>не должна...
>конфиг покажите,

Current configuration : 7724 bytes
!
! Last configuration change at 18:32:08 TYUMS Mon Mar 28 2005
! NVRAM config last updated at 19:26:51 tyum Fri Mar 25 2005
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname GATE-3825
!
boot-start-marker
boot-end-marker
!
no logging buffered
enable secret 5
enable password
!
clock timezone tyum 3
clock summer-time TYUMS recurring last Sun Mar 3:00 last Sun Oct 3:00
no aaa new-model
ip subnet-zero
ip cef
!
!
!
!
ip flow-cache feature-accelerate
ip name-server 81.222.80.2
ip name-server 81.222.84.2
ip name-server 217.170.64.5
ip ips po max-events 100
no ftp-server write-enable
!

!
interface GigabitEthernet0/0
ip address 217.170.xx.xxx 255.255.255.252
ip access-group 111 in
ip access-group 110 out
ip route-cache flow
duplex auto
speed auto
media-type rj45
no mop enabled
!
interface GigabitEthernet0/1
ip address xxx.xxx.xxx.xxx 255.255.255.248 secondary
ip address xxx.xxx.xxx.xxx 255.255.255.240 secondary
ip address xxx.xxx.xxx.xxx 255.255.255.248 secondary
ip address xxx.xxx.xxx.xxx 255.255.255.248 secondary
ip address xxx.xxx.xxx.xxx 255.255.255.240 secondary
ip address xxx.xxx.xxx.xxx 255.255.255.240 secondary
ip address xxx.xxx.xxx.xxx 255.255.255.248 secondary
ip address xxx.xxx.xxx.xxx 255.255.255.240 secondary
ip address xxx.xxx.xxx.xxx 255.255.255.240 secondary
ip address xxx.xxx.xxx.xxx 255.255.255.248 secondary
ip address xxx.xxx.xxx.xxx 255.255.255.248 secondary
ip address xxx.xxx.xxx.xxx 255.255.255.240 secondary
ip address xxx.xxx.xxx.xxx 255.255.255.240 secondary
ip address xxx.xxx.xxx.xxx 255.255.255.240 secondary
ip address xxx.xxx.xxx.xxx 255.255.255.240 secondary
ip address xxx.xxx.xxx.xxx 255.255.255.240 secondary
ip address xxx.xxx.xxx.xxx 255.255.255.248
rate-limit input access-group 2000 128000 16000 24000 conform-action transmit exceed-action drop
rate-limit input access-group 2001 128000 16000 24000 conform-action transmit exceed-action drop
rate-limit input access-group 2002 128000 16000 24000 conform-action transmit exceed-action drop
rate-limit input access-group 2000 512000 128000 128000 conform-action continue exceed-action drop
rate-limit output access-group 2000 128000 16000 24000 conform-action transmit exceed-action drop
rate-limit output access-group 2001 128000 16000 24000 conform-action transmit exceed-action drop
rate-limit output access-group 2002 128000 16000 24000 conform-action transmit exceed-action drop
ip route-cache flow
duplex auto
speed auto
media-type rj45
!
router bgp 313xx
no synchronization
bgp log-neighbor-changes
network xxx.xxx.xxx.xxx  mask 255.255.240.0
neighbor 217.170.xx.xxx remote-as 2059xx
no auto-summary
!
ip classless
ip route 81.222.xxx.0 255.255.240.0 GigabitEthernet0/1
........
!
ip flow-export source GigabitEthernet0/1
ip flow-export version 5
ip flow-export destination 81.222.xxx.2 7223
ip flow-export destination 81.222.xxx.220 7223
!
ip http server
no ip http secure-server
!
logging trap debugging
logging facility local5
logging 81.222.xxx.4
access-list 101 deny   tcp any any eq 445
access-list 101 deny   tcp any range 1000 65535 any range 100 65535
access-list 101 permit ip any any
access-list 101 permit tcp any any eq 443
access-list 101 permit tcp any any eq pop3
access-list 101 deny   tcp any any eq 135
access-list 102 permit ip any any
access-list 110 deny   tcp any any range 161 162 log-input
access-list 110 deny   tcp any any eq 199 log-input
access-list 110 deny   tcp any any eq 391 log-input
access-list 110 deny   tcp any any eq 705 log-input
access-list 110 deny   tcp any any eq 1993 log-input
access-list 110 deny   udp any any eq 199 log-input
access-list 110 deny   udp any any eq 391 log-input
access-list 110 deny   udp any any eq 705 log-input
access-list 110 deny   udp any any eq 1993 log-input
access-list 110 deny   tcp any eq 445 any log-input
access-list 110 deny   tcp any any eq 445 log-input
access-list 110 deny   tcp any any eq 139 log-input
access-list 110 deny   udp any any eq netbios-ss log-input
access-list 110 deny   tcp any eq 135 any log-input
access-list 110 deny   tcp any any eq 135 log-input
access-list 110 deny   udp any any eq 135 log-input
access-list 110 permit ip 81.222.xxx0 0.0.0.255 any
access-list 110 permit ip 81.222.xxx.0 0.0.0.255 any
access-list 110 permit ip 81.222.xxx.0 0.0.0.255 any
access-list 110 permit ip 81.222.xxx.0 0.0.0.255 any
access-list 110 permit ip 81.222.xxx.0 0.0.0.255 any
access-list 110 deny   ip any any log-input
access-list 111 deny   tcp any any eq 2048
access-list 111 deny   udp any any eq 2048
access-list 111 deny   ip host 211.248.82.130 any log-input
access-list 111 deny   ip 127.0.0.0 0.255.255.255 any log-input
access-list 111 deny   ip 10.0.0.0 0.255.255.255 any log-input
access-list 111 deny   ip 172.16.0.0 0.15.255.255 any log-input
access-list 111 deny   ip 192.168.0.0 0.0.255.255 any log-input
access-list 111 deny   ip 165.21.0.0 0.0.255.255 any log-input
access-list 111 permit ip any any
access-list 120 deny   ip host 81.222.80.2 any
access-list 120 permit ip any any

snmp-server community public RO
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
stopbits 1
speed 115200
line aux 0
stopbits 1
line vty 0 4
exec-timeout 0 0
password cnfhntktrjv
login
!
scheduler allocate 20000 1000
ntp clock-period 17179649
ntp server 194.186.254.22 version 2
end