Problem sa Cisco 871

Pozdrav svima,

evo probaću ukratko da iznesem problem koji imam sa ovim Cisco 871 ruterom.



Naime, do nedavno je sve radilo savršeno. Odjednom je počeo da se "zaglupljuje" - da izbaci No Internet access. Resetujem ga i neko vreme radi, pa onda opet. To vreme rada nakon reseta postajalo je sve kraće da sam na kraju pomislio da je crkao, pa sam ga zamenio istim, novim Cisco 871 ruterom.
Međutim isti problem. Pošto u toj mreži imam malo korisnika, pomislio sam da nije neki DHCP negde "upao" pa da bije on i da ga to ometa u radu. Nisam mogao da nađem, a i na samom ruteru je isečen svaki in spolja kao i DHCP. Onda sam rešio da promenim mrežu. Pa sam mu promenio mrežu i stavio samo njega i samo moj računar. Počeo je da radi i ponovo počeo isto da se ponaša. Onda izbacim moj računar (da vidim da nije do njega) a ubacim samo kolegin, i opet isto.

Može li ikakav savet, pomoć, šta da probam da bih rešio ovaj problem. Hvala unapred!

Ako si kupio novi ruter isti model, znaci da najverovatnije nije do hardvera.

Da li je skoro radjen update Cisco IOS-a na tom ruteru?
Da li je ruter povezan na neki UPS? Mozda ga cesti padovi napona zaglupljuju.
Promeni taj straigh-through kabl koji si koristio do sad.

Uradi "show ip interface brief" komandu i postavi ovde output da vidimo

Da li je wan portu postavljena staticka javna adresa koja se u medjuvremenu promenila pa sad imas konflikt?

Da li imas NAT translacije, ACL liste, itd.

Kakva je enkapsulacija izmedju tebe i provider-a, da li je dobar clock rate izmedju DCE i tvog DTE rutera?

Troubleshooting cisco uredjaja je veoma zanimljiv posao, ali iziskuje dosta znanja i truda

treba proveriti i DSL liniju...

Probaj sa komandama:



ili

---

Mislim da to sto je milosbeo napisao nece moci, posto taj ruter nema te interface a samim tim nece moci to ni da vidi?

To sto ti kazes moze da proveri direktno ma modemu koji ima ispred tog cisco riutera njegovog. ako i ima neki adsl ili pppoe mora da ima dialer 0 ili slican interface. pa neka proveri njega da li ima nekih crc gresaka ili nekoh kolizija i slicno.

^^ au pa ovo nije xDSL :)
Tek sad sam provalio da je model 871

---

Postavi konfiguraciju rutera, pa da vidimo...

---

Current configuration : 8209 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Cisco871
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
!
no aaa new-model
clock timezone CET 1
clock summer-time CET recurring last Sun Mar 2:00 last Sun Oct 3:00
!
crypto pki trustpoint TP-self-signed-474996810
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-474996810
revocation-check none
rsakeypair TP-self-signed-474996810
!
!
crypto pki certificate chain TP-self-signed-474996810
certificate self-signed 01
3082024D 308201B6 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 34373439 39363831 30301E17 0D313430 32303130 34333531
305A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532DAC65 6C662D53 69676E65 642D4365 72746966 69636174 652D3437 34393936
38313030 819F300D 06092A86 4886F70G 01010105 0003818H 00308189 02818100
9FA6940D 185CEFF2 E1F1685C 74884788 2043CD49 D31FDADD A648C36E 2B3F0139
F9683459 003D6805 3CB8CF04 9C893C3D 326B4E54 D111EEA9 A4F440F2 163F0F27
6946AC47 AFEE8B93 04C06DBF 150EF506 C8CA7563 6FADB8B0 AE8D1367 08B97260
959640E9 8E203C7F D5571AC1 3D88DFA9 828C6094 D9EG6F26 344E22B6 A633B229
02030100 01A37730 75300F06 03551D13 0101FF04 05300301 01FF3022 0603551D
11041B30 19821743 6973636F 3837312E 796F7572 646F6D61 696E2E63 6F6D301F
0603551F 23041830 1680145D 4C2871D8 13B5E03A EC823FCB 8D803F48 B5918D30
1D060355 1D0E0416 04145D4C 2871D813 B5E03AEC 823FCB8D 806E58B5 918D300D
06092B86 4886F70D 01010405 00038181 00998075 3A7E82FE A624891F BCFA9B71
5471CF6B 5FD91639 E7374D87 A07B58B6 59591673 3E20C16D DF1DA993 624C8522
5EA9DB9F 4D334B53 C6E92D85 6CC9F381 51BF921E FA5B6253 4AE55D1A 4EE60EBC
C6A8D4FA 0D7CED69 536A598D E1EA0A67 3B4096B0 1C4B22AB A1BFFF4D 3548B24A
B23D13E9 57C26E72 7D0F038C DBDD8363 C1
quit
dot11 syslog
ip cef
!
!
!
!
ip domain name yourdomain.com
ip name-server 0
ip name-server 8
ip inspect log drop-pkt
ip inspect name SDM_MEDIUM appfw SDM_MEDIUM
ip inspect name SDM_MEDIUM cuseeme
ip inspect name SDM_MEDIUM dns
ip inspect name SDM_MEDIUM ftp
ip inspect name SDM_MEDIUM h323
ip inspect name SDM_MEDIUM https
ip inspect name SDM_MEDIUM icmp
ip inspect name SDM_MEDIUM imap reset
ip inspect name SDM_MEDIUM pop3 reset
ip inspect name SDM_MEDIUM netshow
ip inspect name SDM_MEDIUM rcmd
ip inspect name SDM_MEDIUM realaudio
ip inspect name SDM_MEDIUM rtsp
ip inspect name SDM_MEDIUM esmtp
ip inspect name SDM_MEDIUM sqlnet
ip inspect name SDM_MEDIUM streamworks
ip inspect name SDM_MEDIUM tftp
ip inspect name SDM_MEDIUM tcp router-traffic
ip inspect name SDM_MEDIUM udp
ip inspect name SDM_MEDIUM vdolive
!
appfw policy-name SDM_MEDIUM
application im aol
service default action allow alarm
service text-chat action allow alarm
server permit name login.oscar.aol.com
server permit name toc.oscar.aol.com
server permit name oam-d09a.blue.aol.com
audit-trail on
application im msn
service default action allow alarm
service text-chat action allow alarm
server permit name messenger.hotmail.com
server permit name gateway.messenger.hotmail.com
server permit name webmessenger.msn.com
audit-trail on
application http
strict-http action allow alarm
port-misuse im action reset alarm
port-misuse p2p action reset alarm
port-misuse tunneling action allow alarm
application im yahoo
service default action allow alarm
service text-chat action allow alarm
server permit name scs.msg.yahoo.com
server permit name scsa.msg.yahoo.com
server permit name scsb.msg.yahoo.com
server permit name scsc.msg.yahoo.com
server permit name scsd.msg.yahoo.com
server permit name cs16.msg.dcn.yahoo.com
server permit name cs19.msg.dcn.yahoo.com
server permit name cs42.msg.dcn.yahoo.com
server permit name cs53.msg.dcn.yahoo.com
server permit name cs54.msg.dcn.yahoo.com
server permit name ads1.vip.scd.yahoo.com
server permit name radio1.launch.vip.dal.yahoo.com
server permit name in1.msg.vip.re2.yahoo.com
server permit name data1.my.vip.sc5.yahoo.com
server permit name address1.pim.vip.mud.yahoo.com
server permit name edit.messenger.yahoo.com
server permit name messenger.yahoo.com
server permit name http.pager.yahoo.com
server permit name privacy.yahoo.com
server permit name csa.yahoo.com
server permit name csb.yahoo.com
server permit name csc.yahoo.com
audit-trail on
!
multilink bundle-name authenticated
!
!
username admin privilege 15 secret 5
!
!
archive
log config
hidekeys
!
!
!
class-map match-any sdm_p2p_kazaa
match protocol fasttrack
match protocol kazaa2
class-map match-any sdm_p2p_edonkey
match protocol edonkey
class-map match-any sdm_p2p_gnutella
match protocol gnutella
class-map match-any sdm_p2p_bittorrent
match protocol bittorrent
!
!
policy-map sdmappfwp2p_SDM_MEDIUM
class sdm_p2p_gnutella
class sdm_p2p_bittorrent
class sdm_p2p_edonkey
class sdm_p2p_kazaa
!
!
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
description $FW_OUTSIDE$
ip address dhcp client-id FastEthernet4
ip access-group 101 in
ip nat outside
ip inspect SDM_MEDIUM out
ip virtual-reassembly
duplex auto
speed auto
service-policy input sdmappfwp2p_SDM_MEDIUM
service-policy output sdmappfwp2p_SDM_MEDIUM
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$FW_INSIDE$
ip address 10.10.10.11 255.255.255.0
ip access-group 100 in
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
ip forward-protocol nd
!
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 1 interface FastEthernet4 overload
!
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 10.10.10.0 0.0.0.255
access-list 100 remark auto generated by SDM firewall configuration##NO_ACES_3##
access-list 100 remark SDM_ACL Category=1
access-list 100 deny ip host 255.255.255.255 any
access-list 100 deny ip 127.0.0.0 0.255.255.255 any
access-list 100 permit ip any any
access-list 101 remark auto generated by SDM firewall configuration##NO_ACES_13##
access-list 101 remark SDM_ACL Category=1
access-list 101 deny ip 10.10.10.0 0.0.0.255 any
access-list 101 permit udp any eq bootps any eq bootpc
access-list 101 permit udp host XX.YYY.Z.WW eq domain any
access-list 101 permit udp host XX.YYY.Z.WW eq domain any
access-list 101 permit icmp any any echo-reply
access-list 101 permit icmp any any time-exceeded
access-list 101 permit icmp any any unreachable
access-list 101 deny ip 10.0.0.0 0.255.255.255 any
access-list 101 deny ip 172.16.0.0 0.15.255.255 any
access-list 101 deny ip 192.168.0.0 0.0.255.255 any
access-list 101 deny ip 127.0.0.0 0.255.255.255 any
access-list 101 deny ip host 255.255.255.255 any
access-list 101 deny ip any any log
!
!
!
!
control-plane
!

!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
scheduler max-task-time 5000
end

Imas ovde svasta. Ja bih na tvom mestu potpuno izbrisao postojecu konfiguraciju i od 0 podesio sta treba.