|
ru.cisco
- RU.CISCO ---------------------------------------------------------------------
From : Irakli Natsvlishvili 2:5020/400 15 May 2002 22:00:43
To : Denis V. Schapov
Subject : Re: Pix515 тормозит
--------------------------------------------------------------------------------
Hello, Denis!
You wrote to Irakli Natsvlishvili on Wed, 15 May 2002 07:01:14 +0000 (UTC):
DVS> Hа каких портах DMZ и internal ?
Ты 515 в глаза видел?
DVS> Встроенные или карточки отдельные ?
Одна 100мбит встроенная, другая 100мбит стоит в PCI слот.
DVS> Это .. а версия PIX OS ?
6.1.1
DVS> sh ver где ?
здесь.
Cisco PIX Firewall Version 6.1(1)
Compiled on Tue 11-Sep-01 07:45 by morlee
homepix up 17 days 13 hours
Hardware: PIX-515, 128 MB RAM, CPU Pentium 200 MHz
Flash i28F640J5 @ 0x300, 16MB
BIOS Flash AT29C257 @ 0xfffd8000, 32KB
0: ethernet0: address is 0005.328f.c8f8, irq 11
1: ethernet1: address is 0005.328f.c8f9, irq 10
2: ethernet2: address is 00d0.b77f.dce4, irq 9
Licensed Features:
Failover: Disabled
VPN-DES: Enabled
VPN-3DES: Disabled
Maximum Interfaces: 3
Cut-through Proxy: Enabled
Guards: Enabled
Websense: Enabled
Inside Hosts: Unlimited
Throughput: Unlimited
ISAKMP peers: Unlimited
DVS> если >=6.0, show cpu usage что говорит в момент перекачки
Смотри внизу.
DVS> ? что говорит show int ... на свитче и pix ?
interface ethernet1 "inside" is up, line protocol is up
Hardware is i82559 ethernet, address is 0005.328f.c8f9
IP address 10.1.1.1, subnet mask 255.255.255.0
MTU 1500 bytes, BW 100000 Kbit full duplex
12071635 packets input, 874588263 bytes, 0 no buffer
Received 21560 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
20798014 packets output, 429990749 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collisions, 0 deferred
0 lost carrier, 0 no carrier
input queue (curr/max blocks): hardware (128/128) software (0/22)
output queue (curr/max blocks): hardware (1/48) software (0/7)
interface ethernet2 "DMZ" is up, line protocol is up
Hardware is i82559 ethernet, address is 00d0.b77f.dce4
IP address 176.20.30.1, subnet mask 255.255.255.0
MTU 1500 bytes, BW 100000 Kbit full duplex
51456201 packets input, 4171343107 bytes, 0 no buffer
Received 21544 broadcasts, 0 runts, 0 giants
2 input errors, 0 CRC, 0 frame, 2 overrun, 0 ignored, 0 abort
39083494 packets output, 2266652518 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collisions, 0 deferred
0 lost carrier, 0 no carrier
input queue (curr/max blocks): hardware (128/128) software (0/150)
output queue (curr/max blocks): hardware (0/21) software (0/6)
Свитч - неуправляемый, маааааленький на 5 портов.
DVS> clear traffic, show traffic за момент перекачивания ?
inside->DMZ
inside:
received (in 157.730 secs):
517488 packets 750045428 bytes
3280 pkts/sec 4755249 bytes/sec
transmitted (in 157.730 secs):
278921 packets 18900455 bytes
1768 pkts/sec 119827 bytes/sec
DMZ:
received (in 157.730 secs):
278894 packets 17812155 bytes
1768 pkts/sec 112928 bytes/sec
transmitted (in 157.730 secs):
517435 packets 750050190 bytes
3280 pkts/sec 4755279 bytes/sec
CPU utilization for 5 seconds = 47%; 1 minute: 55%; 5 minutes: 18%
а теперь, делаю clea tra, и перекачиваю тот же файл обратно
DMZ->inside
inside:
received (in 233.210 secs):
272838 packets 17229318 bytes
1169 pkts/sec 73878 bytes/sec
transmitted (in 233.210 secs):
522107 packets 733960401 bytes
2238 pkts/sec 3147208 bytes/sec
DMZ:
received (in 233.210 secs):
523267 packets 735642279 bytes
2243 pkts/sec 3154419 bytes/sec
transmitted (in 233.210 secs):
272776 packets 18229200 bytes
1169 pkts/sec 78166 bytes/sec
CPU utilization for 5 seconds = 46%; 1 minute: 38%; 5 minutes: 28%
DVS> скорость, дуплекс фиксированы с обоих сторон ?
Да.
I.N.
--- ifmail v.2.15dev5
* Origin: Demos online service (2:5020/400)
Вернуться к списку тем, сортированных по: возрастание даты уменьшение даты тема автор
|
