На интерфейсе в сторону провайдера crypto map(ipsec) с двумя профилями: один для внешних пользователей (сейчас 3 человека висит), второй - туннель с головной конторой. Собственно полез смотреть почему медленно работает туннель...Этот интерфейс в сторону двух провайдеров, на интерфейсе висит два vlan-а
#sh int fa0/0
FastEthernet0/0 is up, line protocol is up
Hardware is MV96340 Ethernet, address is 0014.a925.1eb8 (bia 0014.a925.1eb8)
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 42/255, rxload 7/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 1., loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/19014/0 (size/max/drops/flushes); Total output drops: 122031
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 2937000 bits/sec, 1064 packets/sec
5 minute output rate 16747000 bits/sec, 1647 packets/sec
2978065262 packets input, 89368498 bytes
Received 7368352 broadcasts, 4 runts, 0 giants, 1411 throttles
113141 input errors, 127 CRC, 141 frame, 0 overrun, 112869 ignored
0 watchdog
0 input packets with dribble condition detected
1613851039 packets output, 3315631982 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
1765169 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
В сторону локалки
#sh int fa0/1
FastEthernet0/1 is up, line protocol is up
Hardware is MV96340 Ethernet, address is 0014.a925.1eb9 (bia 0014.a925.1eb9)
Description: INSIDE
Internet address is 1.2.3.4/24
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 16/255, rxload 44/255
Encapsulation ARPA, loopback not set
Keepalive not set
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 6/75/38636/0 (size/max/drops/flushes); Total output drops: 797
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 17429000 bits/sec, 1972 packets/sec
5 minute output rate 6293000 bits/sec, 1551 packets/sec
1210798376 packets input, 3137328546 bytes
Received 588545 broadcasts, 0 runts, 0 giants, 2047 throttles
633459 input errors, 0 CRC, 1 frame, 0 overrun, 633458 ignored
0 watchdog
0 input packets with dribble condition detected
3049127627 packets output, 2744917918 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
588503 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
#sh ip traf
IP statistics:
Rcvd: 2110104704 total, 40214361 local destination
0 format errors, 107 checksum errors, 4824815 bad hop count
13 unknown protocol, 78475 not a gateway
0 security failures, 0 bad options, 10226 with options
Opts: 0 end, 0 nop, 0 basic security, 0 loose source route
0 timestamp, 0 extended security, 0 record route
0 stream ID, 0 strict source route, 10226 alert, 0 cipso, 0 ump
0 other
Frags: 201185664 reassembled, 0 timeouts, 0 couldn't reassemble
5051 fragmented, 10652 fragments, 85 couldn't fragment
Bcast: 731937 received, 0 sent
Mcast: 0 received, 0 sent
Sent: 119477457 generated, 1457218170 forwarded
Drop: 203170 encapsulation failed, 0 unresolved, 0 no adjacency
6462 no route, 0 unicast RPF, 134524 forced drop
0 options denied
Drop: 0 packets with source IP address zero
Drop: 0 packets with internal loop back IP address
0 physical broadcast
ICMP statistics:
Rcvd: 1365 format errors, 66 checksum errors, 0 redirects, 127206 unreachable
130180 echo, 349 echo reply, 0 mask requests, 0 mask replies, 33 quench
0 parameter, 1 timestamp, 0 info request, 0 other
0 irdp solicitations, 0 irdp advertisements
Sent: 0 redirects, 58985451 unreachable, 115 echo, 130180 echo reply
0 mask requests, 0 mask replies, 0 quench, 1 timestamp
0 info reply, 1382558 time exceeded, 0 parameter problem
0 irdp solicitations, 0 irdp advertisements
TCP statistics:
Rcvd: 13285451 total, 1901 checksum errors, 131164 no port
Sent: 13133762 total
BGP statistics:
Rcvd: 0 total, 0 opens, 0 notifications, 0 updates
0 keepalives, 0 route-refresh, 0 unrecognized
Sent: 0 total, 0 opens, 0 notifications, 0 updates
0 keepalives, 0 route-refresh
IP-EIGRP statistics:
Rcvd: 0 total
Sent: 0 total
PIMv2 statistics: Sent/Received
Total: 0/0, 0 checksum errors, 0 format errors
Registers: 0/0 (0 non-rp, 0 non-sm-group), Register Stops: 0/0, Hellos: 0/0
Join/Prunes: 0/0, Asserts: 0/0, grafts: 0/0
Bootstraps: 0/0, Candidate_RP_Advertisements: 0/0
Queue drops: 0
State-Refresh: 0/0
IGMP statistics: Sent/Received
Total: 0/0, Format errors: 0/0, Checksum errors: 0/0
Host Queries: 0/0, Host Reports: 0/0, Host Leaves: 0/0
DVMRP: 0/0, PIM: 0/0
Queue drops: 0
UDP statistics:
Rcvd: 26662807 total, 1622 checksum errors, 17521329 no port
Sent: 45876789 total, 0 forwarded broadcasts
OSPF statistics:
Rcvd: 0 total, 0 checksum errors
0 hello, 0 database desc, 0 link state req
0 link state updates, 0 link state acks
Sent: 0 total
0 hello, 0 database desc, 0 link state req
0 link state updates, 0 link state acks
ARP statistics:
Rcvd: 2737009 requests, 4272 replies, 20 reverse, 0 other
Sent: 136991 requests, 1503882 replies (1 proxy), 0 reverse