Есть циска 2811 (c2800nm-advipservicesk9-mz.12.4-1). Со вчерашнего дня вылезла проблема - периодически перезагружается. Причём конфиг не менял уже месяца 2. В syslog не пишет никаких причин, только это (кусок):
000056: *Mar 17 12:29:55.143: %SYS-5-CONFIG_I: Configured from console by admin on vty0 (10.0.0.101)
000057: *Mar 17 12:38:30.043: %FW-4-ALERT_ON: getting aggressive, count (501/500) current 1-min rate: 159
000058: *Mar 17 13:26:05.707: %FW-4-ALERT_OFF: calming down, count (1/400) current 1-min rate: 179
000059: *Mar 17 13:45:05.978: %FW-4-ALERT_ON: getting aggressive, count (501/500) current 1-min rate: 402
000060: *Mar 17 13:45:10.730: %FW-4-ALERT_OFF: calming down, count (0/400) current 1-min rate: 342
000061: *Mar 17 14:07:02.610: %FW-4-ALERT_ON: getting aggressive, count (501/500) current 1-min rate: 170
000062: *Mar 17 14:08:07.142: %FW-4-ALERT_OFF: calming down, count (1/400) current 1-min rate: 228
000063: *Mar 17 14:28:15.534: %FW-4-ALERT_ON: getting aggressive, count (501/500) current 1-min rate: 157
000064: *Mar 17 14:30:07.046: %FW-4-ALERT_OFF: calming down, count (1/400) current 1-min rate: 217
Чтобы это значило?
Это означает следующее:
Either the max-incomplete high threshold of half-open connections or the new connection initiation rate has been exceeded. This error message indicates that an unusually high rate of new connections is coming through the firewall, and a DOS attack may be in progress. This message is issued only when the max-incomplete high threshold is crossed.Кто-то или что-то Вас долбит.
>Это означает следующее:
>Either the max-incomplete high threshold of half-open connections or the new connection
>initiation rate has been exceeded. This error message indicates that an
>unusually high rate of new connections is coming through the firewall,
>and a DOS attack may be in progress. This message is
>issued only when the max-incomplete high threshold is crossed.
>
>Кто-то или что-то Вас долбит.
и это может привести к перезагрузке?
>>Это означает следующее:
>>Either the max-incomplete high threshold of half-open connections or the new connection
>>initiation rate has been exceeded. This error message indicates that an
>>unusually high rate of new connections is coming through the firewall,
>>and a DOS attack may be in progress. This message is
>>issued only when the max-incomplete high threshold is crossed.
>>
>>Кто-то или что-то Вас долбит.
>
>
>и это может привести к перезагрузке?
c2800nm-advipservicesk9-mz.12.4-112.4.1 битый, меняйте..
>>>Это означает следующее:
>>>Either the max-incomplete high threshold of half-open connections or the new connection
>>>initiation rate has been exceeded. This error message indicates that an
>>>unusually high rate of new connections is coming through the firewall,
>>>and a DOS attack may be in progress. This message is
>>>issued only when the max-incomplete high threshold is crossed.
>>>
>>>Кто-то или что-то Вас долбит.
>>
>>
>>и это может привести к перезагрузке?
>
>
>c2800nm-advipservicesk9-mz.12.4-1
>
>12.4.1 битый, меняйте..
12.4.3 будет нормально?