本帖最后由 飞天牛神 于 2011-6-16 14:54 编辑
帮我看看，公司是10M的光纤，但是２＼３十个人上网还是感觉有点慢，而且WAN端口流量也不大啊
不知道是路由器有问题还是设置有问题，路由器是锐捷NBR200的，交换机不能做端口镜像，不知道怎样去做流量分析，帮帮忙
Building configuration...
Current configuration : 2459 bytes
!
version 9.10 (building 18) for NBR
enable password 7 0514016c507f404076
sntp enable
sntp interval 60
sntp server 207.46.130.100
!
web monitor-page password 7
!
route-map map permit 10
!
access-list 3198 deny tcp any any eq 135
access-list 3198 deny tcp any any eq 445
access-list 3198 permit ip any any
access-list 3199 deny icmp any any echo
access-list 3199 deny tcp any any eq 135
access-list 3199 deny tcp any any eq 445
access-list 3199 permit ip any any
access-list 99 permit any
dialer-list 1 protocol ip permit
!
!
!
service sequence-numbers
service timestamps debug datetime
service timestamps log datetime
no service password-encryption
ip dhcp ping packets 1
!
ip dhcp pool nbr_dhcp_pool
lease 1 0 0
network 192.168.100.0 255.255.255.0
dns-server 117.59.228.58 125.62.63.1
default-router 192.168.100.1
!
ip name-server 117.59.228.58
ip name-server 125.62.63.1
!
!
!
interface FastEthernet 0/0
ip nat inside
ip access-group 3198 in
no ip redirects
no ip mask-reply
no ip proxy-arp
ip address 192.168.100.1 255.255.255.0
arp gratuitous-send interval 1 5
arp trust-monitor enable
!
interface FastEthernet 1/0
ip nat outside
ip access-group 3199 in
no ip redirects
no ip mask-reply
no ip proxy-arp
ip address 125.62.14.125 255.255.255.252
arp gratuitous-send interval 1 1
no arp trust-monitor enable
duplex auto
speed auto
!
interface Null 0
!
interface Virtual-Template 1
!
!
ip nat pool nbr_setup_build_pool prefix-length 24
address 125.62.14.125 125.62.14.125 match interface FastEthernet 1/0
!
ip nat inside source list 99 pool nbr_setup_build_pool
ip nat application qq 1024
ip nat translation per-mac 0000.0000.0000 100
ip nat translation per-ip 0.0.0.0 350
ip nat translation netflow
ip nat translation udp-timeout 150
ip nat translation icmp-timeout 30
ip nat translation tcp-timeout 600
ip nat translation finrst-timeout 20
ip nat translation dns-timeout 30
arp attacker-detect enable
security anti-wan-attack level high
security anti-lan-attack drop
!
ip route 0.0.0.0 0.0.0.0 FastEthernet 1/0 125.62.14.126
! |
发表于 2011-6-16 14:48:01
发表于 2011-6-19 07:17:12
