Hello, I have problem in my network , all downloads get hang on bytes, whenever we try to download file it downloads with normal speed but then it drops to 0 byte/s and hangs there. on every computer in our lan .
boot-start-marker
boot-end-marker
!
!
logging buffered 4096
logging console critical
!
aaa new-model
!
!
!
!
!
!
!
aaa session-id common
!
memory-size iomem 10
clock timezone Tbilisi 4 0
crypto pki token default removal timeout 0
!
!
no ip source-route
!
!
!
ip dhcp bootp ignore
ip dhcp excluded-address x
ip dhcp excluded-address x
!
ip dhcp pool machines
network x
default-router x
dns-server x
!
!
ip cef
no ip bootp server
no ip domain lookup
ip domain name x
ip name-server x
ip name-server x
no ipv6 cef
!
!
multilink bundle-name authenticated
!
!
!
no spanning-tree vlan 1
no spanning-tree vlan 10
vtp mode transparent
!
!
!
vlan 10
name LAN
!
ip tcp synwait-time 5
!
class-map match-any blocktorrent
match protocol bittorrent
match protocol kazaa2
match protocol edonkey
match protocol fasttrack
match protocol gnutella
!
!
policy-map blocktorrent
class blocktorrent
drop
!
!
!
!
crypto ipsec transform-set ESP-3DES esp-3des esp-sha-hmac
crypto ipsec transform-set transform-method-1 esp-3des esp-sha-hmac
!
crypto ipsec profile x
set transform-set ESP-3DES
!
crypto ipsec profile x
set transform-set transform-method-1
!
!
!
!
!
!
interface Tunnel10
x
ip address x
ip mtu 1446
ip virtual-reassembly in
ip tcp adjust-mss 1360
tunnel source x
tunnel mode ipsec ipv4
tunnel destination x
tunnel protection ipsec profile x
!
interface Tunnel20
x
ip address x
ip mtu 1446
ip virtual-reassembly in
ip tcp adjust-mss 1360
tunnel source x
tunnel mode ipsec ipv4
tunnel destination x
tunnel protection ipsec profile x
!
interface Tunnel30
x
ip address x x
ip mtu 1446
ip virtual-reassembly in
ip tcp adjust-mss 1360
tunnel source x
tunnel mode ipsec ipv4
tunnel destination x
tunnel protection ipsec profile x
!
interface Tunnel40
x
ip address x x
ip mtu 1446
ip virtual-reassembly in
ip tcp adjust-mss 1360
tunnel source x
tunnel mode ipsec ipv4
tunnel destination x
tunnel protection ipsec profile x
!
interface Tunnel50
x
ip address x
ip mtu 1446
ip virtual-reassembly in
ip tcp adjust-mss 1360
tunnel source x
tunnel mode ipsec ipv4
tunnel destination x
tunnel protection ipsec profile x
!
interface Tunnel60
x
ip address x x
ip mtu 1446
ip virtual-reassembly in
ip tcp adjust-mss 1360
tunnel source x
tunnel mode ipsec ipv4
tunnel destination x
tunnel protection ipsec profile x
!
interface Tunnel80
x
ip address x x
ip mtu 1400
ip virtual-reassembly in
ip tcp adjust-mss 1360
tunnel source x
tunnel mode ipsec ipv4
tunnel destination x
tunnel protection ipsec profile x
!
interface Tunnel190
x
ip address x x
ip mtu 1446
ip virtual-reassembly in
ip tcp adjust-mss 1360
tunnel source x
tunnel mode ipsec ipv4
tunnel destination x
tunnel protection ipsec profile xs
!
interface FastEthernet0
description ### LAN ###
switchport access vlan 10
no ip address
load-interval 30
spanning-tree portfast
!
interface FastEthernet1
description ### LAN ###
switchport access vlan 10
no ip address
load-interval 30
spanning-tree portfast
!
interface FastEthernet2
description ### LAN ###
switchport access vlan 10
no ip address
load-interval 30
spanning-tree portfast
!
interface FastEthernet3
description ### LAN ###
switchport access vlan 10
no ip address
load-interval 30
spanning-tree portfast
!
interface FastEthernet4
description ISP
ip address x x
ip nat outside
ip virtual-reassembly in
load-interval 30
duplex auto
speed auto
no cdp enable
!
interface Virtual-Template2 type tunnel
ip unnumbered Vlan10
tunnel mode ipsec ipv4
tunnel protection ipsec profile HEAD
!
interface Virtual-Template50 type tunnel
ip unnumbered Vlan10
tunnel mode ipsec ipv4
tunnel protection ipsec profile profile-method-1
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
description ### LOCAL AREA NETWORK ###
ip address x x
ip nat inside
ip virtual-reassembly in
service-policy input blocktorrent
!
ip local pool x
ip local pool x
ip forward-protocol nd
no ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip nat inside source list NAT interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 ISP
ip route x
ip route x
ip route x
ip route x
ip route xI
ip route x
ip route x
ip route x
!
ip access-list standard MGMT
permit x
permit x
permit x
permit x
permit x
deny any log
!
ip access-list extended x
permit ip x x
permit ip x x
ip access-list extended NAT
permit ip x any
!
access-list 127 permit ip x host x
access-list 128 permit ip host x host x
access-list 128 permit ip host x host x
access-list 128 permit ip host x host x
!
!
!
!
!
!
!
control-plane
!
alias exec c conf t
alias exec ss show run int
alias exec s show ip int brie | e una
alias exec r show ip route | be Gate
!
line con 0
logging synchronous
line aux 0
line vty 0 4
exec-timeout 60 0
logging synchronous
transport input telnet ssh
!
scheduler interval 500
ntp server x
end
