Исходное сообщение
"2811 виснет РОВНО раз в неделю" Отправлено Alting, 03-Июн-09 11:06
>А конфиг еще можно посмотреть? Current configuration : 11856 bytes ! ! Last configuration change at 10:03:48 Moscow Wed Jun 3 2009 by mrglife ! NVRAM config last updated at 08:24:35 Moscow Wed Jun 3 2009 by mrglife ! version 12.4 no service pad service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption service sequence-numbers ! hostname sovintel ! boot-start-marker boot-end-marker ! security authentication failure rate 3 log security passwords min-length 6 no logging buffered logging console critical enable secret 5 XXX ! aaa new-model ! ! aaa authentication login default local aaa authorization exec default local aaa accounting system default start-stop group radius ! ! aaa session-id common clock timezone Moscow 3 clock summer-time Moscow date Mar 30 2003 2:00 Oct 26 2003 3:00 ! crypto pki trustpoint TP-self-signed-2521258588 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-2521258588 revocation-check none rsakeypair TP-self-signed-2521258588 ! ! crypto pki certificate chain TP-self-signed-2521258588 certificate self-signed 01   30820250 308201B9 A0030201 02020101 300D0609 2A864886 F70D0101 04050030   31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274   69666963 6174652D 32353231 32353835 3838301E 170D3038 31323132 31303531   35305A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649   4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 35323132   35383538 3830819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281   8100CAFE 2981B041 84A7B13D 15FE67F1 904DB674 9D2AF2B8 1BF98540 157096D1   86816347 B26C0A4D B5636F49 C8957173 2831511D CAB6F19C 146EB790 03482604   152EBA01 BE787FE6 222F8862 A01E5D5B E60F58E7 12365FB6 914660E5 89E90226   0A3B3F3E 7C901453 407B3737 03960593 E9469F62 DE6903A4 4DD784C4 1906EED1   07630203 010001A3 78307630 0F060355 1D130101 FF040530 030101FF 30230603   551D1104 1C301A82 18736F76 696E7465 6C2E6D72 672E636F 6D2E6D72 672E636F   6D301F06 03551D23 04183016 8014A049 ED367286 E72286E5 950D85A6 8273F81C   2A7D301D 0603551D 0E041604 14A049ED 367286E7 2286E595 0D85A682 73F81C2A   7D300D06 092A8648 86F70D01 01040500 03818100 15BCEDBB 21FA83ED 9912CDF6   625C914A DF85C00D 538E61DA 11A67687 264A1E9B 0D181AF2 AD26A597 8E4DBD0E   4511305F D6ADC733 2A7C12E6 78E2F569 A08741A5 20615E83 6D641EEC 0C151F85   D421F949 826A9BE4 C29FFDDC 4344C117 42C061F7 20D74288 99C2EB2B 78B2763F   5E47C670 BC5A6344 3D455D64 2A4B042E 2F7F769E       quit no ip source-route ! ! ip nbar port-map custom-01 udp 1526 ip nbar port-map custom-01 tcp 1526 ip cef ! ! no ip bootp server ip domain name mrg.com ip name-server 194.85.128.10 ip name-server 212.44.130.6 ip auth-proxy max-nodata-conns 3 ip admission max-nodata-conns 3 ! multilink bundle-name authenticated ! ! voice-card 0 no dspfarm ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! username mrglife privilege 15 view root secret 5 XXX username mrg privilege 15 secret 5 XXX ! ! archive log config   hidekeys ! ! ip tcp synwait-time 10 ip ssh time-out 60 ip ssh authentication-retries 2 ! ! ! ! interface FastEthernet0/0 description $ETH-SW-LAUNCH$$INTF-INFO-FE 0/0$$ES_LAN$$FW_INSIDE$$ETH-LAN$ ip address X.X.X.X 255.255.255.248 ip access-group 105 in ip nbar protocol-discovery ip flow ingress ip flow egress ip virtual-reassembly duplex auto speed auto no mop enabled ! interface FastEthernet0/1 description $FW_OUTSIDE$$ES_WAN$$ETH-WAN$ ip address Y.Y.Y.Y 255.255.255.252 ip access-group 100 in no ip redirects no ip unreachables no ip proxy-arp ip nbar protocol-discovery ip flow ingress ip flow egress ip virtual-reassembly duplex auto speed auto no mop enabled ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 FastEthernet0/1 ! ip flow-cache timeout active 1 ip flow-export source FastEthernet0/0 ip flow-export version 5 ip flow-export destination Z.Z.Z.Z 9996 ! ip http server ip http access-class 11 ip http authentication local ip http secure-server ip http timeout-policy idle 60 life 86400 requests 10000 ! logging facility local1 logging Q.Q.Q.Q access-list 2 remark Auto generated by SDM Management Access feature access-list 2 remark SDM_ACL Category=1 access-list 2 permit 89.20.0.0 0.0.255.255 access-list 2 permit 77.247.188.88 0.0.0.7 access-list 3 remark Auto generated by SDM Management Access feature access-list 3 remark SDM_ACL Category=1 access-list 3 permit 77.248.188.88 0.0.0.7 access-list 3 permit 77.247.188.88 0.0.0.3 access-list 4 permit 192.168.222.0 0.0.0.255 access-list 5 remark Auto generated by SDM Management Access feature access-list 5 remark SDM_ACL Category=1 access-list 5 permit 77.247.188.88 0.0.0.7 access-list 6 remark Auto generated by SDM Management Access feature access-list 6 remark SDM_ACL Category=1 access-list 6 permit 77.247.188.88 0.0.0.7 access-list 7 remark Auto generated by SDM Management Access feature access-list 7 remark SDM_ACL Category=1 access-list 7 permit 79.111.0.0 0.0.255.255 access-list 7 permit 77.247.188.88 0.0.0.7 access-list 7 permit 81.211.37.160 0.0.0.7 access-list 8 remark Auto generated by SDM Management Access feature access-list 8 remark SDM_ACL Category=1 access-list 8 permit 81.211.37.160 0.0.0.7 access-list 8 permit 79.111.0.0 0.0.255.255 access-list 8 permit 77.247.188.88 0.0.0.7 access-list 9 remark Auto generated by SDM Management Access feature access-list 9 remark SDM_ACL Category=1 access-list 9 permit 79.111.0.0 0.0.255.255 access-list 9 permit 81.211.37.160 0.0.0.7 access-list 9 permit 77.247.188.88 0.0.0.7 access-list 10 remark Auto generated by SDM Management Access feature access-list 10 remark SDM_ACL Category=1 access-list 10 permit 77.247.188.88 0.0.0.7 access-list 10 permit 79.111.0.0 0.0.255.255 access-list 10 permit 81.211.37.160 0.0.0.7 access-list 11 remark Auto generated by SDM Management Access feature access-list 11 remark SDM_ACL Category=1 access-list 11 permit 95.220.0.0 0.0.255.255 access-list 11 permit 81.211.37.160 0.0.0.7 access-list 11 permit 79.111.0.0 0.0.255.255 access-list 11 permit 77.247.188.88 0.0.0.7 access-list 23 remark SDM_ACL Category=17 access-list 23 permit 89.20.0.0 0.0.255.255 access-list 23 permit 77.247.188.88 0.0.0.7 access-list 23 permit 195.94.230.124 0.0.0.3 access-list 23 permit 79.111.0.0 0.0.255.255 access-list 100 remark Auto generated by SDM Management Access feature access-list 100 remark SDM_ACL Category=1 access-list 100 permit tcp 95.220.0.0 0.0.255.255 host 212.119.215.86 eq 22 access-list 100 permit tcp 81.211.37.160 0.0.0.7 host 212.119.215.86 eq 22 access-list 100 permit tcp 79.111.0.0 0.0.255.255 host 212.119.215.86 eq 22 access-list 100 permit tcp 77.247.188.88 0.0.0.7 host 212.119.215.86 eq 22 access-list 100 permit tcp 95.220.0.0 0.0.255.255 host 212.119.215.86 eq 443 access-list 100 permit tcp 79.111.0.0 0.0.255.255 host 212.119.215.86 eq 443 access-list 100 permit tcp 77.247.188.88 0.0.0.7 host 212.119.215.86 eq 443 access-list 100 permit tcp 81.211.37.160 0.0.0.7 host 212.119.215.86 eq 443 access-list 100 permit tcp 95.220.0.0 0.0.255.255 host 212.119.215.86 eq cmd access-list 100 permit tcp 81.211.37.160 0.0.0.7 host 212.119.215.86 eq cmd access-list 100 permit tcp 79.111.0.0 0.0.255.255 host 212.119.215.86 eq cmd access-list 100 permit tcp 77.247.188.88 0.0.0.7 host 212.119.215.86 eq cmd access-list 100 permit udp 81.211.37.160 0.0.0.7 host 212.119.215.86 eq snmp access-list 100 permit udp 79.111.0.0 0.0.255.255 host 212.119.215.86 eq snmp access-list 100 permit udp 77.247.188.88 0.0.0.7 host 212.119.215.86 eq snmp access-list 100 deny   tcp any host 212.119.215.86 eq telnet access-list 100 deny   tcp any host 212.119.215.86 eq 22 access-list 100 deny   tcp any host 212.119.215.86 eq www access-list 100 deny   tcp any host 212.119.215.86 eq 443 access-list 100 deny   tcp any host 212.119.215.86 eq cmd access-list 100 deny   udp any host 212.119.215.86 eq snmp access-list 100 permit ip any any access-list 101 remark Auto generated by SDM Management Access feature access-list 101 remark SDM_ACL Category=1 access-list 101 permit ip 95.220.0.0 0.0.255.255 any access-list 101 permit ip 79.111.0.0 0.0.255.255 any access-list 101 permit ip 81.211.37.160 0.0.0.7 any access-list 101 permit ip 77.247.188.88 0.0.0.7 any access-list 101 permit ip 77.248.188.88 0.0.0.7 any access-list 101 permit ip 192.0.0.0 0.255.255.255 any access-list 101 permit ip 89.20.0.0 0.0.255.255 any access-list 101 permit ip 217.151.129.128 0.0.0.7 any access-list 101 permit ip 195.94.230.124 0.0.0.3 any access-list 102 remark Auto generated by SDM Management Access feature access-list 102 remark SDM_ACL Category=1 access-list 102 permit ip 95.220.0.0 0.0.255.255 any access-list 102 permit ip 79.111.0.0 0.0.255.255 any access-list 102 permit ip 81.211.37.160 0.0.0.7 any access-list 102 permit ip 77.247.188.88 0.0.0.7 any access-list 102 permit ip 77.248.188.88 0.0.0.7 any access-list 102 permit ip 192.0.0.0 0.255.255.255 any access-list 102 permit ip 89.20.0.0 0.0.255.255 any access-list 102 permit ip 217.151.129.128 0.0.0.7 any access-list 102 permit ip 195.94.230.124 0.0.0.3 any access-list 105 remark Auto generated by SDM Management Access feature access-list 105 remark SDM_ACL Category=1 access-list 105 permit tcp 95.220.0.0 0.0.255.255 host 81.211.37.161 eq 22 access-list 105 permit tcp 77.247.188.88 0.0.0.7 host 81.211.37.161 eq 22 access-list 105 permit tcp 79.111.0.0 0.0.255.255 host 81.211.37.161 eq 22 access-list 105 permit tcp 81.211.37.160 0.0.0.7 host 81.211.37.161 eq 22 access-list 105 permit tcp 95.220.0.0 0.0.255.255 host 81.211.37.161 eq 443 access-list 105 permit tcp 81.211.37.160 0.0.0.7 host 81.211.37.161 eq 443 access-list 105 permit tcp 79.111.0.0 0.0.255.255 host 81.211.37.161 eq 443 access-list 105 permit tcp 77.247.188.88 0.0.0.7 host 81.211.37.161 eq 443 access-list 105 permit tcp 95.220.0.0 0.0.255.255 host 81.211.37.161 eq cmd access-list 105 permit tcp 77.247.188.88 0.0.0.7 host 81.211.37.161 eq cmd access-list 105 permit tcp 79.111.0.0 0.0.255.255 host 81.211.37.161 eq cmd access-list 105 permit tcp 81.211.37.160 0.0.0.7 host 81.211.37.161 eq cmd access-list 105 permit udp 77.247.188.88 0.0.0.7 host 81.211.37.161 eq snmp access-list 105 permit udp 79.111.0.0 0.0.255.255 host 81.211.37.161 eq snmp access-list 105 permit udp 81.211.37.160 0.0.0.7 host 81.211.37.161 eq snmp access-list 105 deny   tcp any host 81.211.37.161 eq telnet access-list 105 deny   tcp any host 81.211.37.161 eq 22 access-list 105 deny   tcp any host 81.211.37.161 eq www access-list 105 deny   tcp any host 81.211.37.161 eq 443 access-list 105 deny   tcp any host 81.211.37.161 eq cmd access-list 105 deny   udp any host 81.211.37.161 eq snmp access-list 105 deny   udp any host 81.211.37.162 eq snmp access-list 105 permit tcp 192.0.0.0 0.255.255.255 host 192.168.6.254 access-list 105 permit icmp 192.0.0.0 0.255.255.255 host 192.168.6.254 access-list 105 permit ip 192.0.0.0 0.255.255.255 host 192.168.6.254 access-list 105 permit ip any any snmp-server community public RO snmp-server community private RW snmp-server contact admin@mrggroup.ru snmp-server host Z.Z.Z.Z private no cdp run ! ! ! ! ! ! control-plane ! ! ! ! ! ! ! ! ! banner login ^CAuthorized access only! Disconnect IMMEDIATELY if you are not an authorized user!^C ! line con 0 transport output telnet line aux 0 transport output telnet line vty 0 4 access-class 101 in exec-timeout 60 0 privilege level 15 transport input telnet ssh line vty 5 15 access-class 102 in privilege level 15 transport input telnet ssh ! scheduler allocate 20000 1000 ntp clock-period 17180170 ntp update-calendar ntp server 195.2.64.5 source FastEthernet0/1 prefer ! end