Добрый день.
Суть такова:
Есть домашнее GPON устройство от МГТС (192.168.1.1), раздающее инет по проводу и по WiFi.
Обратил внимание, что с недавних при подключении через проводной маршрутизатор ISR-1841 выборочно недоступны некоторые адреса.
Причем, недоступны с внешнего интерфейса маршрутизатора, подключенного к GPON.
Выглядит это так.
Код:
gw1#ping google.com
Translating "google.com"...domain server (192.168.1.1) [OK]
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 173.194.222.113, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/21/24 ms
gw1#ping vtb.ru
Translating "vtb.ru"...domain server (192.168.1.1) [OK]
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 193.164.146.156, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
gw1#ping ya.ru
Translating "ya.ru"...domain server (192.168.1.1) [OK]
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 87.250.250.242, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/11/12 ms
gw1#ping videolan.org
Translating "videolan.org"...domain server (192.168.1.1) [OK]
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 88.191.250.2, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Настройки и состояние интерфейса
Код:
gw1# sh int Fa0/0
FastEthernet0/0 is up, line protocol is up
Hardware is Gt96k FE, address is f025.723a.7c0c (bia f025.723a.7c0c)
Description: ISP-0-MGTS
Internet address is 192.168.1.21/24
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:02, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
456261 packets input, 138870867 bytes
Received 103302 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
1 input errors, 0 CRC, 0 frame, 0 overrun, 1 ignored
0 watchdog
0 input packets with dribble condition detected
445196 packets output, 61624598 bytes, 0 underruns
0 output errors, 0 collisions, 4 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
Код:
gw1#sh ip int brie
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 192.168.1.21 YES DHCP up up
Пр подключении в обход маршрутизатора по wifi проблемные домены доступны
Код:
192:~ peter$ ping videolan.org
PING videolan.org (88.191.250.2): 56 data bytes
64 bytes from 88.191.250.2: icmp_seq=0 ttl=53 time=68.117 ms
64 bytes from 88.191.250.2: icmp_seq=1 ttl=53 time=67.768 ms
64 bytes from 88.191.250.2: icmp_seq=2 ttl=53 time=68.132 ms
64 bytes from 88.191.250.2: icmp_seq=3 ttl=53 time=68.653 ms
^C
--- videolan.org ping statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 67.768/68.168/68.653/0.316 ms
192:~ peter$ ping vtb.ru
PING vtb.ru (193.164.146.156): 56 data bytes
64 bytes from 193.164.146.156: icmp_seq=0 ttl=236 time=8.047 ms
64 bytes from 193.164.146.156: icmp_seq=1 ttl=236 time=11.134 ms
64 bytes from 193.164.146.156: icmp_seq=2 ttl=236 time=10.348 ms
ACL на эти адреса нет. Конфигурация интерфейса:
Код:
!
interface FastEthernet0/0
description ISP-0-MGTS
ip address dhcp
ip flow ingress
ip flow egress
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
no cdp enable
!