Здравствуйте.
Имеется кталист 3560, периодически "подтормаживает" сеть, увеличивается время отклика при пинге, при этом -
tom#sh proc cpu sort
CPU utilization for five seconds: 99%/2%; one minute: 20%; five minutes: 18%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
109 30011862 951913 31527 55.25% 8.19% 7.59% 0 HL3U bkgrd proce
9 34047592 3072271 11082 34.73% 4.97% 3.44% 0 ARP Input
164 5348974 7278847 734 0.78% 0.85% 0.82% 0 Spanning Tree
4 859796 71027 12105 0.47% 0.13% 0.16% 0 Check heaps
161 1415002 4592087 308 0.31% 0.36% 0.30% 0 IP Input
108 617831 13068820 47 0.15% 0.15% 0.10% 0 Hulc LED Process
60 39748 16242557 2 0.15% 0.01% 0.00% 0 HLFM address lea
116 58673 119435 491 0.15% 0.01% 0.00% 0 HQM Stack Proces
126 83155 587847 141 0.15% 0.02% 0.00% 0 PI MATM Aging Prtom#sh ip arp summary
46884 IP ARP entries, with 46187 of them incomplete
в норме картина такая -
tom#sh proc cpu sort
CPU utilization for five seconds: 8%/0%; one minute: 13%; five minutes: 18%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
9 34052367 3073733 11078 1.27% 2.88% 3.29% 0 ARP Input
92 1345 891 1509 0.79% 0.18% 0.11% 1 SSH Process
161 1415515 4594135 308 0.47% 0.33% 0.32% 0 IP Input
164 5350259 7280697 734 0.47% 0.81% 0.82% 0 Spanning Tree
4 860147 71046 12106 0.00% 0.24% 0.18% 0 Check heaps
tom#sh ip arp summary
729 IP ARP entries, with 31 of them incomplete
такие "подтормаживания" длятся от нескольких сенкунд до минуты. в арп таблице появляется куча ip адресов вида -
Protocol Address Age (min) Hardware Addr Type Interface
Internet 10.10.247.247 0 Incomplete ARPA
Internet 10.10.246.246 0 Incomplete ARPA
Internet 10.10.243.243 0 Incomplete ARPA
машин с такими адресами в сети нет. на машине с линуксом, служащей роутером для этого свитча, в арп таблице появляются эти же записи, но с мак-адресом свитча.
вопрос, что бы это могло быть и как побороть?
заранее спасибо за ответ.
конфиг свитча -
Current configuration : 4168 bytes
!
! Last configuration change at 12:30:52 EST Tue Oct 4 2011 by arey
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log datetime
no service password-encryption
service sequence-numbers
!
hostname tom
!
enable secret 5 xxxxxxxxxxxxxxx
enable password xxxxxxxxxxxxxxx
!
username root privilege 15 password 0 xxxxxxxxxxx
username arey privilege 15 password 0 xxxxxxxxxxx
aaa new-model
aaa authentication login default local
aaa authentication enable default enable
aaa authorization exec default local
aaa authorization network default local
!
aaa session-id common
clock timezone EST 2
system mtu routing 1500
ip subnet-zero
ip routing
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface FastEthernet0/1
switchport trunk encapsulation dot1q
switchport trunk pruning vlan 1001
switchport mode trunk
ip arp inspection trust
!
interface FastEthernet0/2
switchport access vlan 20
switchport trunk encapsulation dot1q
switchport mode access
!
interface FastEthernet0/3
switchport mode access
!
interface FastEthernet0/4
switchport mode access
!
interface FastEthernet0/5
!
interface FastEthernet0/6
switchport mode access
!
interface FastEthernet0/7
description porky
switchport mode access
switchport port-security
switchport port-security mac-address 000e.a630.38fb
!
interface FastEthernet0/8
!
interface FastEthernet0/9
switchport mode access
!
interface FastEthernet0/10
!
interface FastEthernet0/11
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 60
switchport trunk encapsulation dot1q
switchport trunk native vlan 60
switchport mode trunk
!
interface FastEthernet0/13
switchport trunk encapsulation dot1q
switchport trunk native vlan 60
switchport mode trunk
!
interface FastEthernet0/14
switchport mode access
!
interface FastEthernet0/15
switchport trunk encapsulation dot1q
switchport trunk pruning vlan 44
switchport mode trunk
ip arp inspection trust
!
interface FastEthernet0/16
switchport trunk encapsulation dot1q
switchport trunk pruning vlan 1001
switchport mode trunk
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 10.0.0.1 255.255.254.0
!
interface Vlan2
ip address 10.0.101.1 255.255.255.0
!
interface Vlan20
ip address 10.10.10.1 255.255.0.0
!
interface Vlan102
ip address 10.0.102.1 255.255.255.0
!
interface Vlan103
ip address 10.0.103.1 255.255.255.0
!
interface Vlan104
ip address 10.0.104.1 255.255.255.0
!
interface Vlan105
ip address 10.0.105.1 255.255.255.0
!
interface Vlan106
ip address 10.0.106.1 255.255.255.0
!
interface Vlan107
ip address 10.0.107.1 255.255.255.0
!
interface Vlan109
ip address 10.0.109.1 255.255.255.0
!
interface Vlan115
ip address 10.0.115.1 255.255.255.0
!
interface Vlan116
ip address 10.0.116.1 255.255.255.0
!
interface Vlan117
ip address 10.0.117.1 255.255.255.0
!
interface Vlan118
ip address 10.0.118.1 255.255.255.0
!
interface Vlan120
ip address 10.0.120.1 255.255.255.0
!
interface Vlan130
ip address 10.0.130.1 255.255.255.0
!
interface Vlan220
ip address 10.0.220.1 255.255.255.0
!
ip default-gateway 10.0.0.26
ip classless
ip route 0.0.0.0 0.0.0.0 10.0.0.26
ip route 10.0.101.0 255.255.255.0 Vlan2
ip route 10.0.101.2 255.255.255.255 Vlan1
ip route 10.0.104.0 255.255.255.0 Vlan104
ip route 10.0.106.0 255.255.255.0 Vlan106
ip route 10.10.0.0 255.255.0.0 Vlan20
ip route 172.20.12.1 255.255.255.255 Vlan104
ip route 172.23.1.1 255.255.255.255 Vlan1
ip route 172.24.0.0 255.255.255.255 Vlan1
ip http server
ip http secure-server
!
!
logging trap debugging
logging 10.0.0.26
snmp-server community xxxxxxxx RO
radius-server source-ports 1645-1646
!
control-plane
!
banner motd ^C
preved!!!
^C
!
line con 0
line vty 0 4
password xxxxxxxx
length 0
line vty 5 15
password xxxxxxxx
!
ntp clock-period 36029842
ntp server 10.0.0.26
end
Вариант для распечатки
