取消
显示结果 
搜索替代 
您的意思是: 
cancel
15858
查看次数
0
有帮助
17
回复

【求助】关于ISR4451-X/K9 (2RU)使用不定时重启问题疑问

zhihonghan42550
Spotlight
Spotlight
各路大神好,最近遇到一个问题,超出自己知识范围,特来求助。
Parameter map cws-tunnel global not configuredcisco ISR4451-X/K9 (2RU) processor with 1647778K/6147K bytes of memory.
Processor board ID FT***
4 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
7341807K bytes of flash memory at bootflash:.
这么一台设备,从11月开始,一接办公网络,就不定时重启,查看深信服,大概带机量在400-500之间,
但日常查看CPU 内存也没啥异常,但就是不定时重启。
这台设备19年已经修两次了,联系供应商,也说没遇到类似情况,现在还拖着
然后一直用着备用路由,备用路由CPU平均值80%左右,好怕出问题。:'(
请各路大神协助解答一下?小弟不胜感激,仅有的22金币虽说不多,但也表达个心意,如数奉上
大概拓扑如图:
112607g4mvac2p5ca6sz52.png
ASR4451#sh log
Syslog logging: enabled (0 messages dropped, 10 messages rate-limited, 0 flushes, 0 overruns, xml disabled, filtering disabled)
No Active Message Discriminator.
No Inactive Message Discriminator.
Console logging: level warnings, 14 messages logged, xml disabled,
filtering disabled
Monitor logging: level debugging, 0 messages logged, xml disabled,
filtering disabled
Buffer logging: level warnings, 14 messages logged, xml disabled,
filtering disabled
Exception Logging: size (4096 bytes)
Count and timestamp logging messages: disabled
Persistent logging: disabled
No active filter modules.
Trap logging: disabled

Log Buffer (4096 bytes):
*Nov 11 08:14:30.421: %LINK-3-UPDOWN: Interface Lsmpi0, changed state to up
*Nov 11 08:14:30.421: %LINK-3-UPDOWN: Interface EOBC0, changed state to up
*Nov 11 08:14:30.421: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state to down
*Nov 11 08:14:30.425: %LINK-3-UPDOWN: Interface LIIN0, changed state to up
*Nov 11 16:14:35.296 Beijing: %SPA-3-ENVMON_NOT_MONITORED:iomd: Environmental monitoring is not enabled for ISR4451-X-4x1GE[0/0]
*Nov 11 16:14:35.430 Beijing: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up
*Nov 11 16:14:41.870 Beijing: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/0, changed state to down
*Nov 11 16:14:41.877 Beijing: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/1, changed state to down
*Nov 11 16:14:41.880 Beijing: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/2, changed state to down
*Nov 11 16:14:41.880 Beijing: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/3, changed state to down
*Nov 11 16:14:55.393 Beijing: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/1, changed state to up
*Nov 11 16:14:57.394 Beijing: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/3, changed state to up
*Nov 11 16:15:05.821 Beijing: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up
*Nov 11 16:15:05.825 Beijing: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to up

ASR4451#sh run        
Building configuration...
Current configuration : 5215 bytes
!
version 15.5
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
no platform punt-keepalive disable-kernel-core
!
hostname ASR4451
!
boot-start-marker
boot system flash:isr4400-universalk9.03.16.08.S.155-3.S8-ext.SPA.bin
boot system flash isr4400-universalk9.0
boot system flash bootflash:/isr4400-universalk9.03.16.08.S.155-3.S8-ext.SPA.bin
boot-end-marker
!
!
vrf definition Mgmt-intf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
logging buffered warnings
logging console warnings
!
no aaa new-model
clock timezone Beijing 8 0
!
!
!
!
!
login block-for 600 attempts 4 within 60
!
!
!
!
!
!
!
subscriber templating
!
multilink bundle-name authenticated
!
license udi pid ISR4451-X/K9 sn
!
spanning-tree extend system-id
!
!
redundancy
mode none
!
no cdp run
!
track 10 interface GigabitEthernet0/0/2 line-protocol
!
track 20 interface GigabitEthernet0/0/1 line-protocol
!
track 30 interface GigabitEthernet0/0/3 line-protocol
!
interface Loopback0
ip address 192.168.*.1 255.255.255.0
!
interface Loopback1
no ip address
!
interface GigabitEthernet0/0/0
ip address 192.168.*.1 255.255.255.0
negotiation auto
!
interface GigabitEthernet0/0/1
no ip address
ip nat outside
ip access-group port_445_5938 in
negotiation auto
pppoe enable group 1
pppoe-client dial-pool-number 1
ip virtual-reassembly
!
interface GigabitEthernet0/0/2
no ip address
ip nat outside
ip access-group port_445_5938 in
negotiation auto
pppoe enable group 2
pppoe-client dial-pool-number 2
ip virtual-reassembly
!
interface GigabitEthernet0/0/3
no ip address
ip nat outside
ip access-group port_445_5938 in
negotiation auto
pppoe enable group 3
pppoe-client dial-pool-number 3
ip virtual-reassembly
!
interface GigabitEthernet0
vrf forwarding Mgmt-intf
no ip address
shutdown
negotiation auto
!
interface Dialer0
description adsl-dianxin200
ip address negotiated
ip nat outside
encapsulation ppp
ip tcp adjust-mss 1440
dialer pool 1
dialer idle-timeout 0
dialer-group 1
ppp authentication pap callin
ppp pap sent-username *
ppp ipcp dns request
!
interface Dialer1
description adsl-dianxin500
ip address negotiated
ip nat outside
encapsulation ppp
ip tcp adjust-mss 1440
dialer pool 2
dialer idle-timeout 0
dialer-group 2
ppp authentication pap callin
ppp pap sent-username *
!
interface Dialer2
description adsl-liantong200
ip address negotiated
ip nat outside
encapsulation ppp
ip tcp adjust-mss 1440
dialer pool 3
dialer idle-timeout 0
dialer-group 3
ppp authentication pap callin
ppp pap sent-username *
ppp ipcp dns request
ip virtual-reassembly max-reassemblies 1024
!
ip nat inside source route-map to_D0 interface Dialer0 overload
ip nat inside source route-map to_D1 interface Dialer1 overload
ip nat inside source route-map to_D2 interface Dialer2 overload
ip forward-protocol nd
no ip http server
no ip http secure-server
ip tftp source-interface GigabitEthernet0
ip route 0.0.0.0 0.0.0.0 Dialer1 track 10
ip route 0.0.0.0 0.0.0.0 Dialer0 10
ip route 0.0.0.0 0.0.0.0 Dialer2 20
ip route 192.168.0.0 255.255.0.0 192.168.20.2
ip ssh authentication-retries 5
ip ssh version 2
!
!
ip access-list extended NAT_D0
permit ip 192.168.0.0 0.0.255.255 any
ip access-list extended NAT_D1
permit ip 192.168.0.0 0.0.255.255 any
ip access-list extended NAT_D2
permit ip 192.168.0.0 0.0.255.255 any
ip access-list extended out_D0
permit ip 192.168.100.0 0.0.0.255 any
permit ip 192.168.*.0 0.0.0.255 any
permit ip 192.168.*.0 0.0.0.255 any
permit ip 192.168.*.0 0.0.0.255 any
permit ip 192.168.*.0 0.0.0.255 any
ip access-list extended out_D2
permit ip 192.168.*.0 0.0.0.255 any
permit ip 192.168.*.0 0.0.0.255 any
ip access-list extended port_445_5938
deny tcp any any eq 445
deny tcp any any eq 5938
permit ip any any
!
no logging trap
logging source-interface Loopback0
logging host 192.168*
access-list 90 permit 192.168*
access-list 90 permit 192.168*
!
route-map to_D0 permit 10
match ip address NAT_D0
match interface Dialer0
!
route-map to_D1 permit 10
match ip address NAT_D1
match interface Dialer1
!
route-map to_D2 permit 10
match ip address NAT_D2
match interface Dialer2
!
route-map out_D0 permit 10
match ip address out_D0
match track 20
set default interface Dialer0
!
route-map out_D0 permit 20
match ip address out_D2
match track 30
set default interface Dialer2
!
!
control-plane
!
!
line con 0
exec-timeout 3 0
logging synchronous
stopbits 1
line aux 0
stopbits 1
line vty 0 4
exec-timeout 20 0
privilege level 15
login local
transport input ssh
line vty 5 15
login local
transport input ssh
!
end
ASR4451# sh processes cpu
CPU utilization for five seconds: 0%/0%; one minute: 0%; five minutes: 0%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
1 3 33 90 0.00% 0.00% 0.00% 0 Chunk Manager
2 18 81 222 0.00% 0.00% 0.00% 0 Load Meter
3 0 2 0 0.00% 0.00% 0.00% 0 SSH Event handle
4 0 1 0 0.00% 0.00% 0.00% 0 Retransmission o
5 0 1 0 0.00% 0.00% 0.00% 0 IPC ISSU Dispatc
6 5 12 416 0.00% 0.00% 0.00% 0 RF Slave Main Th
7 0 1 0 0.00% 0.00% 0.00% 0 EDDRI_MAIN
8 0 1 0 0.00% 0.00% 0.00% 0 RO Notify Timers
9 87 54 1611 0.00% 0.01% 0.00% 0 Check heaps
10 0 9 0 0.00% 0.00% 0.00% 0 Pool Manager
11 0 1 0 0.00% 0.00% 0.00% 0 DiscardQ Backgro
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
12 0 2 0 0.00% 0.00% 0.00% 0 Timers
13 0 20 0 0.00% 0.00% 0.00% 0 WATCH_AFS
14 0 1 0 0.00% 0.00% 0.00% 0 MEMLEAK PROCESS
15 2 5 400 0.00% 0.00% 0.00% 0 ARP Input
16 8 440 18 0.00% 0.00% 0.00% 0 ARP Background
17 0 2 0 0.00% 0.00% 0.00% 0 ATM Idle Timer
18 0 1 0 0.00% 0.00% 0.00% 0 ATM ASYNC PROC
19 0 1 0 0.00% 0.00% 0.00% 0 CEF MIB API
20 0 1 0 0.00% 0.00% 0.00% 0 AAA_SERVER_DEADT
21 0 1 0 0.00% 0.00% 0.00% 0 Policy Manager
22 1 28 35 0.00% 0.00% 0.00% 0 DDR Timers
ASR4451#sh processes memory 
Processor Pool Total: 1687325248 Used: 284327624 Free: 1402997624
lsmpi_io Pool Total: 6295128 Used: 6294296 Free: 832
PID TTY Allocated Freed Holding Getbufs Retbufs Process
0 0 423479288 168386280 237274936 686 799 *Init*
0 0 360 257952 360 0 0 *Sched*
0 0 844776 337976 446416 1 1 *Dead*
0 0 0 0 395600 0 0 *MallocLite*
1 0 2089280 0 2119144 0 0 Chunk Manager
2 0 448 448 17864 0 0 Load Meter
3 0 8696 0 38464 2 2 SSH Event handle
4 0 0 0 29864 0 0 Retransmission o
5 0 0 0 29864 0 0 IPC ISSU Dispatc
6 0 528368 22648 463560 0 0 RF Slave Main Th
7 0 65632 0 167496 0 0 EDDRI_MAIN
8 0 0 0 29864 0 0 RO Notify Timers
9 0 6240 448 35656 0 0 Check heaps
10 0 562688 548864 112296 51 0 Pool Manager
11 0 0 0 29864 0 0 DiscardQ Backgro
12 0 448 448 29864 0 0 Timers
13 0 0 0 17864 0 0 WATCH_AFS
14 0 0 0 29864 0 0 MEMLEAK PROCESS
15 0 0 0 29864 9 9 ARP Input
ASR4451#sh log uptime 
Slot Reset reason Power On
---------------------------------------------------------
0 reset local software 07/19/19 11:36:52
0 reset local software 07/19/19 12:04:47
0 reset local software 10/23/19 09:39:28
0 reset local software 10/24/19 09:29:06
0 reset local software 11/02/19 17:59:08
0 reset local software 11/02/19 19:01:01
0 reset local software 11/03/19 04:08:53
0 reset local software 11/03/19 11:05:09
0 reset local software 11/03/19 16:23:54
0 reset local software 11/04/19 02:57:56
0 reset local software 11/04/19 10:38:26
0 reset local software 11/04/19 14:11:46
0 reset local software 11/05/19 12:15:55
0 reset local software 11/05/19 12:24:53
0 reset local software 11/05/19 12:31:36
0 reset local software 11/05/19 14:12:36
0 reset local software 11/05/19 14:36:20
0 reset local software 11/05/19 14:54:20
0 reset local software 11/09/19 08:28:54
0 reset local software 11/11/19 09:24:28
0 reset local software 11/11/19 13:19:15
0 reset local software 11/11/19 16:13:50
0 reset local software 11/12/19 09:21:09
0 reset local software 11/14/19 18:18:27
0 reset local software 11/29/19 10:08:06
0 reset local software 01/01/10 08:02:34
0 reset local software 01/01/10 08:15:53
0 reset local software 01/01/10 08:45:06
0 reset local software 01/01/10 08:58:54
0 reset power on 01/04/10 07:23:51
0 reset power on 01/06/10 04:13:23
0 reset power on 01/06/10 06:42:11
0 reset power on 01/11/10 07:56:48
0 reset local software 12/19/19 13:46:54
0 reset local software 12/19/19 15:18:48
0 reset local software 12/19/19 15:39:55
0 reset local software 12/19/19 16:01:15
0 reset local software 12/19/19 17:13:57
0 reset local software 12/19/19 19:13:16
0 reset local software 12/20/19 08:44:12
0 reset local software 12/20/19 09:57:44
0 reset local software 12/20/19 10:42:10

17 条回复17

elitepublic.net
Level 1
Level 1
会不会赶上那一批计时芯片的啦 最直接的方式 去掉路由器 防火墙直接怼外网

zhihonghan42550
Spotlight
Spotlight
stephenzyc 发表于 2020-4-27 15:59
会不会赶上那一批计时芯片的啦 最直接的方式 去掉路由器 防火墙直接怼外网

计时芯片?防火墙也可以拨号的吗?

elitepublic.net
Level 1
Level 1
zhihonghan42550 发表于 2020-4-28 17:58
计时芯片?防火墙也可以拨号的吗?

防火墙可以拨号
入门指南

使用上面的搜索栏输入关键字、短语或问题,搜索问题的答案。

我们希望您在这里的旅程尽可能顺利,因此这里有一些链接可以帮助您快速熟悉思科社区:









快捷链接