08-27-2002 04:10 AM - edited 03-02-2019 12:56 AM
Below are the configuration on the Cisco Router which is running PRI & 2M link concurrently. Is there any fine tuning need to be done coz I can see a lot of dropped packets on the Cisco router.
ABC#show run
Building configuration...
Current configuration : 6107 bytes
!
! Last configuration change at 14:20:01 UTC Tue Aug 27 2002
! NVRAM config last updated at 13:06:50 UTC Tue Aug 27 2002
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname ABC
!
enable password 7 xxxxx
!
ip subnet-zero
!
!
no ip domain-lookup
!
virtual-profile virtual-template 1
multilink virtual-template 1
isdn switch-type primary-net5
!
controller E1 1/0
pri-group timeslots 1-31
!
controller E1 1/1
shutdown
!
!
!
interface FastEthernet0/0
ip address 202.187.231.17 255.255.255.240
duplex auto
speed auto
!
interface Serial0/0
description Link to Cordoda via TIME LL008537(2MB)
bandwidth 2048
ip address 172.24.31.26 255.255.255.252
ip access-group 101 in
encapsulation ppp
max-reserved-bandwidth 100
fair-queue 500 256 0
no cdp enable
hold-queue 100 in
!
interface FastEthernet0/1
ip address 202.187.231.129 255.255.255.240
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
interface Serial1/0:15
description ABC ISDN PRI - 20504660
no ip address
encapsulation ppp
isdn switch-type primary-net5
no cdp enable
ppp multilink
ppp multilink fragment-delay 20
!
interface Virtual-Template1
description Virtual-Access
bandwidth 1920
ip address 172.24.31.30 255.255.255.252
ip access-group 101 in
max-reserved-bandwidth 100
fair-queue 500 256 0
ppp multilink
!
ip classless
ip route 0.0.0.0 0.0.0.0 172.24.31.25
ip route 0.0.0.0 0.0.0.0 172.24.31.29 2
ip route 172.17.4.4 255.255.255.255 172.24.31.25
ip route 172.17.4.4 255.255.255.255 172.24.31.29 2
ip route 172.17.4.31 255.255.255.255 172.24.31.25
ip route 172.17.4.31 255.255.255.255 172.24.31.29 2
ip route 172.30.206.100 255.255.255.255 202.187.231.21
ip route 172.31.11.209 255.255.255.255 202.187.231.21
ip route 202.187.231.28 255.255.255.255 202.187.231.21
ip route 202.187.231.29 255.255.255.255 202.187.231.21
ip route 202.187.231.32 255.255.255.240 202.187.231.22
ip route 202.187.231.48 255.255.255.240 202.187.231.21
ip route 202.188.0.0 255.255.0.0 172.24.31.29
ip route 202.188.0.0 255.255.0.0 172.24.31.25 2
ip route 202.189.0.0 255.255.0.0 172.24.31.29
ip route 202.189.0.0 255.255.0.0 172.24.31.25 2
ip route 203.82.0.0 255.255.0.0 172.24.31.29
ip route 203.82.0.0 255.255.0.0 172.24.31.25 2
ip route 203.106.0.0 255.255.0.0 172.24.31.29
ip route 203.106.0.0 255.255.0.0 172.24.31.25 2
ip route 203.115.0.0 255.255.0.0 172.24.31.29
ip route 203.115.0.0 255.255.0.0 172.24.31.25 2
ip route 203.121.0.0 255.255.0.0 172.24.31.29
ip route 203.121.0.0 255.255.0.0 172.24.31.25 2
ip route 210.19.0.0 255.255.0.0 172.24.31.29
ip route 210.19.0.0 255.255.0.0 172.24.31.25 2
ip route 210.186.0.0 255.255.0.0 172.24.31.29
ip route 210.186.0.0 255.255.0.0 172.24.31.25 2
ip route 210.187.0.0 255.255.0.0 172.24.31.29
ip route 210.187.0.0 255.255.0.0 172.24.31.25 2
ip route 210.195.0.0 255.255.0.0 172.24.31.29
ip route 210.195.0.0 255.255.0.0 172.24.31.25 2
no ip http server
no ip pim bidir-enable
!
access-list 101 permit tcp host 159.104.6.51 eq telnet host 202.187.231.141
access-list 101 permit tcp host 172.17.4.31 any eq telnet
access-list 101 deny tcp any any eq discard
access-list 101 deny tcp any eq discard any
access-list 101 deny udp any any eq discard
access-list 101 deny udp any eq discard any
access-list 101 deny tcp any any eq telnet
access-list 101 deny tcp any eq telnet any
access-list 101 deny udp any any eq time
access-list 101 deny udp any eq time any
access-list 101 deny udp any any eq bootps
access-list 101 deny udp any eq bootps any
access-list 101 deny udp any any eq tftp
access-list 101 deny udp any eq tftp any
access-list 101 deny udp any any eq snmp
access-list 101 deny udp any eq snmp any
access-list 101 deny udp any any eq 1025
access-list 101 deny udp any eq 1025 any
access-list 101 deny 111 any any
access-list 101 deny 161 any any
access-list 101 permit icmp host 172.17.4.31 any
access-list 101 permit icmp host 159.104.6.51 host 202.187.231.141
access-list 101 permit icmp any host 172.17.4.31
access-list 101 permit icmp host 172.17.4.233 any
access-list 101 permit icmp any host 172.17.4.233
access-list 101 permit icmp host 202.187.231.21 any
access-list 101 permit icmp any host 202.187.231.21
access-list 101 deny icmp any any
access-list 101 deny ip 10.0.0.0 0.255.255.255 any
access-list 101 deny ip 172.16.0.0 0.0.255.255 any
access-list 101 deny ip 172.18.0.0 0.0.255.255 any
access-list 101 deny ip 172.19.0.0 0.0.255.255 any
access-list 101 deny ip 172.20.0.0 0.0.255.255 any
access-list 101 deny ip 172.21.0.0 0.0.255.255 any
access-list 101 deny ip 172.22.0.0 0.0.255.255 any
access-list 101 deny ip 172.23.0.0 0.0.255.255 any
access-list 101 deny ip 172.25.0.0 0.0.255.255 any
access-list 101 deny ip 172.26.0.0 0.0.255.255 any
access-list 101 deny ip 172.27.0.0 0.0.255.255 any
access-list 101 deny ip 172.28.0.0 0.0.255.255 any
access-list 101 deny ip 172.29.0.0 0.0.255.255 any
access-list 101 deny ip 172.30.0.0 0.0.255.255 any
access-list 101 deny ip 192.168.0.0 0.0.255.255 any
access-list 101 deny ip any host 202.187.231.30
access-list 101 permit ip any any
access-list 102 permit tcp host 172.17.4.31 any eq telnet
access-list 102 deny ip any any
banner motd ^CC
+-------------------------------------------+
| Property of Cordoda Corporation Sdn. Bhd. |
| For use in ABC only. |
| Deployed : August 25, 2002 |
| |
| Model : Cisco 2621 (JMX0616K2JT) |
| Modules : 2 X 10/100 Ethernet |
| 1 X WIC 2T (27031095) |
| 1 X PRI 2CE1U (28207340) |
| |
| Support : 03-89943228 / 03-89942818 |
| |
+-------------------------------------------+
^C
!
line con 0
password 7 xxxxx
login
line aux 0
line vty 0 3
access-class 102 in
password 7 xxxxx
login
line vty 4
access-class 102 in
password 7 xxxxx
login
!
end
-----------------------------7d22372415c21a0
Content-Disposition: form-data; name="x"
21
-----------------------------7d22372415c21a0
Content-Disposition: form-data; name="y"
9
08-28-2002 12:13 AM
is it output drops or input drops ?
If the drops are increasing due to traffic burst and therefore not frequently, you can increase the size of the hold-queue.
For input drops, you can try to enable CEF.
For output drops, you need to increase the BW on the link or enable QoS life traffic shapping.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide