Siccome uno show vale + di 1000 parole questo è il router:
sh ver
Cisco IOS Software, 2800 Software (C2800NM-SPSERVICESK9-M), Version 12.4(3f), RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2006 by Cisco Systems, Inc.
Compiled Fri 18-Aug-06 18:47 by alnguyen
ROM: System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)
Locri-CALL uptime is 10 hours, 1 minute
System returned to ROM by power-on
System image file is "flash:c2800nm-spservicesk9-mz.124-3f.bin"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
Cisco 2811 (revision 53.51) with 223232K/38912K bytes of memory.
Processor board ID FCZ1107710L
2 FastEthernet interfaces
8 Serial(sync/async) interfaces
DRAM configuration is 64 bits wide with parity enabled.
239K bytes of non-volatile configuration memory.
62720K bytes of ATA CompactFlash (Read/Write)
Configuration register is 0x2102
questa è la config:
sh runn
Building configuration...
Current configuration : 6088 bytes
!
version 12.4
service timestamps debug datetime localtime
service timestamps log datetime localtime
!
hostname x.x.x.x
!
boot-start-marker
boot system flash:c2800nm-spservicesk9-mz.124-3f.bin
boot system flash:c2800nm-spservicesk9-mz.124-6.T5.bin
boot-end-marker
no aaa new-model
!
resource policy
!
memory-size iomem 15
clock timezone CET 1
clock summer-time CET recurring
ip subnet-zero
no ip source-route
!
!
ip cef
!
!
no ip domain lookup
!
voice-card 0
no dspfarm
!
class-map match-all voice-out
match ip dscp ef
class-map match-all silver-in
match access-group 120
class-map match-all silver-out
match ip dscp af21
class-map match-all voice-in
match access-group 100
!
!
policy-map QOS-OUT
class voice-out
priority 5120
class silver-out
bandwidth 2400
policy-map MARK-IN
class voice-in
set ip dscp ef
class silver-in
police cir 387496000 bc 193748
conform-action set-dscp-transmit af21
exceed-action drop
class class-default
police cir 387496000 bc 193748
conform-action transmit
exceed-action drop
!
!
!
!
interface Multilink1
ip address 172.31.100.2 255.255.255.252
no ip redirects
no ip unreachables
ip route-cache policy
no ip mroute-cache
load-interval 30
no keepalive
fair-queue 64 256 256
no cdp enable
ppp multilink
ppp multilink fragment disable
ppp multilink group 1
max-reserved-bandwidth 100
hold-queue 120 out
!
interface FastEthernet0/0
ip address 192.168.224.1 255.255.254.0
no ip redirects
no ip unreachables
ip route-cache policy
no ip mroute-cache
load-interval 30
duplex full
speed 100
no cdp enable
service-policy input MARK-IN
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 2048
no ip address
no ip redirects
no ip unreachables
encapsulation ppp
ip route-cache policy
no snmp trap link-status
no fair-queue
serial restart-delay 0
no cdp enable
ppp multilink
ppp multilink group 1
max-reserved-bandwidth 100
!
interface Serial0/0/1
bandwidth 2048
no ip address
no ip redirects
no ip unreachables
encapsulation ppp
ip route-cache policy
no snmp trap link-status
no fair-queue
serial restart-delay 0
no cdp enable
ppp multilink
ppp multilink group 1
max-reserved-bandwidth 100
!
interface Serial0/1/0
bandwidth 2048
no ip address
no ip redirects
no ip unreachables
encapsulation ppp
ip route-cache policy
no snmp trap link-status
no fair-queue
serial restart-delay 0
no cdp enable
ppp multilink
ppp multilink group 1
max-reserved-bandwidth 100
!
interface Serial0/1/1
bandwidth 2048
no ip address
no ip redirects
no ip unreachables
encapsulation ppp
ip route-cache policy
no snmp trap link-status
no fair-queue
serial restart-delay 0
no cdp enable
ppp multilink
ppp multilink group 1
max-reserved-bandwidth 100
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
interface Serial0/2/1
no ip address
shutdown
clock rate 2000000
!
interface Serial0/3/0
no ip address
shutdown
clock rate 2000000
!
interface Serial0/3/1
no ip address
shutdown
clock rate 2000000
!
router eigrp 100
redistribute connected
network 172.31.0.0
network 192.168.224.0 0.0.1.255
auto-summary
!
ip classless
!
!
no ip http server
no ip http secure-server
!
access-list 10 permit x.x.x.x
access-list 10 permit 172.30.66.0 0.0.0.255
access-list 10 permit 172.30.68.0 0.0.0.255
access-list 10 permit 172.30.94.0 0.0.1.255
access-list 10 permit 172.31.234.96 0.0.0.15
access-list 100 remark VOICE TRAFFIC
access-list 100 permit udp any any range 16384 32767
access-list 100 permit ip any host 172.16.1.110
access-list 100 permit ip any host 172.16.1.111
access-list 100 permit ip any host 172.16.1.112
access-list 100 permit ip any host 172.16.1.113
access-list 100 permit ip any host 172.16.1.140
access-list 100 permit ip any host 172.16.1.118
access-list 100 permit ip any host 172.16.1.119
access-list 100 permit ip any host 172.16.1.120
access-list 100 permit ip any host 172.16.1.121
access-list 100 permit ip any host 172.16.1.122
access-list 100 permit ip any host 172.16.1.123
access-list 100 permit ip any host 172.16.1.124
access-list 100 permit ip any host 172.16.1.125
access-list 120 remark SILVER TRAFFIC
access-list 120 permit ip any host 172.16.1.134
access-list 120 permit ip any host 172.16.1.135
access-list 120 permit ip any host 172.16.1.148
access-list 120 permit ip any host 172.16.1.136
access-list 120 permit ip any host 172.16.1.158
snmp-server community control RO 10
snmp-server community gestione RW 10
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server host x.x.x.x control snmp
snmp-server host x.x.x.x control snmp
snmp-server host x.x.x.x control snmp
snmp-server host x.x.x.xcontrol snmp
snmp-server host x.x.x.x control snmp
no cdp run
!
!
!
control-plane
IL problema è che ho la CPU alta.Arriva al 100% anche con basso traffico intorno ai 4M.Le seriali del multilink sono da 2M l'una quindi 8M totali.
Chiaramente ho tolto le policy,acl,snmp e tutto quello che impatta di solito la cpu. Ho fatto un downgrade IOS per un bug che ho trovato.non ci sono processi alti nello show proc cpu e la memoria abbonda.
Pensavo fosse un problema di pps del 2811 ma non credo di avere più di 10000 pps e quindi siccome ho il cef dovrei essere ok.
mmmmm si si lo so non è una cosa facile ma se avete qualche idea possiamo condividerla.
ciauuuu
