Router cisco857 adsl che si "addormenta"

[pcplanet2000]

Ciao a tutti , vi sottopongo questo piccolo problema , adsl interbusiness con 8 ip statici e router cisco 857 con ultima versione di ios installata , naviga regolarmente ma dopo un certo periodo di inattività (notta la notte) senza utilizzo pc spenti , provando a navigare le pagine restano bloccate come se si addormentasse tutto ,spegnendo e riaccendendo il router tutto funziona senza problemi , fino al prossimo periodo di inattività ..
L'adsl è stata configurata non con l'indirizzo PTP ma con quello del del gateway consigliato dai fogli telecom.
Cosa potrebbe essere ?
Vi ringrazio per l'attenzione
Saluti
Fabrizio

[Wizard]

Se ci fai vedere la config forse ci viene qualche idea...

[pcplanet2000]

version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname yourname
!
boot-start-marker
boot-end-marker
!
logging buffered 51200
logging console critical
enable secret 5 $1$X/Nx$uW8epLi3w6UwTXugdXupx1
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication login sdm_vpn_xauth_ml_1 local
aaa authorization exec default local
aaa authorization network sdm_vpn_group_ml_1 local
!
!
aaa session-id common
clock timezone PCTime 1
clock summer-time PCTime date Mar 30 2003 2:00 Oct 26 2003 3:00
!
crypto pki trustpoint TP-self-signed-3205983418
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3205983418
revocation-check none
rsakeypair TP-self-signed-3205983418
!
!
crypto pki certificate chain TP-self-signed-3205983418
certificate self-signed 01 nvram:IOS-Self-Sig#5.cer
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1
!
ip dhcp pool sdm-pool1
import all
network 192.168.1.0 255.255.255.0
dns-server 151.99.125.2 151.99.0.100
default-router 192.168.1.1
!
!
ip cef
ip inspect name DEFAULT100 cuseeme
ip inspect name DEFAULT100 ftp
ip inspect name DEFAULT100 h323
ip inspect name DEFAULT100 icmp
ip inspect name DEFAULT100 rcmd
ip inspect name DEFAULT100 realaudio
ip inspect name DEFAULT100 rtsp
ip inspect name DEFAULT100 esmtp
ip inspect name DEFAULT100 sqlnet
ip inspect name DEFAULT100 streamworks
ip inspect name DEFAULT100 tftp
ip inspect name DEFAULT100 tcp
ip inspect name DEFAULT100 udp
ip inspect name DEFAULT100 vdolive
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
ip domain name interbusiness.it
ip name-server 151.99.125.2
ip name-server 151.99.0.100
!
!
!
username admin privilege 15 secret 5 $1$MvzY$.Ui.tsGa47AIT1if/1aJD/
!
!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
!
crypto isakmp client configuration group food2000
key angus
dns 192.168.1.1
wins 192.168.1.1
pool SDM_POOL_1
acl 104
include-local-lan
netmask 255.255.255.0
crypto isakmp profile sdm-ike-profile-1
match identity group food2000
client authentication list sdm_vpn_xauth_ml_1
isakmp authorization list sdm_vpn_group_ml_1
client configuration address respond
virtual-template 1
!
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec transform-set ESP-3DES-SHA1 esp-3des esp-sha-hmac
!
crypto ipsec profile SDM_Profile1
set transform-set ESP-3DES-SHA ESP-3DES-SHA1
set isakmp-profile sdm-ike-profile-1
!
!
crypto map food2000 1 ipsec-isakmp
description food2000
set peer 88.xx.xx.xxx
set transform-set ESP-3DES-SHA1
set pfs group1
match address 103
!
crypto ctcp port 10000
archive
log config
hidekeys
!
!
ip tcp synwait-time 10
ip ssh time-out 60
ip ssh authentication-retries 2
!
!
!
interface ATM0
no ip address
ip route-cache flow
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
description $ES_WAN$$FW_OUTSIDE$
ip address 88.xx.xx.xxx 255.255.255.248
ip access-group 101 in
ip verify unicast reverse-path
ip inspect DEFAULT100 out
ip nat outside
ip virtual-reassembly
pvc 8/35
encapsulation aal5snap
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Virtual-Template1 type tunnel
ip unnumbered ATM0.1
tunnel mode ipsec ipv4
tunnel protection ipsec profile SDM_Profile1
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$ES_LAN$$FW_INSIDE$
ip address 192.168.1.1 255.255.255.0
ip access-group 100 in
ip nat inside
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1452
!
ip local pool SDM_POOL_1 192.168.1.200 192.168.1.220
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 ATM0.1
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 1 interface ATM0.1 overload
ip nat outside source static udp 88.xx.xx.xxx 500 192.168.1.1 500 extendable
ip nat outside source static udp 88.xx.xx.xxx 4500 192.168.1.1 4500 extendable
!
logging trap debugging
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 100 remark auto generated by Cisco SDM Express firewall configuratio
n
access-list 100 remark SDM_ACL Category=1
access-list 100 deny ip 88.43.13.8 0.0.0.3 any
access-list 100 deny ip host 255.255.255.255 any
access-list 100 deny ip 127.0.0.0 0.255.255.255 any
access-list 100 permit ip any any
access-list 101 remark auto generated by Cisco SDM Express firewall configuratio
n
access-list 101 remark SDM_ACL Category=1
access-list 101 permit udp any host 88.xx.xx.xxx eq non500-isakmp
access-list 101 permit udp any host 88.xx.xx.xxx eq isakmp
access-list 101 permit esp any host 88.xx.xx.xxx
access-list 101 permit ahp any host 88.xx.xx.xxx
access-list 101 permit udp host 151.99.0.100 eq domain host 88.43.13.10
access-list 101 permit udp host 151.99.125.2 eq domain host 88.43.13.10
access-list 101 permit ip 192.168.1.0 0.0.0.255 any
access-list 101 permit icmp any host 88.xx.xx.xx echo-reply
access-list 101 permit icmp any host 88.xx.xx.xx time-exceeded
access-list 101 permit icmp any host 88.xx.xx.xx unreachable
access-list 101 deny ip 10.0.0.0 0.255.255.255 any
access-list 101 deny ip 172.16.0.0 0.15.255.255 any
access-list 101 deny ip 192.168.0.0 0.0.255.255 any
access-list 101 deny ip 127.0.0.0 0.255.255.255 any
access-list 101 deny ip host 255.255.255.255 any
access-list 101 deny ip host 0.0.0.0 any
access-list 101 permit ip any any
access-list 102 remark SDM_ACL Category=4
access-list 102 permit ip 192.168.1.0 0.0.0.255 any
access-list 103 remark SDM_ACL Category=4
access-list 103 remark IPSec Rule
access-list 103 permit ip 192.168.1.0 0.0.0.255 88.xx.xx.xxx 0.0.0.7
access-list 104 remark SDM_ACL Category=4
access-list 104 permit ip 192.168.1.0 0.0.0.255 any
no cdp run
!
control-plane
!
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
no modem enable
transport output telnet
line aux 0
transport output telnet
line vty 0 4
privilege level 15
transport input telnet ssh
!
scheduler max-task-time 5000
scheduler allocate 4000 1000
scheduler interval 500
end

ecco fatto !
grazie
fabrizio

[pcplanet2000]

ragazzi avete qualche news ?
Grazie ancora
Fabrizio

[Wizard]

Anche se la config è stata fatta via sdm direi che nn è colpa sua...
Io proverei a raccogliere qualche log x avere qualche informazione tecnica in più...
O tieni un pc collegato in console oppure mandi tutti i log ad un syslog così alla mattina ne sai un po' di +

[pcplanet2000]

Ho provato ad aggiungere su interfaccia ATM0.1
oam-pvc manage
oam retry 5 5 1

pare che adesso non si addormenti più .. ti farò sapere ..

saluti e grazie

fabrizio