dopo qualche minuto che faccio partire emule, il mio 1801 si inchioda con il seguente errore:
Feb 25 21:46:51.051: %AAA-3-ACCT_LOW_MEM_UID_FAIL: AAA unable to create UID for incoming calls due to insufficient processor memory
Ho fatto un sh proc memory sorted e questo è quello che è uscito:
Processor Pool Total: 55256388 Used: 55229240 Free: 27148
I/O Pool Total: 12582912 Used: 8485264 Free: 4097648
Reserve Pool Total: 262144 Used: 48 Free: 262096
Codice: Seleziona tutto
PID TTY Allocated Freed Holding Getbufs Retbufs Process
0 0 85346912 50222944 30883644 0 0 *Init*
85 0 11433320 454272 10986292 0 0 IP ARP Adjacency
1 0 9202704 582332 8627616 0 0 Chunk Manager
84 0 6952560 1339112 5626692 977600 0 ADJ resolve proc
0 0 0 0 1701364 0 0 *MallocLite*
0 0 56859884 55665004 1296264 1540156 0 *Dead*
87 0 1380720 273188 313240 43944 0 IP Input
11 0 2791036 2487948 310332 0 0 ARP Input
111 0 997556 0 278432 0 0 IP Background
24 0 259312 0 269556 99792 0 EEM ED Syslog
170 0 218332 504 215828 0 0 Crypto HW Proc
220 0 187528 0 194772 0 0 EEM Server
5 0 114988 0 122232 23140 0 Pool Manager
182 0 109184 532 117896 0 0 Crypto WUI
158 0 77772 1104 84764 15600 0 Inspect process
167 0 76468 252 83460 0 0 HTTP Process
138 0 940 0 62184 0 0 COPS
3 0 178808 134704 57212 0 0 Exec
80 0 49384 0 56628 0 0 ACCT Periodic Pr
86 0 49384 0 56628 0 0 IP ARP Retry Age
231 0 39280 252 38124 0 0 DHCPD Receive
12 0 29800 66028 33796 780 0 ARP Background
156 0 16812 252 29804 0 0 IPS Auto Update
123 0 15240476 6032660 27960 0 0 HTTP CORE
ecc ecc.. (Ho tagliato un po, non credo che il resto sia significativo...)
posto anche la configurazione:
Codice: Seleziona tutto
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no logging buffered
enable secret 5 $1$C0H1$qPuFxTBc1s2ElVbJgtJAV1
!
aaa new-model
!
!
!
aaa session-id common
!
resource policy
!
ip subnet-zero
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1 192.168.1.9
ip dhcp excluded-address 192.168.1.201 192.168.1.254
!
ip dhcp pool PoolCasa
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 192.168.1.2
lease infinite
!
!
ip dhcp update dns
ip inspect name SDM_LOW cuseeme
ip inspect name SDM_LOW dns
ip inspect name SDM_LOW ftp
ip inspect name SDM_LOW h323
ip inspect name SDM_LOW https
ip inspect name SDM_LOW icmp
ip inspect name SDM_LOW imap
ip inspect name SDM_LOW pop3
ip inspect name SDM_LOW netshow
ip inspect name SDM_LOW rcmd
ip inspect name SDM_LOW realaudio
ip inspect name SDM_LOW rtsp
ip inspect name SDM_LOW esmtp
ip inspect name SDM_LOW sqlnet
ip inspect name SDM_LOW streamworks
ip inspect name SDM_LOW tftp
ip inspect name SDM_LOW tcp
ip inspect name SDM_LOW udp
ip inspect name SDM_LOW vdolive
!
!
!
username matteo privilege 15 view root secret 5 $1$tA2M$3wLvbRfki7somGAhdKTZa/
!
!
!
!
!
!
interface FastEthernet0
description $FW_OUTSIDE$
ip address dhcp
ip access-group 101 in
ip nat outside
ip inspect SDM_LOW in
ip inspect SDM_LOW out
ip virtual-reassembly
duplex auto
speed auto
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
!
interface FastEthernet5
!
interface FastEthernet6
!
interface FastEthernet7
!
interface FastEthernet8
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
dsl operating-mode auto
!
interface Vlan1
description $FW_INSIDE$
ip address 192.168.1.1 255.255.255.0
ip access-group 100 in
ip nat inside
ip inspect SDM_LOW out
ip virtual-reassembly
!
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet0
!
!
ip http server
no ip http secure-server
ip nat translation timeout 420
ip nat translation tcp-timeout 120
ip nat translation udp-timeout 120
ip nat translation finrst-timeout 300
ip nat translation syn-timeout 120
ip nat translation dns-timeout 300
ip nat translation icmp-timeout 120
ip nat inside source list 9 interface FastEthernet0 overload
ip nat inside source static udp 192.168.1.20 4711 interface FastEthernet0 4711
ip nat inside source static udp 192.168.1.20 4665 interface FastEthernet0 4665
ip nat inside source static udp 192.168.1.20 4672 interface FastEthernet0 4672
ip nat inside source static tcp 192.168.1.20 4662 interface FastEthernet0 4662
!
access-list 9 remark INSIDE_IF=Vlan1
access-list 9 remark SDM_ACL Category=2
access-list 9 permit 192.168.1.0 0.0.0.255
!
access-list 100 remark modified by Matteo
access-list 100 remark SDM_ACL Category=1
access-list 100 deny ip host 255.255.255.255 any
access-list 100 deny ip 127.0.0.0 0.255.255.255 any
access-list 100 permit ip any any
!
access-list 101 remark modified by Matteo
access-list 101 remark SDM_ACL Category=1
access-list 101 permit udp host 29.253.128.10 eq domain any
access-list 101 permit udp host 1.253.128.39 eq domain any
access-list 101 permit tcp any any eq www
access-list 101 permit tcp any any eq 4662
access-list 101 permit udp any any eq 4672
access-list 101 permit udp any any eq 4665
access-list 101 permit udp any eq bootps any eq bootpc
access-list 101 permit icmp any any echo-reply
access-list 101 permit icmp any any time-exceeded
access-list 101 permit icmp any any unreachable
access-list 101 deny ip 10.0.0.0 0.255.255.255 any
access-list 101 deny ip 172.16.0.0 0.15.255.255 any
access-list 101 deny ip 192.168.0.0 0.0.255.255 any
access-list 101 deny ip 192.168.1.0 0.0.0.255 any
access-list 101 deny ip 127.0.0.0 0.255.255.255 any
access-list 101 deny ip host 255.255.255.255 any
access-list 101 deny ip any any
!
!
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
!
scheduler max-task-time 5000
scheduler allocate 4000 1000
scheduler interval 500
end
Grazie.
