Newsgroup: it.comp.reti.cisco
Titolo: ip inspect..connessione lenta

Ciao ragazzi...
sto configurando il mio Cisco 827 con il sistema IDS, ma quando lo
vado
ad attivare sull interfacia esterna..la connessione a internet mi si
rallenta..
sbaglio qualcosa..o.. consigli?
....
ip inspect name myfw tcp
ip inspect name myfw udp
ip inspect name myfw smtp
ip inspect name myfw ftp
ip inspect name myfw realaudio
ip inspect name myfw http
ip inspect name myfw tftp
......
interface Dialer0
 ip address xxx.xxx.xxx.xxx 255.255.255.254
 ip nat outside
 ip inspect myfw out
 ip virtual-reassembly
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 no cdp enable
 ppp authentication chap
 ppp chap hostname xxxxx
 ppp chap password 7 xxxx

  ppp chap password 7 xxxx
-------------------------------------------------------
Messaggio inviato da 
http://www.sandlab.org/newsgroup/
Accesso gratuito via web ai Newsgroup


Grazie per la risposta..ho letto un pò di documentazione e ho imparato
cose nuove..
Cmq.. ho attivato ip route-cache sull interfaccia dialer 0 ma non è
cambiato neinte...
Questi i risultati dei vari test effettuati sulla linea..
Senza "ip inspect myfw out" sull interfaccia dialer 0
Velocità download (kbps):    3413   -     3426    -     3417
Velocità upload (kbps):         383    -      383    -      383
Con "ip inspect myfw out" sull interfaccia dialer 0
Velocità download (kbps):      36     -       42     -       37
Velocità upload (kbps):         383    -      383    -      383
Con "ip inspect myfw out" e "ip route-cache"  sull interfaccia dialer
0
Velocità download (kbps):        31   -        28    -      30
Velocità upload (kbps):         383    -      383    -      383
Un sola cosa..una volta lanciato il comando ip route-cache sulla
dialer 0
vado a scrivere la startup-config..ma non mi compare niente quando
vado a vedere la configurazione.
Perche?
Spero possiate aiutarmi...


Grazie per la risposta..ho letto un pò di documentazione e ho imparato


 Spero possiate aiutarmi...
guarda la CPU con e senza inspection con questo comando per almeno 5
minuti  :
Rack1R1#sh processes cpu
CPU utilization for five seconds: 2%/99%; one minute: 3%; five minutes: 2%
 PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
Se va su di molto, vol dire che il tuo routerino fa quello che puo.
Ciao.


Allora ..senza ip inspectio..rimango sull 0%/0%
mentre se attivo l ip inspect di seguito il risultato..
Non so dove sbattere la testa..
se vuoi ti posto un sh ip inspect all e la mia configurazione!
spero ti venga qualcosa in mente...sei l unica persona che mi ha
risposto..
CPU utilization for five seconds: 9%/0%; one minute: 10%; five
minutes: 4%
 PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
   1          44       320        137  0.00%  0.00%  0.00%   0 Chunk
Manager
   2         124     50497          2  0.00%  0.00%  0.00%   0 Load
Meter
   3          24    252477          0  0.00%  0.00%  0.00%   0
Spanning Tree
   4     1543920     93175      16570  6.96%  0.92%  0.64%   0 Check
heaps
   5          24        85        282  0.00%  0.00%  0.00%   0 Pool
Manager
   6           0         2          0  0.00%  0.00%  0.00%   0 Timers
   7           0         1          0  0.00%  0.00%  0.00%   0 Crash
writer
   8         260      4811         54  0.00%  0.00%  0.00%   0 ARP
Input
   9           0         2          0  0.00%  0.00%  0.00%   0 ATM
Idle Timer
  10           4        15        266  0.00%  0.00%  0.00%   0 AAA
high-capacit
  11           0         1          0  0.00%  0.00%  0.00%   0
AAA_SERVER_DEADT
  12           0         1          0  0.00%  0.00%  0.00%   0 Policy
Manager
  13           8      8423          0  0.00%  0.00%  0.00%   0 DDR
Timers
  14           0         2          0  0.00%  0.00%  0.00%   0 Entity
MIB API
  15          84       346        242  0.00%  0.00%  0.00%   0 EEM ED
Syslog
  16          20     75743          0  0.00%  0.00%  0.00%   0 HC
Counter Timer
  17           0         2          0  0.00%  0.00%  0.00%   0 Serial
Backgroun
  18           0         1          0  0.00%  0.00%  0.00%   0 RO
Notify Timers
  19           0         1          0  0.00%  0.00%  0.00%   0 RMI RM
Notify Wa
  20           0         2          0  0.00%  0.00%  0.00%   0 SMART
  21          12    252481          0  0.00%  0.00%  0.00%   0 GraphIt
 PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
  22           0         1          0  0.00%  0.00%  0.00%   0 SERIAL
A'detect
  23           0         1          0  0.00%  0.00%  0.00%   0
Critical Bkgnd
  24         208    198566          1  0.00%  0.00%  0.00%   0 Net
Background
  25           0         3          0  0.00%  0.00%  0.00%   0 IDB
Work
  26          16       302         52  0.00%  0.00%  0.00%   0 Logger
  27          20    252455          0  0.00%  0.00%  0.00%   0 TTY
Background
  28          24    252490          0  0.00%  0.00%  0.00%   0 Per-
Second Jobs
  29           0      2105          0  0.00%  0.00%  0.00%   0 DHCPD
Timer
  30           0         2          0  0.00%  0.00%  0.00%   0 AggMgr
Process
  31          32    449493          0  0.00%  0.00%  0.00%   0 LED
Timers
  32          52   1682929          0  0.00%  0.00%  0.00%   0 WLAN
LED Timers
  33           0         2          0  0.00%  0.00%  0.00%   0 AUX
  34         152        16       9500  0.00%  0.00%  0.00%   0 ESWPPM
  35           0         2          0  0.00%  0.00%  0.00%   0 Eswilp
Storm Con
  36          52   2750065          0  0.00%  0.00%  0.00%   0 Dot11
driver
  37           0         2          0  0.00%  0.00%  0.00%   0 Dot11
driver log
  38          48        16       3000  0.00%  0.00%  0.00%   0 Switch
Link Moni
  39      177792   1262020        140  0.08%  0.30%  0.23%   0 COLLECT
STAT COU
  40           0         1          0  0.00%  0.00%  0.00%   0 Net
Input
  41          12     50501          0  0.00%  0.00%  0.00%   0 Compute
load avg
  42       50540      4262      11858  0.00%  0.02%  0.00%   0 Per-
minute Jobs
  43          20        38        526  0.00%  0.00%  0.00%   0 IGMP
Snooping Pr
 PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
  44          16        38        421  0.00%  0.00%  0.00%   0 IGMP
Snooping Re
  45           0    252486          0  0.00%  0.00%  0.00%   0 Crypto
Device Up
  46           0         2          0  0.00%  0.00%  0.00%   0 Multi-
ISA Event
  47           0         1          0  0.00%  0.00%  0.00%   0 Multi-
ISA Cleanu
  48           8        15        533  0.00%  0.00%  0.00%   0 crypto
engine pr
  49           0         2          0  0.00%  0.00%  0.00%   0 SEC
BATCH
  50           0     25472          0  0.00%  0.00%  0.00%   0 ATM
Periodic
  51           0         1          0  0.00%  0.00%  0.00%   0 ATM ARP
INPUT
  52           0         2          0  0.00%  0.00%  0.00%   0 ATM OAM
Input
  53           0         2          0  0.00%  0.00%  0.00%   0 ATM OAM
TIMER
  54           0       240          0  0.00%  0.00%  0.00%   0 LED
Timers
  55        1172    108654         10  0.00%  0.00%  0.00%   0 DSL
State Machin
  56           0    252461          0  0.00%  0.00%  0.00%   0
linktest
  57           0         2          0  0.00%  0.00%  0.00%   0 Dot11
Mgmt & Ass
  58           4    252459          0  0.00%  0.00%  0.00%   0
AiroIAPP Protoco
  59           0         2          0  0.00%  0.00%  0.00%   0
Triggered events
  60         760        36      21111  0.00%  0.00%  0.00%   0
VTEMPLATE Backgr
  61           0         2          0  0.00%  0.00%  0.00%   0 Dot11
aaa proces
  62           0         2          0  0.00%  0.00%  0.00%   0 Dot11
auth Dot1x
  63           0         1          0  0.00%  0.00%  0.00%   0 Dot11
Mac Auth
  64           4    252459          0  0.00%  0.00%  0.00%   0 PI MATM
Aging Pr
  65           0         2          0  0.00%  0.00%  0.00%   0 DTP
Protocol
 PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
  66           0        10          0  0.00%  0.00%  0.00%   0 dot1x
  67           0         2          0  0.00%  0.00%  0.00%   0 Dot1x
Mgr Proces
  68         
208   7851088
          0  0.00%  0.00%  0.00%   0 EAP
Framework
  69           0         2          0  0.00%  0.00%  0.00%   0 AAA
Dictionary R
  70          32       290        110  0.00%  0.00%  0.00%   0 AAA
Server
  71           0         1          0  0.00%  0.00%  0.00%   0 AAA
ACCT Proc
  72           0         1          0  0.00%  0.00%  0.00%   0 ACCT
Periodic Pr
  73           0        21          0  0.00%  0.00%  0.00%   0 VPDN
failure man
  74       28620     61788        463  0.16%  1.13%  0.42%   0 IP
Input
  75           0         1          0  0.00%  0.00%  0.00%   0 ICMP
event handl
  76           8        32        250  0.00%  0.00%  0.00%   0 PPP
Hooks
  77        8012     20249        395  0.00%  0.00%  0.00%   0 L2X
Data Daemon
  78           8        37        216  0.00%  0.00%  0.00%   0 SSS
Manager
  79           0     33665          0  0.00%  0.00%  0.00%   0 SSS
Test Client
  80           0         1          0  0.00%  0.00%  0.00%   0 SSS
Feature Mana
  81          28    986257          0  0.00%  0.00%  0.00%   0 SSS
Feature Time
  82           4         1       4000  0.00%  0.00%  0.00%   0 VPDN
call manage
  83           0         1          0  0.00%  0.00%  0.00%   0 L2X
Socket proce
  84          28       145        193  0.00%  0.00%  0.00%   0 L2X SSS
manager
  85           0         2          0  0.00%  0.00%  0.00%   0 L2TP
mgmt daemon
  86          28        15       1866  0.00%  0.00%  0.00%   0 PPP IP
Route
  87         584        26      22461  0.00%  0.00%  0.00%   0 PPP
IPCP
 PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
  88           0         2          0  0.00%  0.00%  0.00%   0 DDP
  89         112    504881          0  0.00%  0.00%  0.00%   0 DHCPD
Receive
  90          16      4607          3  0.00%  0.00%  0.00%   0 IP
Background
  91           8      4229          1  0.00%  0.00%  0.00%   0 IP RIB
Update
  92         400    379584          1  0.00%  0.00%  0.00%   0 CEF
process
  93           0         2          0  0.00%  0.00%  0.00%   0 Dot1x
Supplicant
  94           0         2          0  0.00%  0.00%  0.00%   0 Dot1x
Supplicant
  95           0         2          0  0.00%  0.00%  0.00%   0 Dot1x
Supplicant
  96           4        17        235  0.00%  0.00%  0.00%   0 L2MM
  97           8        38        210  0.00%  0.00%  0.00%   0 MRD
  98           0         1          0  0.00%  0.00%  0.00%   0 IGMPSN
  99           0         1          0  0.00%  0.00%  0.00%   0 SNMP
Timers
 100           0         2          0  0.00%  0.00%  0.00%   0 ILMI
Input
 101           0         2          0  0.00%  0.00%  0.00%   0 ILMI
Request
 102           0         2          0  0.00%  0.00%  0.00%   0 ILMI
Response
 103           0    126217          0  0.00%  0.00%  0.00%   0 ILMI
Timer Proce
 104          12         2       6000  0.00%  0.00%  0.00%   0 ATM PVC
Discover
 105          32    493018          0  0.00%  0.00%  0.00%   0 Inspect
process
 106           0      4214          0  0.00%  0.00%  0.00%   0 DHCPD
Database
 107           0       842          0  0.00%  0.00%  0.00%   0
Authentication P
 108           0         1          0  0.00%  0.00%  0.00%   0 Auth-
proxy AAA B
 109          12    252439          0  0.00%  0.00%  0.00%   0 Socket
Timers
 PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
 110           0         2          0  0.00%  0.00%  0.00%   0 Dialer
Forwarder
 111           4      4212          0  0.00%  0.00%  0.00%   0 Adj
Manager
 112         564     16589         33  0.00%  0.00%  0.00%   0 TCP
Timer
 113         104       221        470  0.00%  0.00%  0.00%   0 TCP
Protocols
 114        2448     13254        184  0.00%  0.00%  0.00%   0 HTTP
CORE
 115           0         1          0  0.00%  0.00%  0.00%   0 IP
Traceroute
 116           0      4208          0  0.00%  0.00%  0.00%   0 IP
Cache Ager
 117           0         1          0  0.00%  0.00%  0.00%   0 RARP
Input
 118           0        20          0  0.00%  0.00%  0.00%   0 PPP
Bind
 119           0         2          0  0.00%  0.00%  0.00%   0 PPP SSS
 120           4         2       2000  0.00%  0.00%  0.00%   0 SCTP
Main Proces
 121           0         2          0  0.00%  0.00%  0.00%   0 URL
filter proc
 122           0         3          0  0.00%  0.00%  0.00%   0 Crypto
HW Proc
 123           0         2          0  0.00%  0.00%  0.00%   0 ENABLE
AAA
 124           0         1          0  0.00%  0.00%  0.00%   0 EM
Background Pr
 125           0         1          0  0.00%  0.00%  0.00%   0 Key
chain liveke
 126           0         2          0  0.00%  0.00%  0.00%   0 LINE
AAA
 127         396      2431        162  0.00%  0.01%  0.00%   0 LOCAL
AAA
 128           0         2          0  0.00%  0.00%  0.00%   0 TPLUS
 129           0         2          0  0.00%  0.00%  0.00%   0 AAA
Cached Serve
 130           0         3          0  0.00%  0.00%  0.00%   0 Crypto
WUI
 131           0         2          0  0.00%  0.00%  0.00%   0 Crypto
Support
 PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
 132           0         1          0  0.00%  0.00%  0.00%   0 EPM
MAIN PROCESS
 133           4         8        500  0.00%  0.00%  0.00%   0 Crypto
ACL
 134           0         1          0  0.00%  0.00%  0.00%   0 CRYPTO
QoS proce
 135           0         1          0  0.00%  0.00%  0.00%   0 Crypto
INT
 136          12         5       2400  0.00%  0.00%  0.00%   0 Crypto
IKE Dispa
 137           0         3          0  0.00%  0.00%  0.00%   0 Crypto
IKMP
 138          12         1      12000  0.00%  0.00%  0.00%   0 Crypto
IKEv2
 139         104     12627          8  0.00%  0.00%  0.00%   0 IPSEC
key engine
 140           0         1          0  0.00%  0.00%  0.00%   0 IPSEC
manual key
 141           0         1          0  0.00%  0.00%  0.00%   0 Crypto
PAS Proc
 142          20         6       3333  0.00%  0.00%  0.00%   0 Crypto
CA
 143           0         1          0  0.00%  0.00%  0.00%   0 Crypto
PKI-CRL
 144           0         1          0  0.00%  0.00%  0.00%   0 Crypto
SSL
 145           0         1          0  0.00%  0.00%  0.00%   0 encrypt
proc
 146           0         2          0  0.00%  0.00%  0.00%   0 Key
Proc
 147           0         1          0  0.00%  0.00%  0.00%   0 GDOI GM
Process
 148           8    120298          0  0.00%  0.00%  0.00%   0 PM
Callback
 149           0         2          0  0.00%  0.00%  0.00%   0 Control-
plane ho
 150          16       124        129  0.00%  0.00%  0.00%   0 AAA
SEND STOP EV
 151           4         3       1333  0.00%  0.00%  0.00%   0 EEM ED
CLI
 152           0         2          0  0.00%  0.00%  0.00%   0 EEM ED
Counter
 153           0         2          0  0.00%  0.00%  0.00%   0 EEM ED
Interface
 PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
 154           0         3          0  0.00%  0.00%  0.00%   0 EEM ED
IOSWD
 155           0         2          0  0.00%  0.00%  0.00%   0 EEM ED
Memory-th
 156           0         2          0  0.00%  0.00%  0.00%   0 EEM ED
None
 157           0         2          0  0.00%  0.00%  0.00%   0 EEM ED
OIR
 158           0         2          0  0.00%  0.00%  0.00%   0 EEM ED
Resource
 159           0         2          0  0.00%  0.00%  0.00%   0 EEM ED
SNMP
 160           0      4210          0  0.00%  0.00%  0.00%   0 EEM ED
Timer
 161           0         2          0  0.00%  0.00%  0.00%   0 EEM ED
Track
 162          16     50513          0  0.00%  0.00%  0.00%   0 EEM
Server
 163           0     25250          0  0.00%  0.00%  0.00%   0 RMON
Recycle Pro
 164           0         2          0  0.00%  0.00%  0.00%   0 RMON
Deferred Se
 165           0         1          0  0.00%  0.00%  0.00%   0 Syslog
Traps
 166           4         2       2000  0.00%  0.00%  0.00%   0 VLAN
Manager
 167       74084       410     180692  0.00%  0.00%  0.04%   0 crypto
sw pk pro
 168           0         2          0  0.00%  0.00%  0.00%   0 EEM
Policy Direc
 169          12       113        106  0.00%  0.00%  0.00%   0 Syslog
 170           0         1          0  0.00%  0.00%  0.00%   0 VPDN
Scal
 171           0     33955          0  0.00%  0.00%  0.00%   0 L2F
management d
 172          12       143         83  0.00%  0.00%  0.00%   0 SSH
Event handle
 173          56      8762          6  0.00%  0.00%  0.00%   0 CEF
Scanner
 174          12    493019          0  0.00%  0.00%  0.00%   0 IP NAT
Ager
 175           0         1          0  0.00%  0.00%  0.00%   0 IP NAT
WLAN
 PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
 176           0         1          0  0.00%  0.00%  0.00%   0 IP VFR
proc
 177         
228   7885903
          0  0.00%  0.00%  0.00%   0 PPP
manager
 178         
424   7886180
          0  0.00%  0.00%  0.00%   0 PPP
Events
 179          12         5       2400  0.00%  0.00%  0.00%   0 PPPoA
Manager
 180         160       222        720  0.00%  0.00%  0.00%   0 PPTP
Mgmt
 181           8        18        444  0.00%  0.00%  0.00%   0 PPTP
Data
 182          20       155        129  0.00%  0.00%  0.00%   0 TCP
Driver
 183           4        37        108  0.00%  0.00%  0.00%   0 TCP
Listener
 184         368       200       1840  0.65%  0.42%  0.10%   2 SSH
Process
 185        8592     35731        240  0.00%  0.00%  0.00%   0 CCP
manager
 186           0         1          0  0.00%  0.00%  0.00%   0 CCP
reset pak
 187           4      2570          1  0.00%  0.00%  0.00%   0 IP SLAs
Event Pr

ma...@tg26.com
 wrote:





posta LA CONFIG COMPLETA 


Using 4898 out of 131072 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Cisco
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
enable secret 5  ************
aaa new-model
!
!
aaa authentication login sdm_vpn_xauth_ml_1 local
aaa authentication ppp default local
aaa authorization network sdm_vpn_group_ml_1 local
!
aaa session-id common
!
resource policy
!
clock timezone PCTime 0
clock summer-time PCTime date Mar 30 2003 1:00 Oct 26 2003 2:00
no ip dhcp use vrf connected
ip dhcp excluded-address 10.0.10.1
ip dhcp excluded-address 10.0.10.254
!
ip dhcp pool Cisco_Scope
   network 10.0.10.0 255.255.255.0
   default-router 10.0.10.254
   dns-server 192.74.65.68 194.72.9.34
!
!
ip cef
ip inspect name firewall tcp
ip inspect name firewall udp
ip inspect name firewall ftp
ip inspect name firewall http
ip inspect name firewall tftp
ip domain name tg26@.com
ip name-server 194.74.65.68
ip name-server 194.72.9.34
vpdn enable
!
vpdn-group clientinit
! Default L2TP VPDN group
! Default PPTP VPDN group
 accept-dialin
  protocol any
  virtual-template 1
!
!
!
crypto pki trustpoint TP-self-signed-3996847148
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-3996847148
 revocation-check none
 rsakeypair TP-self-signed-3996847148
!
!
crypto pki certificate chain TP-self-signed-3996847148
 certificate self-signed 01 nvram:IOS-Self-Sig#3802.cer
username ********** privilege 15 secret 5 *******************
username ******** password 7 *************
!
!
!
crypto isakmp policy 1
 encr 3des
 authentication pre-share
 group 2
!
crypto isakmp client configuration group test
 key test
 pool dial-in
 max-users 8
!
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
!
crypto dynamic-map SDM_DYNMAP_1 1
 set transform-set ESP-3DES-SHA
 reverse-route
!
!
crypto map SDM_CMAP_1 client authentication list sdm_vpn_xauth_ml_1
crypto map SDM_CMAP_1 isakmp authorization list sdm_vpn_group_ml_1
crypto map SDM_CMAP_1 client configuration address respond
crypto map SDM_CMAP_1 65535 ipsec-isakmp dynamic SDM_DYNMAP_1
!
!
!
interface ATM0
 no ip address
 no atm ilmi-keepalive
 dsl operating-mode auto
!
interface ATM0.1 point-to-point
 description $ES_WAN$
 no snmp trap link-status
 pvc 0/38
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
!
interface FastEthernet0
 no cdp enable
!
interface FastEthernet1
 no cdp enable
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Virtual-Template1
 ip unnumbered Vlan1
 peer default ip address pool dial-in
 ppp encrypt mppe auto required
 ppp authentication ms-chap ms-chap-v2
!
interface Dot11Radio0
 no ip address
 shutdown
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0
36.0 48.0 54.0
 station-role root
!
interface Vlan1
 description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$ES_LAN$
 ip address 10.0.10.254 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 ip tcp adjust-mss 1452
!
interface Dialer0
 ip address 81.*.*.* 255.255.255.254
 ip nat outside
 ip virtual-reassembly
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 no cdp enable
 ppp authentication chap pap callin
 ppp chap hostname **********
 ppp chap password 7 082C4D400700514E43
 ppp pap sent-username ********** password 7 1104180B190B5F5555
!
ip local pool dial-in 10.0.10.230 10.0.10.235
ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat translation timeout 300
ip nat translation tcp-timeout 120
ip nat translation syn-timeout 120
ip nat translation icmp-timeout 180
ip nat translation max-entries 5000
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 10.0.10.1 5505 interface Dialer0 5505
ip nat inside source static tcp 10.0.10.1 5504 interface Dialer0 5504
ip nat inside source static tcp 10.0.10.1 5503 interface Dialer0 5503
ip nat inside source static tcp 10.0.10.1 5502 interface Dialer0 5502
ip nat inside source static tcp 10.0.10.1 5501 interface Dialer0 5501
ip nat inside source static tcp 10.0.10.1 3389 interface Dialer0 3389
ip nat inside source static tcp 10.0.10.1 80 interface Dialer0 80
ip nat inside source static tcp 10.0.10.1 21 interface Dialer0 21
ip nat inside source static tcp 10.0.10.1 20 interface Dialer0 20
ip nat inside source static udp 10.0.10.1 53 interface Dialer0 53
!
access-list 1 permit 10.0.10.0 0.0.0.255
dialer-list 1 protocol ip permit
no cdp run
!
control-plane
!
banner login ^CTargetgrange Tld
Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
 no modem enable
line aux 0
line vty 0 4
 privilege level 15
 transport input telnet ssh
!
scheduler max-task-time 5000
end

disabilita il cef con :
Rack1R1(config)#no ip cef
in questo modo va in fast switching e verifica con :
show ip cache
ciao.
ma...@tg26.com
 wrote:

-------------------------------------------------------


 show ip cache
fatto.. ma sono ancora su 43 Kbps in download... (ah per
completezza..io testo la mia velocità a questo link 
http://meter.mclink.it/applet.html
)
questo il sh ip cache prima della modifica
Cisco#sh ip cache
IP routing cache 4 entries, 740 bytes
   389 adds, 385 invalidates, 0 refcounts
Minimum invalidation interval 2 seconds, maximum interval 5 seconds,
   quiet interval 3 seconds, threshold 0 requests
Invalidation rate 0 in last second, 0 in last 3 seconds
Last full cache invalidation occurred 3d04h ago
Prefix/Length           Age       Interface       Next Hop
10.0.10.1/32
            00:07:09  Vlan1           10.0.10.1
192.74.65.0/24
          00:30:32  Di0             192.74.65.68
194.74.65.0/24
          00:05:01  Di0             194.74.65.68
217.35.98.0/24
          00:30:25  Di0             217.35.98.139
questo dopo la modifica no ip cef
Cisco#sh ip cache
IP routing cache 4 entries, 788 bytes
   393 adds, 389 invalidates, 0 refcounts
Minimum invalidation interval 2 seconds, maximum interval 5 seconds,
   quiet interval 3 seconds, threshold 0 requests
Invalidation rate 0 in last second, 0 in last 3 seconds
Last full cache invalidation occurred 3d04h ago
Prefix/Length           Age       Interface       Next Hop
10.0.10.1/32
            00:00:25  Vlan1           10.0.10.1
207.46.110.0/24
         00:00:04  Di0             207.46.110.71
209.85.139.0/24
         00:00:26  Di0             209.85.139.147
209.85.147.0/24
         00:00:26  Di0             209.85.147.147
Ho ripulito un pò la configurazione come di seguito...
ma il problema rimane..perchè?
Using 4236 out of 131072 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Cisco
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
enable secret 5 ***************
!
aaa new-model
!
!
aaa authentication ppp default local
!
aaa session-id common
!
resource policy
!
clock timezone PCTime 0
clock summer-time PCTime date Mar 30 2003 1:00 Oct 26 2003 2:00
no ip dhcp use vrf connected
ip dhcp excluded-address 10.0.10.1
ip dhcp excluded-address 10.0.10.254
!
ip dhcp pool Cisco_Scope
   network 10.0.10.0 255.255.255.0
   default-router 10.0.10.254
   dns-server 192.74.65.68 194.72.9.34
!
!
no ip cef

username ******** privilege 15 secret 5 **************.
username *********** password 7 *************
!
!
!
!
!
!
!
interface ATM0
 no ip address
 no atm ilmi-keepalive
 dsl operating-mode auto
!
interface ATM0.1 point-to-point
 description ***** Server_room *****
 no snmp trap link-status
 pvc 0/38
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
!
interface FastEthernet0
 no cdp enable
!
interface FastEthernet1
 no cdp enable
!
interface FastEthernet2
 no cdp enable
!
interface FastEthernet3
 no cdp enable
!
interface Virtual-Template1
 ip unnumbered Vlan1
 peer default ip address pool dial-in
 ppp encrypt mppe auto required
 ppp authentication ms-chap ms-chap-v2
!
interface Dot11Radio0
 no ip address
 shutdown
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0
36.0 48.0 54.0
 station-role root
!
interface Vlan1
 description ***** Server room VLAN 1 *****
 ip address 10.0.10.254 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 ip tcp adjust-mss 1452
!
interface Dialer0
 ip address 81.*.*.* 255.255.255.254
 ip inspect firewall out
 ip nat outside
 ip virtual-reassembly
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 no cdp enable
 ppp authentication chap pap callin
 ppp chap hostname ************
 ppp chap password 7 082C4D400700514E43
 ppp pap sent-username **************+ password 7 1104180B190B5F5555


Ho cambiato le regole in questo modo...
no ip cef
ip inspect name firewall tcp
ip inspect name firewall udp alert on
ip inspect name firewall tftp
ip inspect name firewall ftp timeout 120
non penso sia indispensabile mettere l inspect sull http...
e cmq.. domani mi configuro le ACL in entrata...
che ne dici?
grazie per il supporto

 grazie per il supporto
