OpenForum RSS: ��

�� (Andrei_V)

Mon, 15 Dec 2008 03:54:54 GMT

>ip nat translation timeout 600
>ip nat translation max-entries 15000

�� , �� ? �� - �� , �� ?

�� (Andrei_V)

Sun, 14 Dec 2008 11:29:28 GMT

>>�� ,
>
>�� . :)
>��, �� , �� :
>
>ip nat translation timeout 900
>ip nat translation max-entries 25000

�� 2 ��:

c3620#sh proc cpu s | e 0.00
CPU utilization for five seconds: 99%/9%; one minute: 99%; five minutes: 98%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
33 36731948 3697691 9933 87.08% 88.93% 87.99% 0 IP Input
105 1291764 2896761 445 0.92% 0.80% 0.89% 0 IP NAT Ager
52 88436 7216 12255 0.85% 0.10% 0.06% 0 IP Cache Ager
5 287120 47059 6101 0.42% 0.10% 0.06% 0 Check heaps

�� down-�. :(
�� clear ip nat tr * :(
�� :

Current configuration : 2705 bytes
!
version 12.2
service nagle
no service pad
service timestamps debug datetime localtime
service timestamps log datetime localtime
no service password-encryption
service comp

�� (Andrei_V)

Sun, 14 Dec 2008 10:56:59 GMT

>�� ,

�� . :)
��, �� , �� :

ip nat translation timeout 900
ip nat translation max-entries 25000

�� 124.4 kKbytes/sec:

c3620#sh ip nat st
Total active translations: 20471 (0 static, 20471 dynamic; 20470 extended)
Outside interfaces:
Serial1/0:0
Inside interfaces:
FastEthernet1/0
Hits: 41647408 Misses: 1421079
Expired translations: 1353102
Dynamic mappings:
-- Inside Source
[Id: 10] access-list 100 interface Serial1/0:0 refcount 20471

c3620#sh proc cpu s | e 0.00
CPU utilization for five seconds: 61%/10%; one minute: 67%; five minutes: 66%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
33 35148660 3684487 9539 50.90% 55.13% 53.91% 0 IP Input
105 1271252 2886453 440 0.62% 0.41% 0.46% 0 IP NAT Ager
3 24936 3297 7563 0.23% 0.02% 0.10% 66 Virtual Exec

�� -��

�� (APach)

Sun, 14 Dec 2008 07:34:05 GMT

�� .

�� ,

Defaults

timeout: 86,400 seconds (24 hours)
udp-timeout: 300 seconds (5 minutes)
dns-timeout: 60 seconds (1 minute)
tcp-timeout: 86,400 seconds (24 hours)
finrst-timeout: 60 seconds (1 minute)
icmp-timeout: 60 seconds (1 minute)
pptp-timeout: 86,400 seconds (24 hours)
syn-timeout: 60 seconds (1 minute)

�� (Andrei_V)

Sun, 14 Dec 2008 06:14:05 GMT

>�� , � �� , �
>�� 45 ��, � �� .

�� 1 �� .
ip nat tr timeout 3600
��?
�.�. �� ? �� , �� ?

�� (APach)

Sat, 13 Dec 2008 23:43:22 GMT

�� , � �� , � �� 45 ��, � �� .

PS: �� 24 ��, �� .

��.

�� (Andrei_V)

Sat, 13 Dec 2008 19:21:10 GMT

�� :
�� -�� . �� -�� "��", �� .

c3620#sh proc cpu s | e 0.0
CPU utilization for five seconds: 99%/20%; one minute: 97%; five minutes: 80%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
33 24658672 2666750 9246 77.27% 67.83% 54.75% 0 IP Input
105 967236 2102566 460 2.33% 6.60% 5.09% 0 IP NAT Ager

��

clear ip nat tr *

��

c3620#sh proc cpu s | e 0.00
CPU utilization for five seconds: 15%/9%; one minute: 16%; five minutes: 16%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
33 24939828 2738169 9108 5.98% 5.94% 6.29% 0 IP Input
105 988196 2155644 458 0.24% 0.23% 0.43% 0 IP NAT Ager

c3620#sh ip nat stat
Total active translations: 1676 (0 static, 1676 dynamic; 1675 extended)
Outside interfaces:
Serial1/0:0
Ins

�� (Andrei_V)

Fri, 12 Dec 2008 09:29:07 GMT

�� :
(�� 110-�� acl-� ��-�� )

interface FastEthernet1/0
description To Local
ip address 10.1.2.2 255.255.255.252
ip nat inside
speed 10
half-duplex
!
interface Serial1/0:0
description To Rostelecom
ip address 94.25.10.94 255.255.255.252
ip access-group 110 out
no ip proxy-arp
ip nat outside
no fair-queue
!
ip nat log translations syslog
ip nat translation max-entries 60000
ip nat pool to_rt2 94.25.10.94 94.25.10.94 netmask 255.255.255.252
ip nat inside source list 100 pool to_rt2 overload
ip classless
ip route 0.0.0.0 0.0.0.0 94.25.10.93 100
ip route 10.1.3.0 255.255.255.0 10.1.2.1
no ip http server
!
access-list 100 permit ip 10.1.3.0 0.0.0.255 any
access-list 100 deny ip any any
access-list 110 deny ip 10.1.3.0 0.0.0.255 any
access-list 110 permit ip any any

�� (lumenous)

Fri, 12 Dec 2008 04:12:01 GMT

�� , �� FastEthernet1/0 � �� 10.1.2.1

� �� :
Cisco 7206
�� VRF, �� .

ip vrf Test
rd xxxx:8
route-target export xxxx:8
route-target import xxxx:8

interface FastEthernet0/0.3
description Client 3
encapsulation dot1Q 3
ip vrf forwarding Test
ip address 3.3.3.1 255.255.255.252
ip nat inside
no snmp trap link-status

interface FastEthernet0/0.1017
description Uplink
encapsulation dot1Q 1017
ip address 333.114.179.179 255.255.255.248
ip nat outside
no snmp trap link-status

ip nat log translations syslog
ip nat pool Test 111.222.333.9 111.222.333.9 netmask 255.255.255.252

ip nat inside source list 8 pool Test vrf Test overload

ip route 0.0.0.0 0.0.0.0 333.114.179.177
ip route 111.222.333.8 255.255.255.248 Null0 100
ip route vrf Test 0.0.0.0 0.0.0.0 FastEthernet0/0.1017 333.114.179.177

access-list 8 permit 3.3.3.0 0.0.0.3

OpenForum RSS: ���������� ����

���������� ���� (Andrei_V)

���������� ���� (Andrei_V)

���������� ���� (Andrei_V)

���������� ���� (APach)

���������� ���� (Andrei_V)

���������� ���� (APach)

���������� ���� (Andrei_V)

���������� ���� (Andrei_V)

���������� ���� (lumenous)

OpenForum RSS: ��

�� (Andrei_V)

�� (Andrei_V)

�� (Andrei_V)

�� (APach)

�� (Andrei_V)

�� (APach)

�� (Andrei_V)

�� (Andrei_V)

�� (lumenous)