Hi!
Есть рабочая dialup киска 3600. Когда к ее конфигурации подписыавешь эти строчки:
ip rcmd rsh-enable
ip rcmd remote-host test 10.0.20.174 root enable 8
то возникает проблема: модемные пользователи не могу открыть веб страницы, хотя браузер ошибки не выдает. Включаю debug ip packet и вижу что киска шлет кучу широковещательных пакетов. Если эти строчки убираешь, то все работает нормально.

Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Cisco_dialup
!
aaa new-model
aaa authentication login default tacacs+ local
aaa authentication login console tacacs+ local
aaa authentication enable default tacacs+ enable
aaa authentication ppp default tacacs+ local
aaa authorization exec default tacacs+ local
aaa authorization exec console tacacs+ none
aaa authorization commands 7 default tacacs+ local
aaa authorization commands 7 console tacacs+ none
aaa authorization commands 15 default tacacs+ local
aaa authorization commands 15 console tacacs+ none
aaa authorization network default tacacs+ local
aaa accounting suppress null-username
aaa accounting send stop-record authentication failure
aaa accounting nested
aaa accounting exec default stop-only tacacs+
aaa accounting commands 7 default stop-only tacacs+
aaa accounting commands 15 default stop-only tacacs+
aaa accounting network default stop-only tacacs+
aaa accounting connection default stop-only tacacs+
aaa accounting system default stop-only tacacs+
!
username test privilege 9 password 7 120D000406
memory-size iomem 10
ip subnet-zero
no ip rcmd domain-lookup
ip rcmd rsh-enable
ip rcmd remote-host test 10.0.20.174 root enable 8
ip name-server x.x.x.x
ip accounting-list 10.0.23.0 0.0.0.255
ip accounting-list x.x.x.x 0.0.0.15
chat-script drop-line "" +++ "" ATH "" ATZ OK "AT S10=254" OK
chat-script drop-line1 "" +++ "" ATH "" ATZ OK
!        
!
!
!
!
!
!
interface Tunnel0
ip address 10.0.28.102 255.255.255.252
ip access-group 101 out
no ip directed-broadcast
ip accounting output-packets
tunnel source 10.0.20.170
tunnel destination 10.0.29.1
tunnel mode ipip
!
interface Ethernet0/0
ip address 10.0.20.170 255.255.255.0 secondary
ip address 10.0.23.1 255.255.255.0
no ip directed-broadcast
ip accounting output-packets
!
interface Serial1/6
no ip address
no ip directed-broadcast
shutdown
!
interface Serial1/7
no ip address
no ip directed-broadcast
shutdown
!
interface Group-Async0
physical-layer async
description Modem`s test pool on number 111-11-11
ip unnumbered Ethernet0/0
ip access-group 100 in
no ip directed-broadcast
ip accounting output-packets
encapsulation ppp
ip tcp header-compression
ip tcp compression-connections 32
no ip mroute-cache
async mode dedicated
no snmp trap link-status
peer default ip address pool modems_test
compress mppc
no cdp enable
ppp authentication chap pap
group-range 33 38
!
ip local pool modems_test 10.0.23.2 10.0.23.255
ip classless
ip route 0.0.0.0 0.0.0.0 10.0.28.101
ip route 10.0.0.0 255.0.0.0 10.0.20.1
!
access-list 100 permit ip 10.0.23.0 0.0.0.31 10.0.0.0 0.255.255.255
access-list 100 permit ip 10.0.23.32 0.0.0.31 10.0.0.0 0.0.15.255
access-list 100 permit ip x.x.x.x 0.0.0.15 any
access-list 101 permit ip x.x.x.x 0.0.0.15 any
tacacs-server host 10.0.20.174
tacacs-server host 10.0.20.216
tacacs-server key yt7846t5re
privilege exec level 10 copy startup-config tftp
privilege exec level 10 copy startup-config
privilege exec level 10 copy
privilege exec level 7 terminal monitor
privilege exec level 7 terminal
privilege exec level 7 show startup-config
privilege exec level 7 show
privilege exec level 8 clear ip accounting checkpoint
privilege exec level 8 clear ip accounting
privilege exec level 8 clear ip
privilege exec level 14 clear interface
privilege exec level 8 clear line
privilege exec level 10 clear counters
privilege exec level 8 clear
!
line con 0
authorization commands 7 console
authorization commands 15 console
authorization exec console
login authentication console
transport input none
line 33 34
autoselect during-login
script reset drop-line
modem answer-timeout 60
modem InOut
modem autoconfigure discovery
transport input all
autohangup
stopbits 1
speed 115200
flowcontrol hardware
line 35 36
autoselect during-login
script reset drop-line1
modem answer-timeout 60
modem InOut
modem autoconfigure discovery
transport input all
autohangup
stopbits 1
speed 115200
flowcontrol hardware
line 37 38
autoselect during-login
script reset drop-line
modem answer-timeout 60
modem InOut
modem autoconfigure discovery
transport input all
autohangup
stopbits 1
speed 115200
flowcontrol hardware
line aux 0
line vty 0 4
!
end

• проблема с rsh, factor_285, 15:08 , 01-Авг-03, (1)  
• проблема с rsh, ВОЛКА, 18:36 , 01-Авг-03, (2)  
  • проблема с rsh, factor_285, 11:36 , 04-Авг-03, (3)  
    • проблема с rsh, ВОЛКА, 14:40 , 04-Авг-03, (4)  
      • проблема с rsh, MisterY, 14:53 , 04-Авг-03, (5)  
      • проблема с rsh, factor_285, 15:47 , 04-Авг-03, (6)