Is anyone still having problems with worms crashing their nas's I have
an as5300 that is still locking up every couple weeks , ive added no ip
route-cache and ip cef to it but if I don't watch my network and kill
off infected users it will lockup every day , is there a fix or
something I need to add to my config? Here is my config below
As5300-Oc#sh conf
Using 4638 out of 124920 bytes
!
version 12.2
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname As5300-Oc
!
boot system flash:c5300-i-mz.122-15.T1.bin
logging queue-limit 100
logging buffered 10000 debugging
no logging console
enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
!
username xxxxx password 7 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
spe 1/0 1/7
firmware location bootflash:mica-modem-pw.2.9.4.0.bin
spe 2/0 2/7
firmware location bootflash:mica-modem-pw.2.9.4.0.bin
!
!
resource-pool disable
!
modem link-info poll time 10
aaa new-model
!
!
aaa authentication login default local group radius
aaa authentication login consoleport none
aaa authentication ppp default if-needed group radius
aaa authorization network default group radius
aaa accounting delay-start
aaa accounting update periodic 5
aaa accounting exec default start-stop group radius
aaa accounting network default start-stop group radius
aaa session-id common
ip subnet-zero
ip cef
ip finger
ip name-server 65.xxx.xxx.xxx
!
async-bootp dns-server 65.xxx.xxx.xxx 65.xxx.xxx.xxx
!
isdn switch-type primary-dms100
isdn voice-call-failure 0
modemcap entry
mica-nokflex:MSC=&F&D2S54=16584S0=0S29=12S21=15S62=8S63=3S34=18000S40=10
S10=50
!
!
controller T1 0
framing esf
clock source line primary
linecode b8zs
pri-group timeslots 1-24 nfas_d primary nfas_int 0 nfas_group 0
!
controller T1 1
framing esf
clock source line secondary 1
linecode b8zs
pri-group timeslots 1-24 nfas_d backup nfas_int 1 nfas_group 0
!
controller T1 2
framing esf
linecode b8zs
pri-group timeslots 1-24
!
controller T1 3
framing esf
linecode b8zs
pri-group timeslots 1-24
!
controller T1 4
shutdown
framing sf
linecode ami
!
controller T1 5
shutdown
framing sf
linecode ami
!
controller T1 6
shutdown
framing sf
linecode ami
!
controller T1 7
shutdown
framing sf
linecode ami
!
!
interface Loopback0
ip address 65.xxx.xxx.xxx 255.255.255.128
!
interface Serial0:23
ip unnumbered Loopback0
encapsulation ppp
no ip route-cache
dialer-group 1
isdn switch-type primary-dms100
isdn incoming-voice modem
peer default ip address pool setup_pool
fair-queue 64 256 0
ppp authentication pap
ppp multilink
!
interface Serial2:23
ip unnumbered Loopback0
encapsulation ppp
no ip route-cache
dialer-group 1
isdn switch-type primary-dms100
isdn incoming-voice modem
peer default ip address pool setup_pool
fair-queue 64 256 0
ppp authentication pap
ppp multilink
!
interface Serial3:23
ip unnumbered Loopback0
encapsulation ppp
no ip route-cache
dialer-group 1
isdn switch-type primary-dms100
isdn incoming-voice modem
peer default ip address pool setup_pool
fair-queue 64 256 0
ppp authentication pap
ppp multilink
!
interface FastEthernet0
ip address 65.xxx.xxx.xxx 255.255.255.0
no ip unreachables
duplex full
speed 100
no cdp enable
!
interface Group-Async1
ip unnumbered Loopback0
no ip unreachables
encapsulation ppp
ip tcp header-compression
async mode interactive
peer default ip address pool setup_pool
no keepalive
ppp authentication pap
group-range 1 192
!
ip local pool setup_pool 65.xxx.xxx.xxx 65.xxx.xxx.xxx
ip classless
ip route 0.0.0.0 0.0.0.0 65.xxx.xxx.xxx
no ip http server
!
!
!
!
access-list 101 permit ip any any
access-list 110 permit tcp any any established
access-list 110 deny icmp any any echo log
access-list 110 deny icmp any any echo-reply log
access-list 110 permit ip any any
dialer-list 1 protocol ip permit
snmp-server engineID local 000000090200003080BD40CA
snmp-server community xxxxxx RO
snmp-server enable traps tty
radius-server host 65.xxx.xxx.xxx auth-port 1812 acct-port 1813
non-standard
radius-server key 7 xxxxxxxxxx
radius-server authorization permit missing Service-Type
!
line con 0
exec-timeout 0 0
logging synchronous
line 1 192
no flush-at-activation
modem Dialin
modem autoconfigure type mica-nokflex
autocommand ppp
autoselect during-login
autoselect ppp
line aux 0
line vty 0 4
exec-timeout 0 0
password 7 xxxxxxxxxxxxx
!
scheduler interval 1000
end
John Lord
It Manager
AllTurbo Internet Services Inc
410-213-9388 Office
www.allturbo.com
an as5300 that is still locking up every couple weeks , ive added no ip
route-cache and ip cef to it but if I don't watch my network and kill
off infected users it will lockup every day , is there a fix or
something I need to add to my config? Here is my config below
As5300-Oc#sh conf
Using 4638 out of 124920 bytes
!
version 12.2
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname As5300-Oc
!
boot system flash:c5300-i-mz.122-15.T1.bin
logging queue-limit 100
logging buffered 10000 debugging
no logging console
enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
!
username xxxxx password 7 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
spe 1/0 1/7
firmware location bootflash:mica-modem-pw.2.9.4.0.bin
spe 2/0 2/7
firmware location bootflash:mica-modem-pw.2.9.4.0.bin
!
!
resource-pool disable
!
modem link-info poll time 10
aaa new-model
!
!
aaa authentication login default local group radius
aaa authentication login consoleport none
aaa authentication ppp default if-needed group radius
aaa authorization network default group radius
aaa accounting delay-start
aaa accounting update periodic 5
aaa accounting exec default start-stop group radius
aaa accounting network default start-stop group radius
aaa session-id common
ip subnet-zero
ip cef
ip finger
ip name-server 65.xxx.xxx.xxx
!
async-bootp dns-server 65.xxx.xxx.xxx 65.xxx.xxx.xxx
!
isdn switch-type primary-dms100
isdn voice-call-failure 0
modemcap entry
mica-nokflex:MSC=&F&D2S54=16584S0=0S29=12S21=15S62=8S63=3S34=18000S40=10
S10=50
!
!
controller T1 0
framing esf
clock source line primary
linecode b8zs
pri-group timeslots 1-24 nfas_d primary nfas_int 0 nfas_group 0
!
controller T1 1
framing esf
clock source line secondary 1
linecode b8zs
pri-group timeslots 1-24 nfas_d backup nfas_int 1 nfas_group 0
!
controller T1 2
framing esf
linecode b8zs
pri-group timeslots 1-24
!
controller T1 3
framing esf
linecode b8zs
pri-group timeslots 1-24
!
controller T1 4
shutdown
framing sf
linecode ami
!
controller T1 5
shutdown
framing sf
linecode ami
!
controller T1 6
shutdown
framing sf
linecode ami
!
controller T1 7
shutdown
framing sf
linecode ami
!
!
interface Loopback0
ip address 65.xxx.xxx.xxx 255.255.255.128
!
interface Serial0:23
ip unnumbered Loopback0
encapsulation ppp
no ip route-cache
dialer-group 1
isdn switch-type primary-dms100
isdn incoming-voice modem
peer default ip address pool setup_pool
fair-queue 64 256 0
ppp authentication pap
ppp multilink
!
interface Serial2:23
ip unnumbered Loopback0
encapsulation ppp
no ip route-cache
dialer-group 1
isdn switch-type primary-dms100
isdn incoming-voice modem
peer default ip address pool setup_pool
fair-queue 64 256 0
ppp authentication pap
ppp multilink
!
interface Serial3:23
ip unnumbered Loopback0
encapsulation ppp
no ip route-cache
dialer-group 1
isdn switch-type primary-dms100
isdn incoming-voice modem
peer default ip address pool setup_pool
fair-queue 64 256 0
ppp authentication pap
ppp multilink
!
interface FastEthernet0
ip address 65.xxx.xxx.xxx 255.255.255.0
no ip unreachables
duplex full
speed 100
no cdp enable
!
interface Group-Async1
ip unnumbered Loopback0
no ip unreachables
encapsulation ppp
ip tcp header-compression
async mode interactive
peer default ip address pool setup_pool
no keepalive
ppp authentication pap
group-range 1 192
!
ip local pool setup_pool 65.xxx.xxx.xxx 65.xxx.xxx.xxx
ip classless
ip route 0.0.0.0 0.0.0.0 65.xxx.xxx.xxx
no ip http server
!
!
!
!
access-list 101 permit ip any any
access-list 110 permit tcp any any established
access-list 110 deny icmp any any echo log
access-list 110 deny icmp any any echo-reply log
access-list 110 permit ip any any
dialer-list 1 protocol ip permit
snmp-server engineID local 000000090200003080BD40CA
snmp-server community xxxxxx RO
snmp-server enable traps tty
radius-server host 65.xxx.xxx.xxx auth-port 1812 acct-port 1813
non-standard
radius-server key 7 xxxxxxxxxx
radius-server authorization permit missing Service-Type
!
line con 0
exec-timeout 0 0
logging synchronous
line 1 192
no flush-at-activation
modem Dialin
modem autoconfigure type mica-nokflex
autocommand ppp
autoselect during-login
autoselect ppp
line aux 0
line vty 0 4
exec-timeout 0 0
password 7 xxxxxxxxxxxxx
!
scheduler interval 1000
end
John Lord
It Manager
AllTurbo Internet Services Inc
410-213-9388 Office
www.allturbo.com