День добрый!

Subj используется в ядре небольшой сети порядка 1500 чел.
Наблюдается задержки в трафике, например при закачке с ftp из сегмента в сегмент, закачка останавливается сек. на 7-12, потом возобновляется. Это происходит с периодичностью от 30 сек. до нескольких минут. В этот момент на свитче увелчивается загрузка cpu за последние 5 сек с обычных 7% до 30%, и нормализуется как только трафик продолжает нормально форвардится. Проблема только на l3 уровне. Трафик l2 форвардится отлично.

Такое же поведение наблюдается на простом icmp трафике, есть небольшие потери 3-4%, иногда rtt увеличивается до 1500 - 2000 ms.

Сначала была прошивка 2_51_B13.
Сейчас откатился на 2_50_B52. Все тоже самое.


DGS-3612:5#show switch
Command: show switch

Device Type : DGS-3612 Gigabit Ethernet Switch
MAC Address : 00-19-5B-AF-D8-00
IP Address : 10.0.5.50 (Manual)
VLAN Name : switches
Subnet Mask : 255.255.255.0
Default Gateway : 10.0.9.193
Boot PROM Version : Build 1.10-B09
Firmware Version : Build 2.50.B25
Hardware Version : 1A1G
System Name :
System Location :
System Contact :
Spanning Tree : Enabled
GVRP : Disabled
IGMP Snooping : Disabled
MLD Snooping : Disabled
RIP : Disabled
DVMRP : Disabled
PIM : Disabled
OSPF : Disabled
TELNET : Disabled
WEB : Enabled (TCP 80)
SNMP : Enabled
RMON : Enabled
SSL status : Disabled
SSH status : Enabled
802.1x : Disabled
Jumbo Frame : Off
Clipaging : Enabled
MAC Notification : Disabled
Port Mirror : Disabled
SNTP : Enabled
DHCP Relay : Disabled
DNSR Status : Disabled
VRRP : Disabled
HOL Prevention State : Enabled
Syslog Global State : Enabled
Single IP Management : Disabled


#-------------------------------------------------------------------------------
# DGS-3612 Gigabit Ethernet Switch
# Configuration
#
# Firmware: Build 2.50.B25
# Copyright(C) 2008 D-Link Corporation. All rights reserved.
#-------------------------------------------------------------------------------


# DOUBLE_VLAN

disable double_vlan

# BASIC

config serial_port auto_logout 10_minutes
disable telnet
enable web 80
enable clipaging

# STORM

config traffic trap none
config traffic control 1-12 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5

# LOOP_DETECT


# GM

config sim candidate
disable sim
config sim dp_interval 30
config sim hold_time 100

# GM_H


# SYSLOG

enable syslog
config system_severity log information
config system_severity trap information
create syslog host 1 severity all facility local0 udp_port 514 ipaddress 10.0.6.2 state enable
config log_save_timing on_demand

# QOS

config scheduling_mechanism strict
config scheduling 0 max_packet 1
config scheduling 1 max_packet 2
config scheduling 2 max_packet 3
config scheduling 3 max_packet 4
config scheduling 4 max_packet 5
config scheduling 5 max_packet 6
config scheduling 6 max_packet 7
config 802.1p user_priority 0 2
config 802.1p user_priority 1 0
config 802.1p user_priority 2 1
config 802.1p user_priority 3 3
config 802.1p user_priority 4 4
config 802.1p user_priority 5 5
config 802.1p user_priority 6 6
config 802.1p user_priority 7 6
enable hol_prevention
config 802.1p default_priority 1-12 0
config bandwidth_control 1-12 rx_rate no_limit tx_rate no_limit

# MIRROR

disable mirror

# TRAF-SEGMENTATION

config traffic_segmentation 1-12 forward_list all

# SSL

disable ssl
enable ssl ciphersuite RSA_with_RC4_128_MD5
enable ssl ciphersuite RSA_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite DHE_DSS_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5
config ssl cachetimeout 600

# PORT

disable jumbo_frame
config ports 1-8 speed auto capability_advertised 10_half 10_full 100_half 100_full 1000_full flow_control disable learning enable state enable
config ports 9-10,12 medium_type copper speed auto capability_advertised 10_half 10_full 100_half 100_full 1000_full flow_control disable learning enable state enable
config ports 9-12 medium_type fiber speed auto capability_advertised 100_full 1000_full flow_control disable learning enable state enable
config ports 11 medium_type copper speed auto capability_advertised 10_half 10_full 100_half 100_full 1000_full flow_control disable learning enable state disable

# PORT_LOCK

config port_security ports 1-12 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnReset

# SNMPv3

delete snmp community public
delete snmp community private
delete snmp user initial
delete snmp group initial
delete snmp group ReadGroup
delete snmp group WriteGroup
delete snmp view restricted all
delete snmp view CommunityView all
config snmp engineID 800000ab0300195bafd800
create snmp view monitor 1 view_type included
create snmp view restricted 1.3.6.1.2.1.1 view_type included
create snmp view restricted 1.3.6.1.2.1.11 view_type included
create snmp view restricted 1.3.6.1.6.3.10.2.1 view_type included
create snmp view restricted 1.3.6.1.6.3.11.2.1 view_type included
create snmp view restricted 1.3.6.1.6.3.15.1.1 view_type included
create snmp view CommunityView 1 view_type included
create snmp view CommunityView 1.3.6.1.6.3 view_type excluded
create snmp view CommunityView 1.3.6.1.6.3.1 view_type included
create snmp group montr2 v3 noauth_nopriv read_view monitor
create snmp group initial v3 noauth_nopriv read_view restricted notify_view restricted
create snmp group ReadGroup v1 read_view CommunityView notify_view CommunityView
create snmp group ReadGroup v2c read_view CommunityView notify_view CommunityView
create snmp group WriteGroup v1 read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group WriteGroup v2c read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp user kisa montr2 encrypted by_key auth md5 0c0d040c44fde9e9b1a098f40dfe589a priv none
create snmp user kisa2 montr2 encrypted by_key auth md5 df50285f17ff688bd34c39d8e74c4f41 priv none
create snmp user montr2 montr2 encrypted by_key auth md5 4fd3738796363bcc6807b5eb0babdbef priv none

# MANAGEMENT

create trusted_host network 10.0.2.3/255.255.255.255
create trusted_host network 10.0.5.1/255.255.255.255
enable snmp traps
enable snmp authenticate_traps
enable snmp
enable snmp linkchange_traps
enable rmon
config snmp linkchange_traps ports 1-12 enable

# VLAN

enable pvid auto_assign
config vlan default delete 1-12
config vlan default advertisement enable
create vlan nas tag 2
config vlan nas add tagged 1-3,12 advertisement disable
create vlan shodnya tag 3
config vlan shodnya add tagged 1-3,6-12
config vlan shodnya add untagged 5 advertisement disable
create vlan dmz tag 4
config vlan dmz add tagged 1,8,11-12
config vlan dmz add untagged 6 advertisement disable
create vlan switches tag 5
config vlan switches add tagged 1,4,7-12 advertisement disable
create vlan okt36 tag 12
config vlan okt36 add tagged 1,7 advertisement disable
create vlan pmay tag 16
config vlan pmay add tagged 1,7 advertisement disable
create vlan gornaya tag 17
config vlan gornaya add tagged 1,7 advertisement disable
create vlan golikogo tag 18
config vlan golikogo add tagged 1,9-10 advertisement disable
create vlan med tag 19
config vlan med add tagged 1,8 advertisement disable
create vlan manometr tag 20
config vlan manometr add tagged 1,8,11 advertisement disable
create vlan kraski tag 22
config vlan kraski add tagged 1,8,11 advertisement disable
create vlan mouse tag 24
config vlan mouse add tagged 1,7 advertisement disable
create vlan vertical tag 25
config vlan vertical add tagged 1,9-10 advertisement disable
create vlan germes_k tag 26
config vlan germes_k add tagged 1,8,11 advertisement disable
create vlan karpenkova tag 27
config vlan karpenkova add tagged 1,8,11 advertisement disable
create vlan heracle tag 28
config vlan heracle add tagged 1 advertisement disable
create vlan shodnya2 tag 29
config vlan shodnya2 add tagged 1-3,7-12 advertisement disable
create vlan files tag 30
config vlan files add tagged 7
config vlan files add untagged 5 advertisement disable
create vlan energy tag 31
config vlan energy add tagged 1,8,11 advertisement disable
create vlan ipkvm tag 32
config vlan ipkvm add tagged 1,7,12 advertisement disable
create vlan seleznev tag 33
config vlan seleznev add tagged 1,7 advertisement disable
create vlan apteka22 tag 34
config vlan apteka22 add tagged 1,8,11 advertisement disable
create vlan shodnya4 tag 35
config vlan shodnya4 advertisement disable
create vlan shodnya5 tag 36
config vlan shodnya5 advertisement disable
create vlan shodnya6 tag 37
config vlan shodnya6 advertisement disable
create vlan shodnya7 tag 38
config vlan shodnya7 advertisement disable
create vlan shodnya8 tag 39
config vlan shodnya8 advertisement disable
create vlan shodnya9 tag 40
config vlan shodnya9 advertisement disable
create vlan shodnya10 tag 41
config vlan shodnya10 advertisement disable
create vlan shodnya11 tag 42
config vlan shodnya11 advertisement disable
create vlan shodnya12 tag 43
config vlan shodnya12 advertisement disable
create vlan lineage tag 44
config vlan lineage add tagged 1,12 advertisement disable
create vlan ticketmag tag 45
config vlan ticketmag add tagged 1,8,11 advertisement disable
create vlan comcor tag 101
config vlan comcor add tagged 1,8,11 advertisement disable
disable qinq
disable gvrp
config gvrp 1-4,7-10,12 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 5 state disable ingress_checking enable acceptable_frame admit_all pvid 30
config gvrp 6,11 state disable ingress_checking enable acceptable_frame admit_all pvid 4

# PROTOCOL_VLAN


# QINQ

config qinq ports 1-12 missdrop disable tpid 0x8100

# RSPAN

disable rspan

# 8021X

disable 802.1x
config 802.1x auth_protocol radius_eap
config 802.1x capability ports 1-12 none
config 802.1x auth_parameter ports 1-12 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable

# guestvlan


# TR


# ACL

disable cpu_interface_filtering

# LIMITED_MULTICAST_RANGE


# MULTICAST_VLAN


# FDB

config fdb aging_time 300

# ADDRBIND

config address_binding ip_mac ports 1-12 forward_dhcppkt enable
disable address_binding dhcp_snoop
disable address_binding trap_log
config address_binding dhcp_snoop max_entry ports 1-12 limit no_limit

# DhcpServerScreening

config filter dhcp_server port all state disable
config filter dhcp_server illegal_server_log_suppress_duration 5min
config filter dhcp_server trap_log disable

# MAC_ADDRESS_TABLE_NOTIFICATION

disable mac_notification
config mac_notification interval 1 historysize 1
config mac_notification ports 1-12 disable

# STP

config stp version rstp
config stp maxage 20 maxhops 20 forwarddelay 15 txholdcount 3 fbpdu enable hellotime 2 lbd enable lbd_recover_timer 60
config stp priority 4096 instance_id 0
config stp mst_config_id name 00:19:5B:AF:D8:00 revision_level 0
enable stp
config stp ports 1-12 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 1-12 instance_id 0 internalCost auto priority 128
config stp ports 1-12 fbpdu enable

# BPDU_TUNNEL

config bpdu_tunnel ports all type none
disable bpdu_tunnel

# SAFEGUARD_ENGINE

config safeguard_engine state disable utilization rising 30 falling 20 trap_log disable mode fuzzy

# BANNER_PROMP

config command_prompt default
config greeting_message default

# SSH

config ssh algorithm 3DES enable
config ssh algorithm AES128 enable
config ssh algorithm AES192 enable
config ssh algorithm AES256 enable
config ssh algorithm arcfour enable
config ssh algorithm blowfish enable
config ssh algorithm cast128 enable
config ssh algorithm twofish128 enable
config ssh algorithm twofish192 enable
config ssh algorithm twofish256 enable
config ssh algorithm MD5 enable
config ssh algorithm SHA1 enable
config ssh algorithm RSA enable
config ssh algorithm DSA enable
config ssh authmode password enable
config ssh authmode publickey enable
config ssh authmode hostbased enable
config ssh server maxsession 8
config ssh server contimeout 120
config ssh server authfail 2
config ssh server rekey never
enable ssh

# SNTP

enable sntp
config time_zone operator + hour 3 min 0
config sntp primary 10.0.2.3 secondary 0.0.0.0 poll-interval 180
config dst repeating s_week last s_day sun s_mth 3 s_time 2:0 e_week last e_day sun e_mth 10 e_time 3:0 offset 60

# LACP

config link_aggregation algorithm ip_source
config lacp_port 1-12 mode passive

# IP

config ipif_mac_mapping ipif System mac_offset 0
config ipif System ipaddress 10.0.5.50/24 vlan switches
config ipif System proxy_arp disable local disable
config ipif_mac_mapping ipif pmay mac_offset 15
create ipif pmay 10.0.7.193/26 pmay state enable
config ipif pmay proxy_arp disable local disable
config ipif_mac_mapping ipif files mac_offset 1
create ipif files 10.0.11.33/27 files state enable
config ipif files proxy_arp disable local disable
config ipif_mac_mapping ipif okt36 mac_offset 14
create ipif okt36 10.0.7.129/26 okt36 state enable
config ipif okt36 proxy_arp disable local disable
config ipif_mac_mapping ipif gornaya mac_offset 16
create ipif gornaya 10.0.8.1/25 gornaya state enable
config ipif gornaya proxy_arp disable local disable
config ipif_mac_mapping ipif heracle mac_offset 4
create ipif heracle 10.0.9.194/28 heracle state enable
config ipif heracle proxy_arp disable local disable
config ipif_mac_mapping ipif shodnya mac_offset 2
create ipif shodnya 172.16.0.6/22 shodnya state enable
config ipif shodnya proxy_arp disable local disable
config ipif_mac_mapping ipif manometr mac_offset 17
create ipif manometr 10.0.9.65/26 manometr state enable
config ipif manometr proxy_arp disable local disable
config ipif_mac_mapping ipif shodnya2 mac_offset 3
create ipif shodnya2 10.0.16.1/23 shodnya2 state enable
config ipif shodnya2 proxy_arp disable local disable
config ipif_mac_mapping ipif shodnya4 mac_offset 5
create ipif shodnya4 10.0.18.1/23 shodnya4 state enable
config ipif shodnya4 proxy_arp disable local disable
config ipif_mac_mapping ipif shodnya5 mac_offset 6
create ipif shodnya5 10.0.20.1/23 shodnya5 state enable
config ipif shodnya5 proxy_arp disable local disable
config ipif_mac_mapping ipif shodnya6 mac_offset 7
create ipif shodnya6 10.0.22.1/23 shodnya6 state enable
config ipif shodnya6 proxy_arp disable local disable
config ipif_mac_mapping ipif shodnya7 mac_offset 8
create ipif shodnya7 10.0.24.1/23 shodnya7 state enable
config ipif shodnya7 proxy_arp disable local disable
config ipif_mac_mapping ipif shodnya8 mac_offset 9
create ipif shodnya8 10.0.26.1/23 shodnya8 state enable
config ipif shodnya8 proxy_arp disable local disable
config ipif_mac_mapping ipif shodnya9 mac_offset 10
create ipif shodnya9 10.0.28.1/23 shodnya9 state enable
config ipif shodnya9 proxy_arp disable local disable
config ipif_mac_mapping ipif shodnya10 mac_offset 11
create ipif shodnya10 10.0.30.1/23 shodnya10 state enable
config ipif shodnya10 proxy_arp disable local disable
config ipif_mac_mapping ipif shodnya11 mac_offset 12
create ipif shodnya11 10.0.32.1/23 shodnya11 state enable
config ipif shodnya11 proxy_arp disable local disable
config ipif_mac_mapping ipif shodnya12 mac_offset 13
create ipif shodnya12 10.0.34.1/23 shodnya12 state enable
config ipif shodnya12 proxy_arp disable local disable
create ipif iq 10.0.7.81/29 shodnya state enable secondary
config ipif iq proxy_arp disable local disable
create ipif pmay_sw 10.0.7.89/29 pmay state enable secondary
config ipif pmay_sw proxy_arp disable local disable
create ipif igorw_sw 10.0.11.65/28 shodnya state enable secondary
config ipif igorw_sw proxy_arp disable local disable
create ipif okt36_sw 10.0.7.65/29 okt36 state enable secondary
config ipif okt36_sw proxy_arp disable local disable
create ipif shodnya3 10.0.36.1/22 shodnya state enable secondary
config ipif shodnya3 proxy_arp disable local disable
create ipif gornaya_sw1 10.0.9.129/28 gornaya state enable secondary
config ipif gornaya_sw1 proxy_arp disable local disable
create ipif gornaya_sw2 10.0.8.129/28 gornaya state enable secondary
config ipif gornaya_sw2 proxy_arp disable local disable
create ipif manometr_sw 10.0.9.49/28 manometr state enable secondary
config ipif manometr_sw proxy_arp disable local disable
config ipif iq ip_mtu 1500
config ipif pmay ip_mtu 1500
config ipif files ip_mtu 1500
config ipif okt36 ip_mtu 1500
config ipif System ip_mtu 1500
config ipif gornaya ip_mtu 1500
config ipif heracle ip_mtu 1500
config ipif pmay_sw ip_mtu 1500
config ipif shodnya ip_mtu 1500
config ipif igorw_sw ip_mtu 1500
config ipif manometr ip_mtu 1500
config ipif okt36_sw ip_mtu 1500
config ipif shodnya2 ip_mtu 1500
config ipif shodnya3 ip_mtu 1500
config ipif shodnya4 ip_mtu 1500
config ipif shodnya5 ip_mtu 1500
config ipif shodnya6 ip_mtu 1500
config ipif shodnya7 ip_mtu 1500
config ipif shodnya8 ip_mtu 1500
config ipif shodnya9 ip_mtu 1500
config ipif shodnya10 ip_mtu 1500
config ipif shodnya11 ip_mtu 1500
config ipif shodnya12 ip_mtu 1500
config ipif gornaya_sw1 ip_mtu 1500
config ipif gornaya_sw2 ip_mtu 1500
config ipif manometr_sw ip_mtu 1500
disable autoconfig

# LLDP

disable lldp
config lldp message_tx_interval 30
config lldp tx_delay 2
config lldp message_tx_hold_multiplier 4
config lldp reinit_delay 2
config lldp notification_interval 5
config lldp ports 1-12 notification disable
config lldp ports 1-12 admin_status tx_and_rx

# MBA

disable mac_based_access_control
config mac_based_access_control ports 1-12 state disable
config mac_based_access_control ports 1-12 mode host_based
config mac_based_access_control method local
config mac_based_access_control password default

# MCFILTER


# SNOOP

config limited_multicast_addr ports 1-12 state disable

# MLDSNP


# ACCESS_AUTHENTICATION_CONTROL

config authen_login default method local
config authen_enable default method local_enable
config authen application console login default
config authen application console enable default
config authen application telnet login default
config authen application telnet enable default
config authen application ssh login default
config authen application ssh enable default
config authen application http login default
config authen application http enable default
config authen parameter response_timeout 30
config authen parameter attempt 3
disable authen_policy

# AAA_LOCAL_ENABLE_PASSWORD


# NDP

config ipv6 nd ns ipif System retrans_time 0
config ipv6 nd ra ipif System state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600
config ipv6 nd ns ipif pmay retrans_time 0
config ipv6 nd ra ipif pmay state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600
config ipv6 nd ns ipif files retrans_time 0
config ipv6 nd ra ipif files state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600
config ipv6 nd ns ipif okt36 retrans_time 0
config ipv6 nd ra ipif okt36 state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600
config ipv6 nd ns ipif gornaya retrans_time 0
config ipv6 nd ra ipif gornaya state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600
config ipv6 nd ns ipif heracle retrans_time 0
config ipv6 nd ra ipif heracle state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600
config ipv6 nd ns ipif shodnya retrans_time 0
config ipv6 nd ra ipif shodnya state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600
config ipv6 nd ns ipif manometr retrans_time 0
config ipv6 nd ra ipif manometr state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600
config ipv6 nd ns ipif shodnya2 retrans_time 0
config ipv6 nd ra ipif shodnya2 state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600
config ipv6 nd ns ipif shodnya4 retrans_time 0
config ipv6 nd ra ipif shodnya4 state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600
config ipv6 nd ns ipif shodnya5 retrans_time 0
config ipv6 nd ra ipif shodnya5 state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600
config ipv6 nd ns ipif shodnya6 retrans_time 0
config ipv6 nd ra ipif shodnya6 state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600
config ipv6 nd ns ipif shodnya7 retrans_time 0
config ipv6 nd ra ipif shodnya7 state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600
config ipv6 nd ns ipif shodnya8 retrans_time 0
config ipv6 nd ra ipif shodnya8 state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rterval 600erval 198 max_rtr_adv_in
config ipv6 nd ns ipif shodnya9 retrans_time 0
config ipv6 nd ra ipif shodnya9 state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600
config ipv6 nd ns ipif shodnya10 retrans_time 0
config ipv6 nd ra ipif shodnya10 state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600
config ipv6 nd ns ipif shodnya11 retrans_time 0
config ipv6 nd ra ipif shodnya11 state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600
config ipv6 nd ns ipif shodnya12 retrans_time 0
config ipv6 nd ra ipif shodnya12 state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600

# WAC

config wac method radius
disable wac

# ARP

config arp_aging time 20
config gratuitous_arp send ipif_status_up disable
config gratuitous_arp send dup_ip_detected disable
config gratuitous_arp learning disable

# ROUTE

config route preference static 60
config route preference rip 100
config route preference ospfIntra 80
config route preference ospfInter 90
config route preference ospfExt1 110
config route preference ospfExt2 115
create iproute default 10.0.9.193 1 primary
create iproute 212.45.14.104/255.255.255.252 10.0.8.133 1 primary
config ecmp algorithm ip_destination crc_low
enable ecmp ospf

# PROUTE


# IGMP

config igmp ipif System version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif System last_member_query_interval 1
config igmp ipif pmay version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif pmay last_member_query_interval 1
config igmp ipif files version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif files last_member_query_interval 1
config igmp ipif okt36 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif okt36 last_member_query_interval 1
config igmp ipif gornaya version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif gornaya last_member_query_interval 1
config igmp ipif heracle version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif heracle last_member_query_interval 1
config igmp ipif shodnya version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif shodnya last_member_query_interval 1
config igmp ipif manometr version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif manometr last_member_query_interval 1
config igmp ipif shodnya2 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif shodnya2 last_member_query_interval 1
config igmp ipif shodnya4 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif shodnya4 last_member_query_interval 1
config igmp ipif shodnya5 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif shodnya5 last_member_query_interval 1
config igmp ipif shodnya6 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif shodnya6 last_member_query_interval 1
config igmp ipif shodnya7 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif shodnya7 last_member_query_interval 1
config igmp ipif shodnya8 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif shodnya8 last_member_query_interval 1
config igmp ipif shodnya9 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif shodnya9 last_member_query_interval 1
config igmp ipif shodnya10 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif shodnya10 last_member_query_interval 1
config igmp ipif shodnya11 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif shodnya11 last_member_query_interval 1
config igmp ipif shodnya12 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif shodnya12 last_member_query_interval 1
config igmp ipif iq version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif iq last_member_query_interval 1
config igmp ipif pmay_sw version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif pmay_sw last_member_query_interval 1
config igmp ipif igorw_sw version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif igorw_sw last_member_query_interval 1
config igmp ipif okt36_sw version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif okt36_sw last_member_query_interval 1
config igmp ipif shodnya3 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif shodnya3 last_member_query_interval 1
config igmp ipif gornaya_sw1 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif gornaya_sw1 last_member_query_interval 1
config igmp ipif gornaya_sw2 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif gornaya_sw2 last_member_query_interval 1
config igmp ipif manometr_sw version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif manometr_sw last_member_query_interval 1

# PIMSM

disable pim
config pim cbsr hash_masklen 30
config pim cbsr bootstrap_period 60
config pim register_suppression_time 60
config pim register_probe_time 5
config pim last_hop_spt_switchover never
config pim crp holdtime 150 priority 192
config pim crp wildcard_prefix_cnt 0
config pim ipif System state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif System priority -1
config pim ipif pmay state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif pmay priority -1
config pim ipif files state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif files priority -1
config pim ipif okt36 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif okt36 priority -1
config pim ipif gornaya state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif gornaya priority -1
config pim ipif heracle state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif heracle priority -1
config pim ipif shodnya state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif shodnya priority -1
config pim ipif manometr state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif manometr priority -1
config pim ipif shodnya2 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif shodnya2 priority -1
config pim ipif shodnya4 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif shodnya4 priority -1
config pim ipif shodnya5 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif shodnya5 priority -1
config pim ipif shodnya6 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif shodnya6 priority -1
config pim ipif shodnya7 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif shodnya7 priority -1
config pim ipif shodnya8 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif shodnya8 priority -1
config pim ipif shodnya9 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif shodnya9 priority -1
config pim ipif shodnya10 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif shodnya10 priority -1
config pim ipif shodnya11 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif shodnya11 priority -1
config pim ipif shodnya12 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif shodnya12 priority -1

# DVMRP

disable dvmrp
config dvmrp ipif System metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif pmay metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif files metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif okt36 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif gornaya metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif heracle metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif shodnya metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif manometr metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif shodnya2 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif shodnya4 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif shodnya5 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif shodnya6 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif shodnya7 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif shodnya8 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif shodnya9 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif shodnya10 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif shodnya11 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif shodnya12 metric 1 probe 10 neighbor_timeout 35 state disable

# IPMROUTE


# RIP

disable rip
config rip ipif System tx_mode disable state disable
config rip ipif System rx_mode disable state disable
config rip ipif pmay tx_mode disable state disable
config rip ipif pmay rx_mode disable state disable
config rip ipif files tx_mode disable state disable
config rip ipif files rx_mode disable state disable
config rip ipif okt36 tx_mode disable state disable
config rip ipif okt36 rx_mode disable state disable
config rip ipif gornaya tx_mode disable state disable
config rip ipif gornaya rx_mode disable state disable
config rip ipif heracle tx_mode disable state disable
config rip ipif heracle rx_mode disable state disable
config rip ipif shodnya tx_mode disable state disable
config rip ipif shodnya rx_mode disable state disable
config rip ipif manometr tx_mode disable state disable
config rip ipif manometr rx_mode disable state disable
config rip ipif shodnya2 tx_mode disable state disable
config rip ipif shodnya2 rx_mode disable state disable
config rip ipif shodnya4 tx_mode disable state disable
config rip ipif shodnya4 rx_mode disable state disable
config rip ipif shodnya5 tx_mode disable state disable
config rip ipif shodnya5 rx_mode disable state disable
config rip ipif shodnya6 tx_mode disable state disable
config rip ipif shodnya6 rx_mode disable state disable
config rip ipif shodnya7 tx_mode disable state disable
config rip ipif shodnya7 rx_mode disable state disable
config rip ipif shodnya8 tx_mode disable state disable
config rip ipif shodnya8 rx_mode disable state disable
config rip ipif shodnya9 tx_mode disable state disable
config rip ipif shodnya9 rx_mode disable state disable
config rip ipif shodnya10 tx_mode disable state disable
config rip ipif shodnya10 rx_mode disable state disable
config rip ipif shodnya11 tx_mode disable state disable
config rip ipif shodnya11 rx_mode disable state disable
config rip ipif shodnya12 tx_mode disable state disable
config rip ipif shodnya12 rx_mode disable state disable
config rip ipif iq tx_mode disable state disable
config rip ipif iq rx_mode disable state disable
config rip ipif pmay_sw tx_mode disable state disable
config rip ipif pmay_sw rx_mode disable state disable
config rip ipif igorw_sw tx_mode disable state disable
config rip ipif igorw_sw rx_mode disable state disable
config rip ipif okt36_sw tx_mode disable state disable
config rip ipif okt36_sw rx_mode disable state disable
config rip ipif shodnya3 tx_mode disable state disable
config rip ipif shodnya3 rx_mode disable state disable
config rip ipif gornaya_sw1 tx_mode disable state disable
config rip ipif gornaya_sw1 rx_mode disable state disable
config rip ipif gornaya_sw2 tx_mode disable state disable
config rip ipif gornaya_sw2 rx_mode disable state disable
config rip ipif manometr_sw tx_mode disable state disable
config rip ipif manometr_sw rx_mode disable state disable

# MD5


# SFLOW


# OSPF

config ospf ipif System area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif System authentication none metric 1 state disable passive disable
config ospf ipif okt36_sw area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif okt36_sw authentication none metric 1 state disable passive disable
config ospf ipif iq area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif iq authentication none metric 1 state disable passive disable
config ospf ipif pmay_sw area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif pmay_sw authentication none metric 1 state disable passive disable
config ospf ipif okt36 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif okt36 authentication none metric 1 state disable passive disable
config ospf ipif pmay area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif pmay authentication none metric 1 state disable passive disable
config ospf ipif gornaya area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif gornaya authentication none metric 1 state disable passive disable
config ospf ipif gornaya_sw2 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif gornaya_sw2 authentication none metric 1 state disable passive disable
config ospf ipif manometr_sw area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif manometr_sw authentication none metric 1 state disable passive disable
config ospf ipif manometr area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif manometr authentication none metric 1 state disable passive disable
config ospf ipif gornaya_sw1 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif gornaya_sw1 authentication none metric 1 state disable passive disable
config ospf ipif heracle area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif heracle authentication none metric 1 state disable passive disable
config ospf ipif files area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif files authentication none metric 1 state disable passive disable
config ospf ipif igorw_sw area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif igorw_sw authentication none metric 1 state disable passive disable
config ospf ipif shodnya2 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif shodnya2 authentication none metric 1 state disable passive disable
config ospf ipif shodnya4 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif shodnya4 authentication none metric 1 state disable passive disable
config ospf ipif shodnya5 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif shodnya5 authentication none metric 1 state disable passive disable
config ospf ipif shodnya6 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif shodnya6 authentication none metric 1 state disable passive disable
config ospf ipif shodnya7 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif shodnya7 authentication none metric 1 state disable passive disable
config ospf ipif shodnya8 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif shodnya8 authentication none metric 1 state disable passive disable
config ospf ipif shodnya9 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif shodnya9 authentication none metric 1 state disable passive disable
config ospf ipif shodnya10 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif shodnya10 authentication none metric 1 state disable passive disable
config ospf ipif shodnya11 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif shodnya11 authentication none metric 1 state disable passive disable
config ospf ipif shodnya12 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif shodnya12 authentication none metric 1 state disable passive disable
config ospf ipif shodnya3 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif shodnya3 authentication none metric 1 state disable passive disable
config ospf ipif shodnya area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif shodnya authentication none metric 1 state disable passive disable
config ospf router_id 10.90.90.90
disable ospf

# DNSR

disable dnsr
config dnsr primary nameserver 0.0.0.0
config dnsr secondary nameserver 0.0.0.0
disable dnsr cache
disable dnsr static

# DHCP_RELAY

disable dhcp_relay
config dhcp_relay hops 4 time 0
config dhcp_relay option_82 state disable
config dhcp_relay option_82 check disable
config dhcp_relay option_82 policy replace

# DHCP_SERVER

config dhcp ping_packets 2
config dhcp ping_timeout 500
disable dhcp_server

# VRRP

config vrrp ipif System authtype none
config vrrp ipif pmay authtype none
config vrrp ipif files authtype none
config vrrp ipif okt36 authtype none
config vrrp ipif gornaya authtype none
config vrrp ipif heracle authtype none
config vrrp ipif shodnya authtype none
config vrrp ipif manometr authtype none
config vrrp ipif shodnya2 authtype none
config vrrp ipif shodnya4 authtype none
config vrrp ipif shodnya5 authtype none
config vrrp ipif shodnya6 authtype none
config vrrp ipif shodnya7 authtype none
config vrrp ipif shodnya8 authtype none
config vrrp ipif shodnya9 authtype none
config vrrp ipif shodnya10 authtype none
config vrrp ipif shodnya11 authtype none
config vrrp ipif shodnya12 authtype none
config vrrp ipif iq authtype none
config vrrp ipif pmay_sw authtype none
config vrrp ipif igorw_sw authtype none
config vrrp ipif okt36_sw authtype none
config vrrp ipif shodnya3 authtype none
config vrrp ipif gornaya_sw1 authtype none
config vrrp ipif gornaya_sw2 authtype none
config vrrp ipif manometr_sw authtype none
disable vrrp

disable vrrp ping


#-------------------------------------------------------------------
# End of configuration file for DGS-3612
#-------------------------------------------------------------------

сниферить случаем не пробовали?
ACL у вас отсутствует, вероятно вы фильтруете нежелательный трафик где-либо ещё, так?

В следующий раз конфиг выкладывайте где-нибудь на файловом хранилище, и ссылку размещайте.

port security, storm control, loopback detect и rstp есть на доступе.
да и нет ни на одном порту cудя по счетчикам пакетов никаких аномалий.
Сниферить на предмет чего?

Ну а реакция сотрудников Длинка то будет?

Из одного конфига понять почему это происходит у Вас невозможно, нет ни топологии сети, ни конкретных данных. Вы когда перепрошивали коммутатор на последнюю версию прошивки сброс настроек и заливку конфига делали?

_________________
С уважением,
Бигаров Руслан.

Сброс конечно же не делал, потому как доступ к свитчу только удаленный. Но объясните пожалуйста, что изменится от того, что я сохраню конфиг командой upload до перепрошивки, и потом залью этот же конфиг после обновления. Ведь это же будет один и тот же файл.

Или же надо делать отдельный конфиг, в котором будут команды настройки, выполняемые руками (то есть без настроек по умолчанию, которые потом появляются в конфиге, загруженном со свитча)!?

Если да, до почему об этом не сказано в руководстве, и не проще ли не включать эти default команды в скрипт, как это сделано в большинстве других коммутаторов?

Потом, возвращаясь к вопросу обновления. Свитч достаточно долго, несколько недель нормально работал после обновления.

Что за конкретные данные вы хотите видеть?
Топология простая, свитч единственный коммутатор 3 уровня, к нему подключены все сегменты, которые являются кольцами. Каждое кольцо подключено к двум портам этого коммутатора. Stp разрывает эти кольца, и по сути получается звезда.

Кто Вам такое сказал!? А добавление нового функционала и дополнение существующего функционала никто не отменял.



Нет таких команд.



Значит что-то всё-таки изменилось в сети. Также я не увидел какие коммутаторы стоят на уровне доступа.

_________________
С уважением,
Бигаров Руслан.

На доступе:
Allied Telesyn at-8000s/48
EdgeCore ES3550YA
Dlink DES-3526

То есть после upload'а конфига в коммутатор и до сохранения его на флэш с ним происходят какие-то действия? Объясните, я очень хочу понять эту логику.

Ну это очевидно, что что-то изменилось. Вопрос в том, чтобы найти ошибки в коммутаторе, которые отвечают за его болезненную реакцию на эти изменения. А то что, эти изменения не критичные, сейчас показывает нормальная работа другого маршрутизатора на месте длинка.

2 kiselev99 > Это не ошибки коммутатора или софта, просто, в памяти у Вас остался старый конфиг, т.е. адресация переменных старая, а в новой прошивке адресация может измениться, соответственно, когда новая прошивка пытается получить настройки, то она может получить не корректные данные, из-за этого и могут быть проблемы в работе.

_________________
С уважением,
Бигаров Руслан.

Такое ощущение, что мы говорим о каких-то разных конфигах.
Я под конфигом подразумеваю текстовый файл, который хранится на флэшке свитча. Я предполагаю, что каждый раз после загрузки свитча команды из этого конфига должны им интерпретироваться, и не важно какая у него прошивка, если особо не отмечены случаи изменения синтаксиса этих команд. Вы же говорите о каких-то других вещах, причем не объясняя их суть. Отсюда вытекают и мои вопросы и аналогичные вопросы других людей о необходимости действий по сбросу свитча.

Поясните пожалуйста, о какой адресации переменных идет речь. Какова логика загрузки свитча. И можно ли выполнить корректное удаленное обновление свитча?

Спасибо.

Укажите пожалуйста в личку Ваш телефон.

ммм... тоже интересно - можно сюда хотя бы тезисно отписать?

_________________
Это текст, который можно добавлять к размещаемым вами сообщениям. Длина его ограничена 255 символами.

Мы про оригинальную проблему. У Вас управление вынесено в отдельный VLAN в сети? Запрещён ли доступ в управляющий VLAN с интерфейсом System из клиентских VLAN-ов при помощи ACL?