*Jul 18 11:27:23:483 2023 DCN-FW IPFW/7/IPFW_PACKET: -COntext=4; Receiving, interface = Ten-GigabitEthernet1/3/0/3 version = 4, headlen = 20, tos = 0 pktlen = 442, pktid = 18004, offset = 0, ttl = 59, protocol = 17 checksum = 23427, s = 134.230.21.3, d = 134.224.185.146 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Receiving IP packet from interface Ten-GigabitEthernet1/3/0/3. Payload: UDP source port = 161, destination port = 58324 checksum = 0x7da8, length = 422. *Jul 18 11:27:23:483 2023 DCN-FW NAT/7/COMMON: -COntext=4; PACKET: (Ten-GigabitEthernet1/3/0/3-in-session) Protocol: UDP 134.230.21.3: 161 - 134.224.185.146:58324(VPN: 0) ------> 134.230.21.3: 161 - 172.169.65.99:58324(VPN: 0) *Jul 18 11:27:23:483 2023 DCN-FW IPFW/7/IPFW_PACKET: -COntext=4; Sending, interface = Route-Aggregation12.166 version = 4, headlen = 20, tos = 0 pktlen = 442, pktid = 18004, offset = 0, ttl = 58, protocol = 17 checksum = 44777, s = 134.230.21.3, d = 172.169.65.99 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Sending IP packet received from interface Ten-GigabitEthernet1/3/0/3 at interface Route-Aggregation12.166. Payload: UDP source port = 161, destination port = 58324 checksum = 0xd00e, length = 422.
报文上到了防火墙,但是没有匹配到安全策略并创建会话信息,这是啥问题,安全策略里面有这个源目地址
(0)
最佳答案
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
上面就是debugging的内容,没有发现匹配到安全策略,即没有拒绝也没有允许
接口下是不是配置了mang ping inbound之类的