Network Management emergency: solutions to transient disconnection failures in Internet cafes

Instant disconnection failure: Transient disconnection is triggered when packet loss occurs twice. In this case, the PING Intranet is normal. It is also normal to connect the external network cable to a single machine.

Solution 1: Disable all switches in the LAN five minutes later. Power on again to check if the network is back to normal! (Cause: it may be that the switch has used up its memory for a long time without restarting, resulting in slow data exchange speed or congestion caused by network storms) (another possible cause is that one or more interface modules of a vswitch are damaged, or an internal network violence caused by a vswitch failure. The solution is to replace the vswitch)

Solution 2: Find a machine to install a CommView, set the IP address to your router IP address (remove the router from the Network), and then you can see what packets are sent to the outside by the Intranet machine, check which machine sends the most packets and what IP Address does it send? If you find that a machine sends a large number of destination IP addresses continuously, and the speed is fast, please repair the machine! (The possible cause is that one or more machines in the LAN are infected with the worm virus. When a packet is sent, the NAT connection of the router quickly becomes full)

Solution 3: If the two reasons are excluded or cannot solve the problem, it may be caused by poor performance of your router and limited processing capability. You can create software routers like route OS, or purchase 3000 ~ About 5000 yuan of hard routing, and change to observe the situation.

Solution 4: The NIC interface of one or more computers in the LAN is damaged, and a large number of * packets are repeatedly sent to the network, resulting in network congestion. (It is easy to troubleshoot this problem when there are many machines in the network. You can try to disconnect a vswitch and troubleshoot it one by one) after confirming which switch has the problem. Open these machines one by one, go to the desktop, exit all management software, open network connections, and check who is sending or collecting packets in large quantities without doing anything

Solution 5: (this situation is special: someone in the LAN uses illegal software to maliciously attack the internet cafe or ARP virus to attack the network) when a technician creates a master disk, he must independently shield some software that illegally attacks the internet cafe and, if possible, conduct static ARP binding on the gateway MAC. Many Hard Routers now have dedicated anti-disconnection functions., you can broadcast normal ARP packets on a regular basis. If you are using a software route, you can also use a software provided by MAX to prevent ARP attacks. The principle is similar to that of ARP Trojans.