cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
387
Views
0
Helpful
1
Replies

Cisco Router & IBM router

cxo-179682
Level 1
Level 1

Below are the configuration on the Cisco Router which is running PRI & 2M link concurrently. Is there any fine tuning need to be done coz I can see a lot of dropped packets on the Cisco router.

ABC#show run

Building configuration...

Current configuration : 6107 bytes

!

! Last configuration change at 14:20:01 UTC Tue Aug 27 2002

! NVRAM config last updated at 13:06:50 UTC Tue Aug 27 2002

!

version 12.2

service timestamps debug uptime

service timestamps log uptime

service password-encryption

!

hostname ABC

!

enable password 7 xxxxx

!

ip subnet-zero

!

!

no ip domain-lookup

!

virtual-profile virtual-template 1

multilink virtual-template 1

isdn switch-type primary-net5

!

controller E1 1/0

pri-group timeslots 1-31

!

controller E1 1/1

shutdown

!

!

!

interface FastEthernet0/0

ip address 202.187.231.17 255.255.255.240

duplex auto

speed auto

!

interface Serial0/0

description Link to Cordoda via TIME LL008537(2MB)

bandwidth 2048

ip address 172.24.31.26 255.255.255.252

ip access-group 101 in

encapsulation ppp

max-reserved-bandwidth 100

fair-queue 500 256 0

no cdp enable

hold-queue 100 in

!

interface FastEthernet0/1

ip address 202.187.231.129 255.255.255.240

duplex auto

speed auto

!

interface Serial0/1

no ip address

shutdown

!

interface Serial1/0:15

description ABC ISDN PRI - 20504660

no ip address

encapsulation ppp

isdn switch-type primary-net5

no cdp enable

ppp multilink

ppp multilink fragment-delay 20

!

interface Virtual-Template1

description Virtual-Access

bandwidth 1920

ip address 172.24.31.30 255.255.255.252

ip access-group 101 in

max-reserved-bandwidth 100

fair-queue 500 256 0

ppp multilink

!

ip classless

ip route 0.0.0.0 0.0.0.0 172.24.31.25

ip route 0.0.0.0 0.0.0.0 172.24.31.29 2

ip route 172.17.4.4 255.255.255.255 172.24.31.25

ip route 172.17.4.4 255.255.255.255 172.24.31.29 2

ip route 172.17.4.31 255.255.255.255 172.24.31.25

ip route 172.17.4.31 255.255.255.255 172.24.31.29 2

ip route 172.30.206.100 255.255.255.255 202.187.231.21

ip route 172.31.11.209 255.255.255.255 202.187.231.21

ip route 202.187.231.28 255.255.255.255 202.187.231.21

ip route 202.187.231.29 255.255.255.255 202.187.231.21

ip route 202.187.231.32 255.255.255.240 202.187.231.22

ip route 202.187.231.48 255.255.255.240 202.187.231.21

ip route 202.188.0.0 255.255.0.0 172.24.31.29

ip route 202.188.0.0 255.255.0.0 172.24.31.25 2

ip route 202.189.0.0 255.255.0.0 172.24.31.29

ip route 202.189.0.0 255.255.0.0 172.24.31.25 2

ip route 203.82.0.0 255.255.0.0 172.24.31.29

ip route 203.82.0.0 255.255.0.0 172.24.31.25 2

ip route 203.106.0.0 255.255.0.0 172.24.31.29

ip route 203.106.0.0 255.255.0.0 172.24.31.25 2

ip route 203.115.0.0 255.255.0.0 172.24.31.29

ip route 203.115.0.0 255.255.0.0 172.24.31.25 2

ip route 203.121.0.0 255.255.0.0 172.24.31.29

ip route 203.121.0.0 255.255.0.0 172.24.31.25 2

ip route 210.19.0.0 255.255.0.0 172.24.31.29

ip route 210.19.0.0 255.255.0.0 172.24.31.25 2

ip route 210.186.0.0 255.255.0.0 172.24.31.29

ip route 210.186.0.0 255.255.0.0 172.24.31.25 2

ip route 210.187.0.0 255.255.0.0 172.24.31.29

ip route 210.187.0.0 255.255.0.0 172.24.31.25 2

ip route 210.195.0.0 255.255.0.0 172.24.31.29

ip route 210.195.0.0 255.255.0.0 172.24.31.25 2

no ip http server

no ip pim bidir-enable

!

access-list 101 permit tcp host 159.104.6.51 eq telnet host 202.187.231.141

access-list 101 permit tcp host 172.17.4.31 any eq telnet

access-list 101 deny tcp any any eq discard

access-list 101 deny tcp any eq discard any

access-list 101 deny udp any any eq discard

access-list 101 deny udp any eq discard any

access-list 101 deny tcp any any eq telnet

access-list 101 deny tcp any eq telnet any

access-list 101 deny udp any any eq time

access-list 101 deny udp any eq time any

access-list 101 deny udp any any eq bootps

access-list 101 deny udp any eq bootps any

access-list 101 deny udp any any eq tftp

access-list 101 deny udp any eq tftp any

access-list 101 deny udp any any eq snmp

access-list 101 deny udp any eq snmp any

access-list 101 deny udp any any eq 1025

access-list 101 deny udp any eq 1025 any

access-list 101 deny 111 any any

access-list 101 deny 161 any any

access-list 101 permit icmp host 172.17.4.31 any

access-list 101 permit icmp host 159.104.6.51 host 202.187.231.141

access-list 101 permit icmp any host 172.17.4.31

access-list 101 permit icmp host 172.17.4.233 any

access-list 101 permit icmp any host 172.17.4.233

access-list 101 permit icmp host 202.187.231.21 any

access-list 101 permit icmp any host 202.187.231.21

access-list 101 deny icmp any any

access-list 101 deny ip 10.0.0.0 0.255.255.255 any

access-list 101 deny ip 172.16.0.0 0.0.255.255 any

access-list 101 deny ip 172.18.0.0 0.0.255.255 any

access-list 101 deny ip 172.19.0.0 0.0.255.255 any

access-list 101 deny ip 172.20.0.0 0.0.255.255 any

access-list 101 deny ip 172.21.0.0 0.0.255.255 any

access-list 101 deny ip 172.22.0.0 0.0.255.255 any

access-list 101 deny ip 172.23.0.0 0.0.255.255 any

access-list 101 deny ip 172.25.0.0 0.0.255.255 any

access-list 101 deny ip 172.26.0.0 0.0.255.255 any

access-list 101 deny ip 172.27.0.0 0.0.255.255 any

access-list 101 deny ip 172.28.0.0 0.0.255.255 any

access-list 101 deny ip 172.29.0.0 0.0.255.255 any

access-list 101 deny ip 172.30.0.0 0.0.255.255 any

access-list 101 deny ip 192.168.0.0 0.0.255.255 any

access-list 101 deny ip any host 202.187.231.30

access-list 101 permit ip any any

access-list 102 permit tcp host 172.17.4.31 any eq telnet

access-list 102 deny ip any any

banner motd ^CC

+-------------------------------------------+

| Property of Cordoda Corporation Sdn. Bhd. |

| For use in ABC only. |

| Deployed : August 25, 2002 |

| |

| Model : Cisco 2621 (JMX0616K2JT) |

| Modules : 2 X 10/100 Ethernet |

| 1 X WIC 2T (27031095) |

| 1 X PRI 2CE1U (28207340) |

| |

| Support : 03-89943228 / 03-89942818 |

| |

+-------------------------------------------+

^C

!

line con 0

password 7 xxxxx

login

line aux 0

line vty 0 3

access-class 102 in

password 7 xxxxx

login

line vty 4

access-class 102 in

password 7 xxxxx

login

!

end

-----------------------------7d22372415c21a0

Content-Disposition: form-data; name="x"

21

-----------------------------7d22372415c21a0

Content-Disposition: form-data; name="y"

9

1 Reply 1

Gilles Dufour
Cisco Employee
Cisco Employee

is it output drops or input drops ?

If the drops are increasing due to traffic burst and therefore not frequently, you can increase the size of the hold-queue.

For input drops, you can try to enable CEF.

For output drops, you need to increase the BW on the link or enable QoS life traffic shapping.