Serial Number CNU71***FV
Product Number RF591UC
Product Description Cnc8430FFT7200Y580XMhF10PeS ALL
Date of Warranty Check 10 Jul 2010  

--------------------------------------------------------------------------------

Warranty Type Base Warranty

Wty: HP HW Maintenance Offsite Support
Status  Expired
Start Date  01 Jun 2007  
End Date  05 Jul 2010  
Service Level  Std Office Hrs Std Office Days , Std Office Hrs Std Office Days , Global Coverage , Standard Material Handling , Standard Parts Logistics , No Usage Limitation , 2 Business Days Turn-Around , Pickup by HP , HP Ships to Customer Site  
Deliverables  Offsite Support & Materials
Hardware Problem Diagnosis


Wty: HP Support for Initial Setup
Status  Expired
Start Date  01 Jun 2007  
End Date  03 Oct 2007  
Service Level  Std Office Hrs Std Office Days , NextAvail TechResource Remote , 2 Hr Remote Response , Unlimited Named Callers  
Deliverables  Initial Setup Assistance

  2010-7-8 07:48  Switch is responding again. Response time is 0 milliseconds  
  2010-7-8 07:41  Switch has stopped responding (Request Timed Out)  
  2010-7-8 07:36  Switch is responding again. Response time is 1 milliseconds  
  2010-7-8 07:29  Switch has stopped responding (Request Timed Out)  
  2010-7-8 07:26  Switch is responding again. Response time is 0 milliseconds  
2010-7-7 17:35  Switch has stopped responding (Request Timed Out)  
  2010-7-7 17:31  Switch is responding again. Response time is 0 milliseconds  
  2010-7-7 17:30  Switch rebooted at 2010-7-7 17:28  
  2010-7-7 17:29  Switch has stopped responding (Request Timed Out)  
  2010-7-7 17:03  Switch is responding again. Response time is 0 milliseconds  

switch-23net#sho run int fa0/24
Building configuration…

Current configuration : 224 bytes
!
Interface FastEthernet0/24
description up_3550-fa01
switchport trunk encapsulation dot1q
switchport mode trunk
logging event trunk-status
logging event spanning-tree
logging event status
speed 100
duplex full
end

cisco3550#sho run int fa0/1
Building configuration…

Current configuration : 248 bytes
!
Interface FastEthernet0/1
description to_23net
switchport trunk encapsulation dot1q
switchport mode trunk
logging event trunk-status
logging event bundle-status
logging event spanning-tree
logging event status
duplex full
speed 100
end

Hi Theron,

这种DOS流量攻击不是防火墙解决的范畴。用户不能够要求买一个安全设备就解决所有的问题。

关于于工提到的指标。需要说明的是：

Drop 垃圾流量和防火墙的并发连接数几乎没有关系。
Drop流量主要和端口转发速率有关，另外和防火墙新建连接数有一定的关系。

每个产品都有自己的定位和特点。你不能买了宝马非得要追求奔驰的舒适性，买了奔驰非得要追求宝马的驾驭能力一样。

当初在**总部的3070 ，运行三天就发现了内网的Foundry 交换机发送ICMP垃圾报文的问题。 Juniper ISG 1000运行了3年都没有发现。

在流量层面，UTM-1 2070的定位是处理混合包和应用层的深度检测；


另外，一些优化建议供参考。

1，关闭drop的log；
2，启用secureXL模块，启用drop template（secureXL需要额外购买license）

ns-204> get per cpu d
Average System Utilization:  2%
Last 60 seconds:
59: 17    58: 51*   57: 88*** 56: 22    55: 53*   54: 69*  
53: 63*   52: 86*** 51: 81**  50: 57*   49: 52*   48: 77**  
47: 25    46: 40    45: 67*   44: 50*   43: 63*   42: 51*  
41: 59*   40: 30    39: 72**  38: 59*   37: 89*** 36: 45    
35: 46    34: 55*   33: 50*   32: 49    31: 65*   30: 51*  
29: 57*   28: 54*   27: 77**  26: 89*** 25: 75**  24: 37    
23: 76**  22: 71**  21: 87*** 20: 80**  19:  3    18: 43    
17: 86*** 16: 69*   15: 64*   14: 10    13: 49    12: 86***
11: 88*** 10: 87***  9: 78**   8: 89***  7: 64*    6: 53*  
5: 39     4: 46     3: 52*    2:  2     1:  2     0: 48    

Last 60 minutes:
59: 51*   58: 65*   57: 61*   56: 62*   55: 67*   54: 62*  
53:  6    52:  6    51: 38    50:  7    49:  5    48:  9    
47:  2    46:  2    45:  2    44:  2    43:  2    42:  2    
41:  2    40:  2    39:  6    38:  3    37:  2    36:  2    
35:  2    34:  2    33:  2    32:  1    31:  2    30:  2    
29:  2    28:  2    27:  2    26:  2    25:  2    24:  1    
23:  2    22:  2    21:  2    20:  1    19:  2    18:  2    
17:  2    16:  2    15:  9    14:  5    13:  2    12:  2    
--- more ---