> Можно полный вывод sh run?

Building configuration...

Current configuration : 3201 bytes
!
! Last configuration change at 11:38:55 MSK Tue Nov 9 2010 by admin
!
version 12.4
no service pad
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
!
hostname PJsCisco
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication ppp default local
aaa authorization exec default local
aaa authorization network default local
!
!
aaa session-id common
clock timezone MSK 3
clock summer-time MSD recurring last Sun Mar 2:00 last Sun Oct 3:00
!
crypto pki trustpoint TP-self-signed-4029212631
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-4029212631
revocation-check none
rsakeypair TP-self-signed-4029212631
!
!
dot11 syslog
!
dot11 ssid PJsWiFiNet
   authentication open
   authentication key-management wpa
   guest-mode
   wpa-psk ascii 7 ****
!
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.0.1
ip dhcp excluded-address 192.168.0.50
!
ip dhcp pool LAN
   import all
   network 192.168.0.0 255.255.255.0
   dns-server 192.168.0.1 213.21.0.5
   default-router 192.168.0.1
!
!
ip name-server 213.21.0.5
ip name-server 213.21.31.5
ip name-server 8.8.8.8
ip multicast-routing
ip multicast auto-enable
!
multilink bundle-name authenticated
!
!
username admin privilege 15 secret 5 *****
!
!
archive
log config
  hidekeys
!
!
!
bridge irb
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
description === Internet ===$ETH-WAN$
mac-address 00f1.55f8.772d
ip address 213.21.4.41 255.255.252.0
ip access-group acl-fa4-out out
ip pim sparse-dense-mode
ip nat outside
ip virtual-reassembly max-reassemblies 128
ip igmp query-interval 125
speed 100
full-duplex
!
interface Dot11Radio0
no ip address
!
encryption mode ciphers tkip
!
broadcast-key change 60
!
!
ssid PJsWiFiNet
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Vlan1
description === LAN ===
no ip address
bridge-group 1
!
interface BVI1
ip address pool LAN
ip pim sparse-dense-mode
ip nat inside
ip virtual-reassembly max-reassemblies 72
!
no ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 213.21.44.1 permanent
!
!
ip http server
ip http authentication local
no ip http secure-server
ip dns server
ip dns spoofing
ip nat inside source list 100 interface FastEthernet4 overload
!
ip access-list extended acl-fa4-out
deny   udp any any eq bootpc
permit ip any any
!
access-list 100 permit ip 192.168.0.0 0.0.0.255 any
!
!
!
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip
!
line con 0
no modem enable
escape-character 3
line aux 0
line vty 0 4
transport input telnet ssh
escape-character 3
!
scheduler max-task-time 5000
ntp clock-period 17183557
ntp server 192.43.244.18
ntp server 207.46.232.182
end

> Еще proxy-arp отключите, циска иногда любит отвечать на не предназначенные ей arp
> запросы
> interface FastEthernet4
>  no ip proxy-arp

спасибо, отключил