<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1264" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Hi there,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2> I am using Cisco As5300 with 120 ports MICA
modem and 4 E1 interfaces.</FONT></DIV>
<DIV><FONT face=Arial size=2>as we are using it for an ISP, to avoid improper
uploads generated from dialup users due to worms like blaster and welchia we
have tried to stop this upload with CAR command though the command seems to be
working but when we check an infected user its upload goes beyond 70 kbps which
shouldnt happen if there is proper CAR command implementation.</FONT></DIV>
<DIV><FONT face=Arial size=2>I am pasting the CAR configuation in our
AS5300.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>interface Group-Async1<BR> ip unnumbered
FastEthernet0<BR> ip access-group 100 in<BR> ip access-group 100
out<BR> no ip directed-broadcast<BR> <STRONG>rate-limit input 8000
8000 9000 conform-action transmit exceed-action drop<BR> rate-limit output
32000 8000 9000 conform-action transmit exceed-action
drop<BR></STRONG> encapsulation ppp<BR> ip tcp header-compression
passive<BR> async mode interactive<BR> peer default ip address pool
setup_pool<BR> no fair-queue<BR> ppp authentication pap<BR> ppp
multilink<BR> group-range 1 120<BR></FONT></DIV>
<DIV><FONT face=Arial size=2>according to this CAR configuration the upload
shouldnt go higher then 9kbps but infact it goes more than 70kbps as you
can see below its more then 9kbps </FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>geonet-ds1#show in as 64<BR>Async64 is up, line
protocol is up<BR> modem(slot/port)=2/3, state=CONNECTED<BR>
dsx1(slot/unit/channel)=0/0/4,
status=VDEV_STATUS_ACTIVE_CALL.VDEV_STATUS_ALLOCATED.<BR> Hardware is
Async Serial<BR> Interface is unnumbered. Using address of
FastEthernet0 <BR> MTU 1500 bytes, BW 115 Kbit, DLY 100000
usec,<BR> reliability 255/255, txload 2/255, rxload
126/255<BR> Encapsulation PPP, loopback not set<BR> Keepalive not
set<BR> DTR is pulsed for 5 seconds on reset<BR> LCP Open, multilink
Open<BR> Last input 00:00:00, output 00:00:00, output hang never<BR>
Last clearing of "show interface" counters 1w6d<BR> Queueing strategy:
fifo<BR> Output queue 0/10, 9441 drops; input queue 3/10, 0
drops<BR> <STRONG><FONT size=3>5 minute input rate 57000 bits/sec, 75
packets/sec</FONT><BR></STRONG> <FONT size=3><STRONG>5 minute output rate
1000 bits/sec, 2 packets/sec<BR></STRONG></FONT> 3963840
packets input, 352277595 bytes, 0 no buffer<BR></FONT></DIV>
<DIV><FONT face=Arial size=2>So i would like to know where i am making the
mistake and why the CAR is not functioning as we want it to
function.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>would appreciate your help</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Best regards</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Raz </FONT></DIV>
<DIV><FONT face=Arial size=2>Geonet.</FONT></DIV>
<DIV><FONT face=Arial size=2>Pakistan.</DIV></FONT>
<DIV><FONT face=Arial size=2> </DIV></FONT></BODY></HTML>