求助：公司网络严重丢包问题

寒冬的囧太阳

公司网络拓扑图：
以下是路由器配置：
router#config t
router(config)#hostname R1921
R1921(config)#interface g0/0
R1921(config-if)#ip address  保密  255.255.255.252
R1921(config-if)#no shut
R1921(config-if)#exit
R1921(config)#interface g0/1
R1921(config-if)ip address 192.168.1.1 255.255.255.0
R1921(config-if)#no shut
R1921(config-if)#exit
R1921(config)#ip access-list extended NAT
R1921(config-ext-nacl)#permit ip any any
R1921(config-ext-nacl)#exit
R1921(config)#ip nat inside source list NAT interface g0/0
R1921(config)#ip nat inside source list NAT interface g0/0 overload
R1921(config)intterface g0/0
R1921(config-if)#ip nat outside
R1921(config-if)#exit
R1921(config)#interface g0/1
R1921(config-if)#ip nat inside
R1921(config-if)#exit
R1921(config)#ip route 0.0.0.0 0.0.0.0 保密
R1921(config)#ip dhcp pool A
R1921(dhcp-config)#network 192.168.1.0 255.255.255.0
R1921(dhcp-config)#dns-server 202.99.166.4 8.8.8.8
R1921(dhcp-config)#default-route 192.168.1.1
R1921(dhcp-config)#exit
R1921(config)#ip dhcp excluded-address 192.168.1.240 192.168.1.254

motive6

我感觉是路由器性能不足了

寒冬的囧太阳

motive6 发表于 2017-3-16 15:51
我感觉是路由器性能不足了

刚开始用的时候还没事，过了半年左右。就开始犯这个毛病了。一天里边得有个一两次上不去网。有时候严重丢包，网页半天才能打开。有时候干脆就ping不同外网。到现在我还没找到故障原因。按说这个路由器也就够用，毕竟带机量不大。

寒冬的囧太阳

motive6 发表于 2017-3-16 15:51
我感觉是路由器性能不足了

刚开始用的时候还没事，过了半年左右。就开始犯这个毛病了。一天里边得有个一两次上不去网。有时候严重丢包，网页半天才能打开。有时候干脆就ping不同外网。到现在我还没找到故障原因。按说这个路由器也就够用，毕竟带机量不大。

motive6

寒冬的囧太阳 发表于 2017-3-16 16:33
刚开始用的时候还没事，过了半年左右。就开始犯这个毛病了。一天里边得有个一两次上不去网。有时候严重丢 ...

ARP广播风暴，还有内网某台机器中病毒也有可能

沉机

查一下路由器的cpu和内存的利用率

lzq8663457

可能是员工恶意瞎搞，建议换个防火墙，适当限速。并在交换机上划分VLAN，减小广播域

nickhuang1268

IP Address Accounting
By enabling IP accounting, users can see the number of bytes and packets switched through the Cisco IOS Software on a source and destination IP address basis. Only transit IP traffic is measured and only on an outbound basis; traffic generated by the software or terminating in the software is not included in the accounting statistics.
To Enable IP accounting based on the IP packets output on the interface, use the ip accounting output-packets command in interface configuration mode.
Example
Router#
Router#config t
Router(config)#interface ethernet0
Router(config-if)#ip accounting output-packets
MAC Address Accouting
The MAC address accounting feature provides accounting information for IP traffic based on the source and destination MAC addresses on LAN interfaces. This feature calculates the total packet and byte counts for a LAN interface that receives or sends IP packets to or from a unique MAC address. It also records a timestamp for the last packet received or sent.
To enable IP accounting on a LAN interface based on the source and destination MAC address, use the ip accounting mac-address [input | output] command in interface configuration mode.
Syntax Description
input
Performs accounting based on the source MAC address on received packets.
output
Performs accounting based on the destination MAC address on transmitted packets.
Examples
Router#
Router#config t
Router(config)#interface ethernet0
Router(config-if)#ip accounting mac-address input
Router(config-if)#ip accounting mac-address output
For more information about ip accounting, please visit www.cisco.com.

qingqing123

很可能有人私设置IP跟其它IP相同，或者是装一个网管软件乱发ARP包，或者机器中ARP病毒。

124571013

先测试宽带，单击测试，看看是否宽带正常，正常的话，就要排局域网的了，可能是某台电脑中毒造成ARP攻击，也有可能有人私接外部设备或用360WIFI，造成这样的情况有很多种，一步一步排吧。。

124571013

我上周碰到一个事，也是丢包严重，后来问运营商那边，他们那边主干线缆在施工的时候，不小心挖断了。。。

yleopard

我以前碰到的，有人在局域网内架了一个AP热点，然后与现在的wifi热点地址冲突，就出现了你描述的这种情况。