HELP! Высокая нагрузка на cpu превышение пинга до коммутатора
Добавлено: 26 май 2023, 15:03
Всем привет!
Помогите мне пожалуйста, столкнулся с проблемой, на коммутаторе CRS354-48G-4S+2Q+, Firmware 7.4
Стал загружать процессор, средняя нагрузка на процессор 70-80%, бывает доходит до 100%
Стал превышаться пинг внутри локальной сети до коммутатора от 1 до 30
Может что то не так с моей конфигурацией?
/interface bridge
add admin-mac=2C:C8:1B:DE:68:89 auto-mac=no comment=defconf dhcp-snooping=yes \
igmp-snooping=yes name=bridge5 pvid=5 vlan-filtering=yes
/interface vlan
add disabled=yes interface=bridge5 name=vlan1 vlan-id=1
add interface=bridge5 name=vlan5 vlan-id=5
add interface=bridge5 name=vlan10 vlan-id=10
add interface=bridge5 name=vlan15 vlan-id=15
add interface=bridge5 name=vlan20 vlan-id=20
add interface=bridge5 name=vlan30 vlan-id=30
add interface=bridge5 name=vlan50 vlan-id=50
/interface bonding
add mode=802.3ad name=l006 slaves=ether5,ether11
add mode=802.3ad name=l012 slaves=ether10,ether20
add mode=802.3ad name=nasl01 slaves=ether19,ether33
add mode=802.3ad name=nasl03 slaves=ether8,ether12,ether16,ether18
add mode=802.3ad name=nasl05 slaves=sfp-sfpplus1,sfp-sfpplus2
add mode=802.3ad name=qsfpplus1 slaves=\
qsfpplus1-1,qsfpplus1-2,qsfpplus1-3,qsfpplus1-4
add mode=802.3ad name=stock slaves=\
ether13,ether14,ether15,ether25,ether26,ether1,ether2
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge5 comment=defconf disabled=yes interface=ether1 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether2 pvid=5
add bridge=bridge5 comment=defconf interface=ether3 pvid=5
add bridge=bridge5 comment=defconf interface=ether4 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether5 pvid=5
add bridge=bridge5 comment=defconf interface=ether6 pvid=5
add bridge=bridge5 comment=defconf interface=ether7 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether8 pvid=5
add bridge=bridge5 comment=defconf interface=ether9 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether10 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether11 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether12 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether13 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether14 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether15 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether16 pvid=5
add bridge=bridge5 comment=defconf interface=ether17 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether18 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether19 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether20 pvid=5
add bridge=bridge5 comment=defconf interface=ether21 pvid=5
add bridge=bridge5 comment=defconf interface=ether22 pvid=5
add bridge=bridge5 comment=defconf interface=ether23 pvid=5
add bridge=bridge5 comment=defconf interface=ether24 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether25 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether26 pvid=5
add bridge=bridge5 comment=defconf interface=ether27 pvid=5
add bridge=bridge5 comment=defconf interface=ether28 pvid=5
add bridge=bridge5 comment=defconf interface=ether29 pvid=5
add bridge=bridge5 comment=defconf interface=ether30 pvid=5 trusted=yes
add bridge=bridge5 comment=defconf interface=ether31 pvid=5
add bridge=bridge5 comment=defconf interface=ether32 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether33 pvid=5
add bridge=bridge5 comment=defconf interface=ether34 pvid=5
add bridge=bridge5 comment=defconf interface=ether35 pvid=5
add bridge=bridge5 comment=defconf interface=ether36 pvid=5 trusted=yes
add bridge=bridge5 comment=defconf interface=ether37 pvid=5
add bridge=bridge5 comment=defconf interface=ether38 pvid=5
add bridge=bridge5 comment=defconf interface=ether39 pvid=5
add bridge=bridge5 comment=defconf interface=ether40 pvid=5
add bridge=bridge5 comment=defconf interface=ether41 pvid=5
add bridge=bridge5 comment=defconf interface=ether42 pvid=5
add bridge=bridge5 comment=defconf interface=ether43 pvid=5
add bridge=bridge5 comment=defconf interface=ether44 pvid=5
add bridge=bridge5 comment=defconf interface=ether45 pvid=5
add bridge=bridge5 comment=defconf interface=ether46 pvid=5
add bridge=bridge5 comment=defconf interface=ether47 pvid=5
add bridge=bridge5 comment=defconf interface=ether48 pvid=5
add bridge=bridge5 comment=defconf interface=ether49 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=qsfpplus1-1 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=qsfpplus1-2 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=qsfpplus1-3 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=qsfpplus1-4 pvid=5
add bridge=bridge5 comment=defconf interface=qsfpplus2-1 pvid=5
add bridge=bridge5 comment=defconf interface=qsfpplus2-2 pvid=5
add bridge=bridge5 comment=defconf interface=qsfpplus2-3 pvid=5
add bridge=bridge5 comment=defconf interface=qsfpplus2-4 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=sfp-sfpplus1 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=sfp-sfpplus2 pvid=5
add bridge=bridge5 comment=defconf interface=sfp-sfpplus3 pvid=5
add bridge=bridge5 comment=defconf interface=sfp-sfpplus4 pvid=5 trusted=yes
add bridge=bridge5 interface=l006 pvid=5
add bridge=bridge5 interface=l012 pvid=5
add bridge=bridge5 interface=nasl03 pvid=5
add bridge=bridge5 interface=stock pvid=5
add bridge=bridge5 interface=nasl05 pvid=5
add bridge=bridge5 interface=nasl01 pvid=5
add bridge=bridge5 interface=qsfpplus1 pvid=5 trusted=yes
add bridge=bridge5 interface=*53 pvid=5
/interface bridge vlan
add bridge=bridge5 vlan-ids=5
add bridge=bridge5 tagged="bridge5,ether1,ether9,ether19,ether21,ether22,ether\
23,ether24,ether27,stock,ether30,sfp-sfpplus4" vlan-ids=10
add bridge=bridge5 tagged="stock,ether9,ether21,ether22,ether23,ether24,ether2\
7,bridge5,l006,qsfpplus1,ether36,ether6" vlan-ids=15
add bridge=bridge5 tagged=\
ether9,ether21,ether22,ether23,ether24,ether27,stock,ether30,bridge5 \
vlan-ids=20
add bridge=bridge5 tagged=\
ether9,ether21,ether22,ether23,ether24,stock,ether28,bridge5,sfp-sfpplus4 \
vlan-ids=50
add bridge=bridge5 tagged=ether29,ether30,ether31,bridge5,l006,sfp-sfpplus4 \
vlan-ids=1
add bridge=bridge5 tagged="stock,ether9,ether21,ether22,ether23,ether24,ether2\
7,bridge5,qsfpplus1,ether36,ether6,ether30,ether31" vlan-ids=30
/ip address
add address=10.0.0.42/24 comment=defconf interface=bridge5 network=10.0.0.0
add address=10.0.10.42/24 interface=vlan10 network=10.0.10.0
add address=10.1.10.42/23 interface=vlan15 network=10.1.10.0
add address=10.10.10.42/24 interface=vlan20 network=10.10.10.0
add address=192.168.22.200/24 interface=vlan1 network=192.168.22.0
add address=10.30.10.42/24 interface=vlan30 network=10.30.10.0
/ip dhcp-relay
add dhcp-server=10.100.10.1 disabled=no interface=vlan50 name=relay_vlan50
add dhcp-server=10.0.0.1 disabled=no interface=bridge5 name=relay_vlan5
add dhcp-server=10.0.10.1 disabled=no interface=vlan10 name=relay_vlan10
add dhcp-server=10.10.10.1 disabled=no interface=vlan20 name=relay_vlan20
add dhcp-server=10.1.10.1 disabled=no interface=vlan15 name=relay_vlan15
add dhcp-server=192.168.22.1 disabled=no interface=vlan1 name=relay_vlan1
add dhcp-server=10.30.10.1 disabled=no interface=vlan30 name=relay_vlan30
/ip dns
set servers=10.0.0.11,10.0.0.12
/ip firewall filter
add action=drop chain=input comment="Drop Invalid connections" disabled=yes \
in-interface=!bridge5
add action=accept chain=input disabled=yes in-interface=!bridge5 log=yes \
log-prefix=debug-in
add action=accept chain=output comment=" " disabled=yes
add action=drop chain=input disabled=yes protocol=icmp
/ip route
add distance=1 gateway=10.0.0.59
/ip service
set telnet disabled=yes
set ftp disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/snmp
set enabled=yes trap-version=2
/system clock
set time-zone-name=Europe/Moscow
/system routerboard settings
set boot-os=router-os
/tool graphing interface
add allow-address=10.0.0.42/32
Помогите мне пожалуйста, столкнулся с проблемой, на коммутаторе CRS354-48G-4S+2Q+, Firmware 7.4
Стал загружать процессор, средняя нагрузка на процессор 70-80%, бывает доходит до 100%
Стал превышаться пинг внутри локальной сети до коммутатора от 1 до 30
Может что то не так с моей конфигурацией?
/interface bridge
add admin-mac=2C:C8:1B:DE:68:89 auto-mac=no comment=defconf dhcp-snooping=yes \
igmp-snooping=yes name=bridge5 pvid=5 vlan-filtering=yes
/interface vlan
add disabled=yes interface=bridge5 name=vlan1 vlan-id=1
add interface=bridge5 name=vlan5 vlan-id=5
add interface=bridge5 name=vlan10 vlan-id=10
add interface=bridge5 name=vlan15 vlan-id=15
add interface=bridge5 name=vlan20 vlan-id=20
add interface=bridge5 name=vlan30 vlan-id=30
add interface=bridge5 name=vlan50 vlan-id=50
/interface bonding
add mode=802.3ad name=l006 slaves=ether5,ether11
add mode=802.3ad name=l012 slaves=ether10,ether20
add mode=802.3ad name=nasl01 slaves=ether19,ether33
add mode=802.3ad name=nasl03 slaves=ether8,ether12,ether16,ether18
add mode=802.3ad name=nasl05 slaves=sfp-sfpplus1,sfp-sfpplus2
add mode=802.3ad name=qsfpplus1 slaves=\
qsfpplus1-1,qsfpplus1-2,qsfpplus1-3,qsfpplus1-4
add mode=802.3ad name=stock slaves=\
ether13,ether14,ether15,ether25,ether26,ether1,ether2
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge5 comment=defconf disabled=yes interface=ether1 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether2 pvid=5
add bridge=bridge5 comment=defconf interface=ether3 pvid=5
add bridge=bridge5 comment=defconf interface=ether4 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether5 pvid=5
add bridge=bridge5 comment=defconf interface=ether6 pvid=5
add bridge=bridge5 comment=defconf interface=ether7 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether8 pvid=5
add bridge=bridge5 comment=defconf interface=ether9 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether10 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether11 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether12 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether13 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether14 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether15 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether16 pvid=5
add bridge=bridge5 comment=defconf interface=ether17 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether18 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether19 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether20 pvid=5
add bridge=bridge5 comment=defconf interface=ether21 pvid=5
add bridge=bridge5 comment=defconf interface=ether22 pvid=5
add bridge=bridge5 comment=defconf interface=ether23 pvid=5
add bridge=bridge5 comment=defconf interface=ether24 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether25 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether26 pvid=5
add bridge=bridge5 comment=defconf interface=ether27 pvid=5
add bridge=bridge5 comment=defconf interface=ether28 pvid=5
add bridge=bridge5 comment=defconf interface=ether29 pvid=5
add bridge=bridge5 comment=defconf interface=ether30 pvid=5 trusted=yes
add bridge=bridge5 comment=defconf interface=ether31 pvid=5
add bridge=bridge5 comment=defconf interface=ether32 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether33 pvid=5
add bridge=bridge5 comment=defconf interface=ether34 pvid=5
add bridge=bridge5 comment=defconf interface=ether35 pvid=5
add bridge=bridge5 comment=defconf interface=ether36 pvid=5 trusted=yes
add bridge=bridge5 comment=defconf interface=ether37 pvid=5
add bridge=bridge5 comment=defconf interface=ether38 pvid=5
add bridge=bridge5 comment=defconf interface=ether39 pvid=5
add bridge=bridge5 comment=defconf interface=ether40 pvid=5
add bridge=bridge5 comment=defconf interface=ether41 pvid=5
add bridge=bridge5 comment=defconf interface=ether42 pvid=5
add bridge=bridge5 comment=defconf interface=ether43 pvid=5
add bridge=bridge5 comment=defconf interface=ether44 pvid=5
add bridge=bridge5 comment=defconf interface=ether45 pvid=5
add bridge=bridge5 comment=defconf interface=ether46 pvid=5
add bridge=bridge5 comment=defconf interface=ether47 pvid=5
add bridge=bridge5 comment=defconf interface=ether48 pvid=5
add bridge=bridge5 comment=defconf interface=ether49 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=qsfpplus1-1 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=qsfpplus1-2 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=qsfpplus1-3 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=qsfpplus1-4 pvid=5
add bridge=bridge5 comment=defconf interface=qsfpplus2-1 pvid=5
add bridge=bridge5 comment=defconf interface=qsfpplus2-2 pvid=5
add bridge=bridge5 comment=defconf interface=qsfpplus2-3 pvid=5
add bridge=bridge5 comment=defconf interface=qsfpplus2-4 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=sfp-sfpplus1 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=sfp-sfpplus2 pvid=5
add bridge=bridge5 comment=defconf interface=sfp-sfpplus3 pvid=5
add bridge=bridge5 comment=defconf interface=sfp-sfpplus4 pvid=5 trusted=yes
add bridge=bridge5 interface=l006 pvid=5
add bridge=bridge5 interface=l012 pvid=5
add bridge=bridge5 interface=nasl03 pvid=5
add bridge=bridge5 interface=stock pvid=5
add bridge=bridge5 interface=nasl05 pvid=5
add bridge=bridge5 interface=nasl01 pvid=5
add bridge=bridge5 interface=qsfpplus1 pvid=5 trusted=yes
add bridge=bridge5 interface=*53 pvid=5
/interface bridge vlan
add bridge=bridge5 vlan-ids=5
add bridge=bridge5 tagged="bridge5,ether1,ether9,ether19,ether21,ether22,ether\
23,ether24,ether27,stock,ether30,sfp-sfpplus4" vlan-ids=10
add bridge=bridge5 tagged="stock,ether9,ether21,ether22,ether23,ether24,ether2\
7,bridge5,l006,qsfpplus1,ether36,ether6" vlan-ids=15
add bridge=bridge5 tagged=\
ether9,ether21,ether22,ether23,ether24,ether27,stock,ether30,bridge5 \
vlan-ids=20
add bridge=bridge5 tagged=\
ether9,ether21,ether22,ether23,ether24,stock,ether28,bridge5,sfp-sfpplus4 \
vlan-ids=50
add bridge=bridge5 tagged=ether29,ether30,ether31,bridge5,l006,sfp-sfpplus4 \
vlan-ids=1
add bridge=bridge5 tagged="stock,ether9,ether21,ether22,ether23,ether24,ether2\
7,bridge5,qsfpplus1,ether36,ether6,ether30,ether31" vlan-ids=30
/ip address
add address=10.0.0.42/24 comment=defconf interface=bridge5 network=10.0.0.0
add address=10.0.10.42/24 interface=vlan10 network=10.0.10.0
add address=10.1.10.42/23 interface=vlan15 network=10.1.10.0
add address=10.10.10.42/24 interface=vlan20 network=10.10.10.0
add address=192.168.22.200/24 interface=vlan1 network=192.168.22.0
add address=10.30.10.42/24 interface=vlan30 network=10.30.10.0
/ip dhcp-relay
add dhcp-server=10.100.10.1 disabled=no interface=vlan50 name=relay_vlan50
add dhcp-server=10.0.0.1 disabled=no interface=bridge5 name=relay_vlan5
add dhcp-server=10.0.10.1 disabled=no interface=vlan10 name=relay_vlan10
add dhcp-server=10.10.10.1 disabled=no interface=vlan20 name=relay_vlan20
add dhcp-server=10.1.10.1 disabled=no interface=vlan15 name=relay_vlan15
add dhcp-server=192.168.22.1 disabled=no interface=vlan1 name=relay_vlan1
add dhcp-server=10.30.10.1 disabled=no interface=vlan30 name=relay_vlan30
/ip dns
set servers=10.0.0.11,10.0.0.12
/ip firewall filter
add action=drop chain=input comment="Drop Invalid connections" disabled=yes \
in-interface=!bridge5
add action=accept chain=input disabled=yes in-interface=!bridge5 log=yes \
log-prefix=debug-in
add action=accept chain=output comment=" " disabled=yes
add action=drop chain=input disabled=yes protocol=icmp
/ip route
add distance=1 gateway=10.0.0.59
/ip service
set telnet disabled=yes
set ftp disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/snmp
set enabled=yes trap-version=2
/system clock
set time-zone-name=Europe/Moscow
/system routerboard settings
set boot-os=router-os
/tool graphing interface
add allow-address=10.0.0.42/32