Добрый день. В логах стабильно раз в сутки появляется, с другими адресами таких записей нет:
*Nov 25 21:00:10: %NFPP_IP_GUARD-4-DOS_DETECTED: Host<IP=10.63.1.48,MAC=N/A,port=Gi1/0/19,VLAN=1> was detected.(2016-11-25 21:0:10)
*Nov 25 22:00:11: %NFPP_IP_GUARD-4-DOS_DETECTED: Host<IP=10.63.1.48,MAC=N/A,port=Gi1/0/19,VLAN=1> was detected.(2016-11-25 22:0:11)
*Nov 25 23:00:12: %NFPP_IP_GUARD-4-DOS_DETECTED: Host<IP=10.63.1.48,MAC=N/A,port=Gi1/0/19,VLAN=1> was detected.(2016-11-25 23:0:12)
*Nov 26 00:00:11: %NFPP_IP_GUARD-4-DOS_DETECTED: Host<IP=10.63.1.48,MAC=N/A,port=Gi1/0/19,VLAN=1> was detected.(2016-11-26 0:0:11)
*Nov 26 01:00:15: %NFPP_IP_GUARD-4-DOS_DETECTED: Host<IP=10.63.1.48,MAC=N/A,port=Gi1/0/19,VLAN=1> was detected.(2016-11-26 1:0:15)
*Nov 26 02:00:12: %NFPP_IP_GUARD-4-DOS_DETECTED: Host<IP=10.63.1.48,MAC=N/A,port=Gi1/0/19,VLAN=1> was detected.(2016-11-26 2:0:12)
*Nov 26 03:00:13: %NFPP_IP_GUARD-4-DOS_DETECTED: Host<IP=10.63.1.48,MAC=N/A,port=Gi1/0/19,VLAN=1> was detected.(2016-11-26 3:0:13)
*Nov 26 04:00:14: %NFPP_IP_GUARD-4-DOS_DETECTED: Host<IP=10.63.1.48,MAC=N/A,port=Gi1/0/19,VLAN=1> was detected.(2016-11-26 4:0:14)
*Nov 26 05:00:16: %NFPP_IP_GUARD-4-DOS_DETECTED: Host<IP=10.63.1.48,MAC=N/A,port=Gi1/0/19,VLAN=1> was detected.(2016-11-26 5:0:16)
*Nov 26 06:00:17: %NFPP_IP_GUARD-4-DOS_DETECTED: Host<IP=10.63.1.48,MAC=N/A,port=Gi1/0/19,VLAN=1> was detected.(2016-11-26 6:0:17)
*Nov 26 07:00:20: %NFPP_IP_GUARD-4-DOS_DETECTED: Host<IP=10.63.1.48,MAC=N/A,port=Gi1/0/19,VLAN=1> was detected.(2016-11-26 7:0:20)
*Nov 26 08:00:21: %NFPP_IP_GUARD-4-DOS_DETECTED: Host<IP=10.63.1.48,MAC=N/A,port=Gi1/0/19,VLAN=1> was detected.(2016-11-26 8:0:21)
10.63.1.48 это сервер Win 2008 R2 с ролью VPN сервера, включена маршрутизация и удалённый доступ, больше ничего на нём нет можно сказать, пара шар и всё. Менял порт на сервере, порт на коммутаторе. Нашёл похожую тему
viewtopic.php?f=2&t=172822 , но ответа не нашёл. Подскажите в чём может быть проблема?