Chinaunix

标题: 网络故障？！ [打印本页]

作者: yun1860 时间: 2007-01-18 15:55
标题: 网络故障？！
昨天下午，公司内部网从5点15到5点45网速慢，网页基本上打不开，过了这半个小时自动好了，不知什么原因，大概得网络环境说一下，主交换机4506，PIX连接外网，网通的20M带宽，内网分vlan，可以ping通网关，不知什么问题，请大虾回复，多谢！！！！！！！\r\n\r\nshow run的结果\r\n>show run \r\nCurrent configuration : 8848 bytes\r\n!\r\nversion 12.2\r\nno service pad\r\nservice timestamps debug uptime\r\nservice timestamps log uptime\r\nno service password-encryption\r\nservice compress-config\r\n!\r\nhostname Switch\r\n!\r\nboot-start-marker\r\nboot system bootflash:cat4500-entservicesk9-mz.122-31.SGA.bin\r\nboot-end-marker\r\n!\r\nenable secret 5 $1$bmjG$nmLOMczyS7wuAScmcSqEJ1\r\nenable password 800828\r\n!\r\nno aaa new-model\r\nip subnet-zero\r\nip dhcp excluded-address 192.168.0.1 192.168.0.10\r\nip dhcp excluded-address 192.168.6.1 192.168.6.20\r\nip dhcp excluded-address 192.168.2.1 192.168.2.255\r\nip dhcp excluded-address 192.168.3.1 192.168.3.20\r\nip dhcp excluded-address 192.168.4.1 192.168.4.20\r\nip dhcp excluded-address 192.168.5.1 192.168.5.20\r\nip dhcp excluded-address 192.168.8.1 192.168.8.20\r\nip dhcp excluded-address 192.168.9.1 192.168.9.10\r\n!\r\nip dhcp pool j\r\n!\r\nip dhcp pool vlan\r\n!\r\nip dhcp pool rj45\r\n network 192.168.6.0 255.255.255.0\r\n dns-server 192.168.2.22 192.168.6.3\r\n default-router 192.168.6.1\r\n!\r\nip dhcp pool office-1\r\n network 192.168.3.0 255.255.255.0\r\n default-router 192.168.3.1\r\n dns-server 192.168.2.22 192.168.6.3\r\n!\r\nip dhcp pool office-2\r\n network 192.168.4.0 255.255.255.0\r\ndefault-router 192.168.4.1\r\n dns-server 192.168.2.22 192.168.6.3\r\n!\r\nip dhcp pool vlan1\r\n network 192.168.7.0 255.255.255.0\r\n dns-server 192.168.2.22 192.168.6.3\r\n default-router 192.168.6.1\r\n!\r\nip dhcp pool guanggao\r\n network 192.168.8.0 255.255.255.0\r\n dns-server 192.168.2.22 192.168.6.3\r\n default-router 192.168.6.1\r\n!\r\nip dhcp pool jiulou\r\n network 192.168.0.0 255.255.255.0\r\n dns-server 192.168.2.22 192.168.6.3\r\n default-router 192.168.0.1\r\n!\r\nip dhcp pool office-3\r\n network 192.168.5.0 255.255.255.0\r\n default-router 192.168.5.1\r\n dns-server 192.168.2.22 192.168.6.3\r\n!\r\nip dhcp-server 192.168.6.1\r\nvtp domain 4510-2\r\nvtp mode transparent\r\n!\r\n!\r\n!\r\n!\r\n!\r\npower redundancy-mode redundant\r\nno file verify auto\r\nspanning-tree mode pvst\r\nspanning-tree extend system-id\r\n!\r\nvlan internal allocation policy ascending\r\n!\r\nvlan 10\r\n name jiulou\r\n!\r\nvlan 20\r\n name office-1\r\n!\r\nvlan 30\r\n name office-2\r\n!\r\nvlan 40\r\n name office-3\r\n!\r\nvlan 50\r\n name server\r\n!\r\nvlan 60\r\n name rj45\r\n!\r\nvlan 70\r\n name guanggao\r\n!\r\nvlan 80\r\n name web-server\r\n!\r\ninterface GigabitEthernet1/1\r\n switchport access vlan 20\r\n!\r\ninterface GigabitEthernet1/2\r\n!\r\ninterface GigabitEthernet2/1\r\n switchport access vlan 20\r\n!\r\ninterface GigabitEthernet2/2\r\n switchport access vlan 20\r\n!\r\ninterface GigabitEthernet2/3\r\n switchport access vlan 30\r\n!\r\ninterface GigabitEthernet2/4\r\n switchport access vlan 30\r\n!\r\ninterface GigabitEthernet2/5\r\n switchport access vlan 40\r\n switchport mode access\r\n!\r\ninterface GigabitEthernet2/6\r\n switchport access vlan 40\r\n switchport mode access\r\n!\r\ninterface GigabitEthernet3/1\r\n switchport access vlan 50\r\n switchport mode access\r\n!\r\ninterface GigabitEthernet3/2\r\nswitchport access vlan 70\r\n switchport mode access\r\n!\r\ninterface GigabitEthernet3/3\r\n!\r\ninterface GigabitEthernet3/4\r\n!\r\ninterface GigabitEthernet3/5\r\n!\r\ninterface GigabitEthernet3/6\r\n!\r\ninterface FastEthernet4/1\r\n switchport access vlan 60\r\n!\r\ninterface FastEthernet4/2\r\n switchport access vlan 60\r\n!\r\ninterface FastEthernet4/3\r\n switchport access vlan 60\r\n!\r\ninterface FastEthernet4/4\r\n switchport access vlan 60\r\n!\r\ninterface FastEthernet4/5\r\n switchport access vlan 60\r\n!\r\ninterface FastEthernet4/6\r\n switchport access vlan 60\r\n!\r\ninterface FastEthernet4/7\r\n switchport access vlan 60\r\n!\r\ninterface FastEthernet4/8\r\n switchport access vlan 60\r\n!\r\ninterface FastEthernet4/9\r\n switchport access vlan 60\r\n!\r\ninterface FastEthernet4/10\r\n switchport access vlan 60\r\n!\r\ninterface FastEthernet4/11\r\n switchport access vlan 60\r\n!\r\ninterface FastEthernet4/12\r\n switchport access vlan 60\r\n!\r\ninterface FastEthernet4/13\r\n switchport access vlan 60\r\n!\r\ninterface FastEthernet4/14\r\n switchport access vlan 60\r\n!\r\ninterface FastEthernet4/15\r\n switchport access vlan 60\r\n!\r\ninterface FastEthernet4/16\r\n switchport access vlan 60\r\n!\r\ninterface FastEthernet4/17\r\n switchport access vlan 60\r\n!\r\ninterface FastEthernet4/18\r\n switchport access vlan 60\r\n!\r\ninterface FastEthernet4/19\r\n switchport access vlan 10\r\n switchport trunk allowed vlan 60\r\n!\r\ninterface FastEthernet4/20\r\n switchport access vlan 10\r\n!\r\ninterface FastEthernet4/21\r\n switchport access vlan 10\r\n!\r\ninterface FastEthernet4/22\r\n switchport access vlan 40\r\n!\r\ninterface FastEthernet4/23\r\n switchport access vlan 40\r\n!\r\ninterface FastEthernet4/24\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/25\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/26\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/27\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/28\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/29\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/30\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/31\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/32\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/33\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/34\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/35\r\ninterface FastEthernet4/28\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/29\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/30\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/31\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/32\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/33\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/34\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/35\r\n switchport access vlan 80\r\n!\r\ninterface FastEthernet4/36\r\n!\r\ninterface FastEthernet4/37\r\n!\r\ninterface FastEthernet4/38\r\n!\r\ninterface FastEthernet4/39\r\n!\r\ninterface FastEthernet4/40\r\n!\r\ninterface FastEthernet4/41\r\n!\r\ninterface FastEthernet4/42\r\n!\r\ninterface FastEthernet4/43\r\n!\r\ninterface FastEthernet4/44\r\n!\r\ninterface FastEthernet4/45\r\n!\r\ninterface FastEthernet4/46\r\n!\r\ninterface FastEthernet4/47\r\n!\r\ninterface FastEthernet4/48\r\n switchport access vlan 40\r\n!\r\ninterface Vlan1\r\n ip address 192.168.7.1 255.255.255.0\r\n!\r\ninterface Vlan6\r\n no ip address\r\n shutdown\r\n!\r\ninterface Vlan7\r\n no ip address\r\n shutdown\r\n!\r\ninterface Vlan10\r\n ip address 192.168.0.1 255.255.255.0\r\n ip access-group 103 in\r\n ip access-group 103 out\r\n!\r\ninterface Vlan20\r\n ip address 192.168.3.1 255.255.255.0\r\n ip access-group 102 in\r\n ip access-group 102 out\r\n!\r\ninterface Vlan30\r\n ip address 192.168.4.1 255.255.255.0\r\n ip access-group 103 in\r\n ip access-group 103 out\r\n!\r\ninterface Vlan40\r\n ip address 192.168.5.1 255.255.255.0\r\n ip access-group 102 in\r\n ip access-group 103 out\r\n!\r\ninterface Vlan50\r\n ip address 192.168.2.254 255.255.255.0\r\n ip access-group 102 in\r\n ip access-group 102 out\r\n!\r\ninterface Vlan60\r\n ip address 192.168.6.1 255.255.255.0\r\n ip access-group 103 in\r\n ip access-group 103 out\r\n!\r\ninterface Vlan70\r\n ip address 192.168.8.1 255.255.255.0\r\n ip access-group 100 out\r\n!\r\ninterface Vlan80\r\n ip address 192.168.15.254 255.255.255.0\r\n!\r\nip route 0.0.0.0 0.0.0.0 192.168.6.2\r\nip route 192.168.13.15 255.255.255.255 192.168.15.253\r\nip route 192.168.13.200 255.255.255.255 192.168.15.253\r\nip route 192.168.14.21 255.255.255.255 192.168.15.253\r\nip route 192.168.14.64 255.255.255.255 192.168.15.253\r\nip route 192.168.14.65 255.255.255.255 192.168.15.253\r\nip route 192.168.14.70 255.255.255.255 192.168.15.253\r\nip route 192.168.14.90 255.255.255.255 192.168.15.253\r\nip route 192.168.14.202 255.255.255.255 192.168.15.253\r\nip route 192.168.14.225 255.255.255.255 192.168.15.253\r\nno ip http server\r\nno ip http secure-server\r\n!\r\n!\r\n!\r\nlogging trap errors\r\nlogging facility local0\r\nlogging 192.168.2.23\r\naccess-list 100 deny ip 192.168.0.0 0.0.0.255 192.168.8.0 0.0.0.255\r\naccess-list 100 deny ip 192.168.1.0 0.0.0.255 192.168.8.0 0.0.0.255\r\naccess-list 100 deny ip 192.168.3.0 0.0.0.255 192.168.8.0 0.0.0.255\r\naccess-list 100 deny ip 192.168.4.0 0.0.0.255 192.168.8.0 0.0.0.255\r\naccess-list 100 deny ip 192.168.5.0 0.0.0.255 192.168.8.0 0.0.0.255\r\naccess-list 100 permit ip any any\r\naccess-list 101 deny ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.0.255\r\naccess-list 101 deny ip 192.168.4.0 0.0.0.255 192.168.0.0 0.0.0.255\r\naccess-list 101 permit ip any any\r\naccess-list 102 deny tcp any any eq 33270\r\naccess-list 102 deny tcp any any eq 39168\r\naccess-list 102 deny tcp any any eq 6711\r\naccess-list 102 deny tcp any any eq 6712\r\naccess-list 102 deny tcp any any eq 6776\r\naccess-list 102 deny tcp any any eq 6669\r\naccess-list 102 deny tcp any any eq 2222\r\naccess-list 102 deny tcp any any eq 7000\r\naccess-list 102 deny tcp any any eq 4444\r\naccess-list 102 deny tcp any any eq 5554\r\naccess-list 102 deny tcp any any eq 9996\r\naccess-list 102 deny tcp any any eq 3332\r\naccess-list 102 deny tcp any any eq 1068\r\naccess-list 102 permit ip any any\r\naccess-list 102 deny tcp any any eq 455\r\naccess-list 102 deny udp any any eq 31335\r\naccess-list 102 deny udp any any eq 27444\r\naccess-list 102 deny udp any any eq netbios-ns\r\naccess-list 102 deny udp any any eq netbios-dgm\r\naccess-list 102 deny udp any any eq netbios-ss\r\naccess-list 102 deny udp any any eq 4444\r\naccess-list 102 deny udp any any eq 445\r\naccess-list 102 deny tcp any any eq 445\r\naccess-list 102 deny udp any any eq 135\r\naccess-list 102 deny udp any any eq 136\r\naccess-list 103 deny tcp any any eq 135\r\naccess-list 103 deny tcp any any eq 136\r\naccess-list 103 deny tcp any any eq 137\r\naccess-list 103 deny tcp any any eq 138\r\naccess-list 103 deny tcp any any eq 139\r\naccess-list 103 permit ip any any\r\n!\r\n!\r\n!\r\ncontrol-plane\r\n!\r\n!\r\nline con 0\r\n stopbits 1\r\nline vty 0 4\r\n password gelong\r\n login\r\n!\r\nend

作者: yym0845 时间: 2007-01-18 21:16
会不会和你内部的人的一些应用有关系呢？

作者: dong106 时间: 2007-01-22 13:25
速度慢,会不会是有大流量的包在跑哦?

欢迎光临 Chinaunix (http://bbs.chinaunix.net/)