思科企业级路由器使用体验

刘佐

CISCO-1921-sec-K9
官方网站上没有标明吞吐量和转发速率.
给的驱动都是限定XP使用的。

这也就算了。

配置pppoe之后
带宽200M的线路
PPPOE之后带宽20M到30M之间波动
这尼玛是企业级路由器？
还不如低端货色呢,

foundout

听起来像是什么策略系统在起作用，或者线路问题。

李鸿章

200M啥路数还走的PPOE

配置你发上来我看看

kissmore_as

1921本来就是低端的，你MTU值改了没？发个show run让大家看看了

allenz

买的魔改腾达现在下载几乎天天要重启，求个稳定的家用路由

GETTER2

不明白，为什么独立的路由器还要驱动

zerocount

我很好奇 CISCO到底出了什么驱动还必须限定XP系统。。。

kissmore_as

其实我也蛮好奇的，还是用telnet或者ssh吧~cisco R&S 这块全是命令行配的

坑狗madao

路由器怎么还有驱动。。。

健身牛牛

http://www.cisco.com/c/en/us/pro ... eet_c78-598389.html
• The Cisco 1900 Series enables deployment in high-speed WAN environments with concurrent services enabled up to 15 Mbps.
其实我想叫LZ把Zone-Based Policy Firewall关闭试试，关掉之后NAT性能提高了
不过说实话，这个玩意，NAT性能跑不满200M的带宽
1921 NAT ONLY
CPU utilization for five seconds: 92%/91%;
15.0-1 m8
  
C:\>iperf -c 10.1.18.95 -P 3 -t 60
------------------------------------------------------------
Client connecting to 10.1.18.95, TCP port 5001
TCP window size: 8.00 KByte (default)
------------------------------------------------------------
[1880] local 10.3.152.2 port 1829 connected with 10.1.18.95 port 5001
[1912] local 10.3.152.2 port 1827 connected with 10.1.18.95 port 5001
[1896] local 10.3.152.2 port 1828 connected with 10.1.18.95 port 5001
[ ID] Interval       Transfer     Bandwidth
[1896]  0.0-60.0 sec   866 MBytes   121 Mbits/sec
[1912]  0.0-60.0 sec   832 MBytes   116 Mbits/sec
[1880]  0.0-60.0 sec   824 MBytes   115 Mbits/sec
[SUM]  0.0-60.0 sec  2.46 GBytes   352 Mbits/sec

1921 ZBFW & NAT
CPU utilization for five seconds: 92%/92%
C:\>iperf -c 10.1.18.95 -P 3 -t 20
------------------------------------------------------------
Client connecting to 10.1.18.95, TCP port 5001
TCP window size: 8.00 KByte (default)
------------------------------------------------------------
[1880] local 10.3.152.2 port 1865 connected with 10.1.18.95 port 5001
[1896] local 10.3.152.2 port 1864 connected with 10.1.18.95 port 5001
[1912] local 10.3.152.2 port 1862 connected with 10.1.18.95 port 5001
[ ID] Interval       Transfer     Bandwidth
[1896]  0.0-20.0 sec   133 MBytes  56.0 Mbits/sec
[1880]  0.0-20.0 sec   131 MBytes  55.0 Mbits/sec
[1912]  0.0-20.0 sec   133 MBytes  55.6 Mbits/sec
[SUM]  0.0-20.0 sec   397 MBytes   167 Mbits/sec

刘佐

健身牛牛 发表于 2014-11-20 15:43
http://www.cisco.com/c/en/us/products/collateral/routers/1900-series-integrated-services-routers-isr ...

Building configuration...

Current configuration : 3478 bytes
!
! Last configuration change at 12:26:29 UTC Wed Nov 19 2014 by 1
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname xxi
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$3kkL$x/jbiRRn90FB8KaKDIg2g/
enable password cisco
!
no aaa new-model
!
ip cef
!
!
!
ip dhcp excluded-address 192.168.2.1 192.168.2.99
!
ip dhcp pool neiwang
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 114.114.114.114
lease 0 0 20
!
!
!
no ipv6 cef
!
multilink bundle-name authenticated
!
!

!
!
crypto pki c**ificate chain TP-self-signed-2552067286
c**ificate self-signed 01
  3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 32353532 30363732 3836301E 170D3134 31313139 30343335
  31305A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 35353230
  36373238 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
  8100D91A 93A57607 11621B6E 4C2BA769 CF8A2F08 BC63FB40 6733037D B93603F7
  3D776F2E 1168D95B 92F1FD33 0A3BD215 EF03ED81 5A78A9D2 6F47F84D D9D30493
  FE3FF752 34198B3E 7A7503AA 12B7D6D2 30699DCF 9EEAF999 3B173FE0 6AA71E19
  C542CEDF D1EC92DD 9237E887 8203B8A8 55852911 3F881863 98A90A24 EBA736A0
  C3010203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
  551D2304 18301680 1476EDE3 CD4CC107 D26AFC69 BF5B11EC 32A1729E B0301D06
  03551D0E 04160414 76EDE3CD 4CC107D2 6AFC69BF 5B11EC32 A1729EB0 300D0609
  2A864886 F70D0101 05050003 81810005 34F7FD1F 5D3E3D31 558BB516 1093BC2A
  2111F47C A9E6D830 CEE1E2F5 21A5A76D 32A05D53 A9A226CE 5ECB76C3 FA5060A5
  94817BC1 CEDE1F72 969BAD6A 85D4298D 441A771A 35B3F949 63D91DDA 16751FC8
  E2AB72F5 5A89D163 DAAC4B56 972F6A7B 23928347 58FF4C02 5445630E A4471C1E
  BD66BF77 19BE6DC2 F63363F9 5204EA
  quit
license udi pid CISCO1921/K9 sn
!
!
username cisco privilege 15 password 0 cisco
username 1 privilege 15 password 0 1
!
redundancy
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
duplex auto
speed 1000
pppoe enable group global
pppoe-client dial-pool-number 1
!
interface GigabitEthernet0/1
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Dialer1
mtu 1208
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation ppp
dialer pool 1
ppp authentication pap callin
这行是账号密码，就不复制了.
!
ip forward-protocol nd
!
ip http server
ip http authentication local
ip http secure-server
!
ip nat inside source list 15 interface Dialer1 overload
ip route 0.0.0.0 0.0.0.0 Dialer1
!
access-list 15 permit any
!
!
snmp-server community public RO
snmp-server enable traps entity-sensor threshold
!
control-**e
!
!
!
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 111111
login
transport input all
!
scheduler allocate 20000 1000
!
end

迷路的石头

两点很奇怪，一是MTU为什么设成1208。1500的默认MTU减去8字节的PPP头，设成1492就够了。为了TCP性能考虑也可以加个ip tcp adj 1452（上面基础上再减去IP的20和TCP的20），否则超过1208的包就要分片，很影响性能的。还有一点就是为什么你配置了ppp authentication pap calli这命令。你应该属于被验证方，而这条命令是要求对端，也就是ISP也要配pap的验证用户名密码才行。不过在以太网上用pap而不是chap或者eap这本来就很神奇了。

迷路的石头

健身牛牛 发表于 2014-11-20 15:43
http://www.cisco.com/c/en/us/products/collateral/routers/1900-series-integrated-services-routers-isr ...

Zbf默认是关闭的

迷路的石头

另外关于主楼的问题，楼主你bit 和 byte应该没弄错吧

刘佐

迷路的石头 发表于 2014-12-3 17:18
另外关于主楼的问题，楼主你bit 和 byte应该没弄错吧

算了，东西折腾一圈又回来了。。
查下来是设备转发问题
不是配置上问题
ISP是只是支持PAP认证

gnoll

业内告诉你。。。企业级真不代表性能就好。。。