bisogno di consulenza per un problema che mi ritrovo sul router di casa (Cisco 877) con linea Tiscali Business.
Premesso che questo problema capita ad intervalli di tempo di settimane il mio desiderio è cercare di capire COSA lo causa.

Prima di tutto la configurazione del router:
version 12.4
service nagle
no service pad
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service internal
service sequence-numbers
!
hostname Manny-Home
!
boot-start-marker
boot-end-marker
!
logging exception 100000
logging count
logging message-counter syslog
logging userinfo
logging queue-limit 10000
logging buffered 150000 notifications
logging console critical
enable secret 5 xxxxxxxxxxxx
!
no aaa new-model
clock timezone GMT 1
clock summer-time GMT recurring
!
!
dot11 syslog
no ip source-route
no ip gratuitous-arps
ip icmp rate-limit unreachable 1000
!
!
ip dhcp excluded-address 192.168.1.254
!
ip dhcp pool DHCPHOME
network 192.168.1.0 255.255.255.0
default-router 192.168.1.254
dns-server 213.205.32.70 213.205.36.70
lease infinite
!
!
ip cef
no ip bootp server
no ip domain lookup
ip domain name cisco.com
ip name-server 213.205.32.70
ip name-server 213.205.36.70
ip inspect log drop-pkt
ip inspect max-incomplete low 300
ip inspect max-incomplete high 400
ip inspect one-minute low 300
ip inspect hashtable-size 2048
ip inspect tcp synwait-time 20
ip inspect tcp max-incomplete host 300 block-time 60
ip inspect name IDS tcp
ip inspect name IDS udp
ip inspect name IDS ftp
login block-for 1 attempts 3 within 30
login quiet-mode access-class 101
login on-failure
login on-success
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
no spanning-tree vlan 10
!
!
!
archive
log config
hidekeys
!
!
!
!
!
interface Loopback0
ip address 217.133.xx.xx 255.255.255.255
!
interface Null0
no ip unreachables
!
interface ATM0
description ADSL2+ TISCALI
mtu 1464
no ip address
ip virtual-reassembly max-reassemblies 64
load-interval 60
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
dsl operating-mode adsl2+
dsl enable-training-log
dsl lom 200
dsl noise-margin -1
dsl gain-setting tx-offset 3
dsl bitswap both
hold-queue 4096 in
!
interface FastEthernet0
switchport access vlan 10
!
interface FastEthernet1
switchport access vlan 10
!
interface FastEthernet2
switchport access vlan 10
!
interface FastEthernet3
switchport access vlan 10
!
interface Virtual-Template1
no ip address
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
description Lan Interna
ip address 192.168.1.254 255.255.255.0
ip flow ingress
ip nat inside
ip virtual-reassembly
no ip mroute-cache
hold-queue 100 out
!
interface Dialer0
ip unnumbered Loopback0
ip mtu 1464
ip nat outside
ip virtual-reassembly max-reassemblies 64
encapsulation ppp
ip tcp header-compression
dialer pool 1
no cdp enable
ppp chap hostname [email protected]
ppp chap password 7 xxxxxxxxxxxx
ppp pap sent-username [email protected] password 7 xxxxx
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0
no ip http server
ip http access-class 23
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip nat pool POOL1 192.168.1.3 192.168.1.3 netmask 255.255.255.0 type rotary
ip nat inside source list 1 interface Loopback0 overload

ip nat inside destination list Online pool POOL1
!
ip access-list extended Online
permit tcp any any eq 27015
permit tcp any any range 27014 27050
permit tcp any any eq 3724
permit tcp any any range 6881 6999
permit tcp any any eq 54953
permit tcp any any eq 5900
permit tcp any any eq 8963
permit tcp any any eq 49131
permit tcp any any eq 36384
permit tcp any any eq 5739
!
access-list 1 permit 192.168.1.0 0.0.0.255
dialer-list 1 protocol ip permit
!
!
!
!
!
control-plane
!
banner motd ^C
,. ,.
`\`\ /'/'
`\`\ /'/'
..`\`\:::/'/'.....
..,;;;'''''`\`\'/' ```````;;;,..
.:'' _/`\`\ ``;.
:::. (_)' `\`_ ,;;:
n:.``;;;,.... (_) ....,;;;'',::
:\ ``;;;;. ````::::::::'''''.n;;;'' :
: \ ```::n::::::::::'''/ \ :
: \ If a man does not keep pace :
: \with his companions, perhaps :
: \ it is because he hears a \ :
: \ different drummer. \ /;
::. \-/Henry David Thoreau v;:
`:.``:::v.... \ / ....;;;''.;'
``:::... ```::::::v:''' ...;;;''
````::::::::::'''^C
!
line con 0
password 7 xxxxxxx
login
no modem enable
line aux 0
line vty 0 4
exec-timeout 0 0
password 7 xxxxxxxx
login
transport input telnet ssh
transport output telnet ssh
!
scheduler max-task-time 5000

Che è molto basilare.

Ora il problema in se:

000065: *Apr 25 18:58:42.663 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
000066: *Apr 25 18:58:45.027 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
000067: *Apr 25 18:59:07.843 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
000068: *Apr 25 18:59:10.179 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
000069: *Apr 25 19:01:08.539 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
000070: *Apr 25 19:01:10.815 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
000071: *Apr 25 19:03:09.235 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
000072: *Apr 25 19:03:11.567 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
000073: *Apr 25 19:03:22.667 GMT: %SYS-5-PRIV_AUTH_PASS: Privilege level set to 15 by unknown on vty0 (192.168.1.3)
000074: *Apr 25 19:07:10.619 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
000075: *Apr 25 19:07:12.979 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
000076: *Apr 25 19:07:25.675 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
000077: *Apr 25 19:07:28.031 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
000078: *Apr 25 19:08:05.907 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
000079: *Apr 25 19:08:08.263 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
000080: *Apr 25 19:09:11.307 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
000081: *Apr 25 19:09:13.615 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
000082: *Apr 25 19:10:31.779 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
000083: *Apr 25 19:10:34.207 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
000084: *Apr 25 19:10:46.823 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
000085: *Apr 25 19:10:49.087 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
000086: *Apr 25 19:15:53.619 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
000087: *Apr 25 19:15:55.935 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
000088: *Apr 25 19:17:29.139 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
000089: *Apr 25 19:17:31.451 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
000090: *Apr 25 19:19:55.011 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
000091: *Apr 25 19:19:57.331 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
Questo causa la perdita di 1-3 pacchetti e assolutamente nessuna caduta dell'interfaccia ATM.

Con un debug dell'atm ricevo questo messaggio nel momento dell'up/down del virtual-access:

000121: *Apr 25 19:24:39.251 GMT: ATM: Repapulate, Virtual-Access3

Ho naturalmente provato con firmware diversi e a modificare i parametri relativi all'atm.

Questo lo show dsl int atm:
Manny-Home#sh dsl interface atM 0
ATM0
Alcatel 20190 chipset information
ATU-R (DS) ATU-C (US)
Modem Status: Showtime (DMTDSL_SHOWTIME)
DSL Mode: ITU G.992.5 (ADSL2+) Annex A
ITU STD NUM: 0x03 0x2
Chip Vendor ID: 'STMI' 'GSPN'
Chip Vendor Specific: 0x0000 0x0010
Chip Vendor Country: 0x0F 0xFF
Modem Vendor ID: 'CSCO' 'GSPN'
Modem Vendor Specific: 0x0000 0x1000
Modem Vendor Country: 0xB5 0xFF
Serial Number Near: FHK1235200S
Serial Number Far:
Modem VerChip ID: C196 (0)
DFE BOM: DFE3.0 Annex A (1)
Capacity Used: 100% 92%
Noise Margin: 12.0 dB 13.5 dB
Output Power: 20.0 dBm 6.5 dBm
Attenuation: 22.0 dB 4.0 dB
FEC ES Errors: 3 0
ES Errors: 1 1
SES Errors: 1 3
LOSES Errors: 1 0
UES Errors: 0 110
Defect Status: None None
Last Fail Code: None
Watchdog Counter: 0xA0
Watchdog Resets: 0
Selftest Result: 0x00
Subfunction: 0x00
Interrupts: 9956 (0 spurious)
PHY Access Err: 0
Activations: 2
LED Status: ON
LED On Time: 100
LED Off Time: 100
Init FW: init_AMR-4.0.015.bin
Operation FW: AMR-4.0.015.bin
FW Source: external
FW Version: 4.0.15

DS Channel1 DS Channel0 US Channel1 US Channel0
Speed (kbps): 0 18579 0 1046
Cells: 0 193879 0 5403834
Reed-Solomon EC: 0 27228 0 0
CRC Errors: 0 24 0 2
Header Errors: 0 23 0 0
Total BER: 0E-0 6606E-10
Leakage Average BER: 0E-0 6606E-10
Interleave Delay: 0 57 0 6
ATU-R (DS) ATU-C (US)
Bitswap: enabled enabled
Bitswap success: 0 0
Bitswap failure: 0 0

LOM Monitoring : Enabled
LOM watch configured for 200 times
LOM appeared continuously for 0 times
Ripeto, con nessun cambiamento di configurazione da parte mia a volte il problema non si presenta per giorni/settimane, per poi comparire senza (ancora una volta) nessuna modifica da parte mia.

Apparte questo la linea va benone.

Ringrazio anticipatamente chiunque abbia voglia di aiutarmi per scoprire la causa di questa anomalia

Grazie
Rispondi