一台WX3010E,8口
交换部分和AC控制部分现状如下:
<POE_switch_200.252>tracert 211.97.142.108
traceroute to 211.97.142.108(211.97.142.108) 30 hops max,40 bytes packet, press CTRL_C to break
1 192.168.1.1 9 ms 3 ms 2 ms
2 220.250.60.1 4 ms 3 ms 4 ms
3 218.106.149.213 5 ms 4 ms 15 ms
4 218.104.229.37 22 ms 218.104.227.5 22 ms 218.104.227.9 85 ms
5 58.23.0.198 9 ms 11 ms 218.107.221.130 15 ms
6 218.107.221.46 14 ms 10 ms 11 ms
7 * * *
8 *
<POE_switch_200.252>ping 211.97.142.108 /////////////外网主机
PING 211.97.142.108: 56 data bytes, press CTRL_C to break
Reply from 211.97.142.108: bytes=56 Sequence=1 ttl=58 time=11 ms
Reply from 211.97.142.108: bytes=56 Sequence=2 ttl=58 time=10 ms
Reply from 211.97.142.108: bytes=56 Sequence=3 ttl=58 time=11 ms
Reply from 211.97.142.108: bytes=56 Sequence=4 ttl=58 time=11 ms
Reply from 211.97.142.108: bytes=56 Sequence=5 ttl=58 time=10 ms
--- 211.97.142.108 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 10/10/11 ms
<POE_switch_200.252>
<POE_switch_200.252>display ip routing-table
Routing Tables: Public
Destinations : 9 Routes : 9
Destination/Mask Proto Pre Cost NextHop Interface
0.0.0.0/0 Static 60 0 192.168.1.1 Vlan11
127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0
127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0
192.168.0.0/16 Static 60 0 192.168.200.254 Vlan1
192.168.1.0/24 Direct 0 0 192.168.1.6 Vlan11
192.168.1.6/32 Direct 0 0 127.0.0.1 InLoop0
192.168.199.0/24 Static 60 0 192.168.200.254 Vlan1
192.168.200.0/24 Direct 0 0 192.168.200.252 Vlan1
192.168.200.252/32 Direct 0 0 127.0.0.1 InLoop0
<POE_switch_200.252>
<POE_switch_200.252>dis vlan all
VLAN ID: 1
VLAN Type: static
Route Interface: configured
IP Address: 192.168.200.252
Subnet Mask: 255.255.255.0
Description: VLAN 0001
Name: VLAN 0001
Tagged Ports: none
Untagged Ports:
Bridge-Aggregation1
GigabitEthernet1/0/1 GigabitEthernet1/0/2 GigabitEthernet1/0/3
GigabitEthernet1/0/4 GigabitEthernet1/0/5 GigabitEthernet1/0/6
GigabitEthernet1/0/7 GigabitEthernet1/0/9 GigabitEthernet1/0/10
GigabitEthernet1/0/11 GigabitEthernet1/0/12
VLAN ID: 10
VLAN Type: static
Route Interface: not configured
Description: VLAN 0010
Name: VLAN 0010
Tagged Ports:
Bridge-Aggregation1
GigabitEthernet1/0/8 GigabitEthernet1/0/11 GigabitEthernet1/0/12
Untagged Ports: none
VLAN ID: 11
VLAN Type: static
Route Interface: configured
IP Address: 192.168.1.6
Subnet Mask: 255.255.255.0
Description: VLAN 0011
Name: VLAN 0011
Tagged Ports: none
Untagged Ports:
GigabitEthernet1/0/8
<POE_switch_200.252>
****************************** 以上是 交换部分现状 ***************************************
<H3C_AC254>display ip routing-table
Routing Tables: Public
Destinations : 6 Routes : 6
Destination/Mask Proto Pre Cost NextHop Interface
127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0
127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0
192.168.199.0/24 Direct 0 0 192.168.199.254 Vlan10
192.168.199.254/32 Direct 0 0 127.0.0.1 InLoop0
192.168.200.0/24 Direct 0 0 192.168.200.254 Vlan1
192.168.200.254/32 Direct 0 0 127.0.0.1 InLoop0
<H3C_AC254>ping 211.97.142.108
PING 211.97.142.108: 56 data bytes, press CTRL_C to break
Request time out
Request time out
Request time out
Request time out
Request time out
--- 211.97.142.108 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss
<H3C_AC254>tracert 211.97.142.108
traceroute to 211.97.142.108(211.97.142.108) 30 hops max,40 bytes packet, press CTRL_C to break
1 * * *
2 * * *
3 * * *
4 * * *
5 * * *
6 * * *
7 * * *
8 * * *
9
<H3C_AC254>
<H3C_AC254>dis vlan all
VLAN ID: 1
VLAN Type: static
Route Interface: configured
IPv4 address: 192.168.200.254
IPv4 subnet mask: 255.255.255.0
Description: VLAN 0001
Name: VLAN 0001
Tagged Ports: none
Untagged Ports:
Bridge-Aggregation1
GigabitEthernet1/0/1 GigabitEthernet1/0/2
VLAN ID: 10
VLAN Type: static
Route Interface: configured
IPv4 address: 192.168.199.254
IPv4 subnet mask: 255.255.255.0
Description: VLAN 0010
Name: VLAN 0010
Tagged Ports:
Bridge-Aggregation1
GigabitEthernet1/0/1 GigabitEthernet1/0/2
Untagged Ports:
WLAN-ESS0
WLAN-DBSS0:0 WLAN-DBSS0:1
WLAN-ESS1
<H3C_AC254>
<H3C_AC254>dis ver
H3C Comware Platform Software
Comware Software, Version 5.20, Release 3509P58
Copyright (c) 2004-2016 Hangzhou H3C Tech. Co., Ltd. All rights reserved.
H3C WX3010E uptime is 0 week, 0 day, 7 hours, 44 minutes
H3C WX3010E with 1 RMI XLS 208 750MHz Processor
512M bytes DDR2
16M bytes Flash Memory
999M bytes CFCard Memory
Hardware Version is Ver.C
CPLD Version is 004
Basic Bootrom Version is 2.03
Extend Bootrom Version is 2.03
[Slot 0]WX3010ELSW Hardware Version is NA
[Slot 1]WX3010ERPU Hardware Version is Ver.C
****************************** 以上是 AC控制器部分现状 ***************************************
目前交换部分在第8口接上网线连上一级路由器,交换部分可Ping通互联网上的主机
AC部分不能Ping通互联网上的主机
连在1-7口的PC上不了互联网(192.168.200.xxx)
请问如何实现连到AC控制器的终端、主机都能上互联网,如果有具体指令最好
<H3C_AC254>dis cur
#
version 5.20, Release 3509P58
#
sysname H3C_AC254
#
domain default enable system
#
telnet server enable
#
port-security enable
#
oap management-ip 192.168.200.254 slot 0
#
wlan auto-ap enable
wlan auto-persistent enable
#
password-recovery enable
#
vlan 1
#
vlan 10
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
dhcp server ip-pool ap
network 192.168.200.0 mask 255.255.255.0
#
dhcp server ip-pool client
network 192.168.199.0 mask 255.255.255.0
gateway-list 192.168.199.254
dns-list 8.8.8.8
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$5thOGCmEj3a1X9VYzVd/0+LqpO39/w==
authorization-attribute level 3
service-type telnet
service-type web
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
#
wlan service-template 1 crypto
ssid cyc_601_5G
bind WLAN-ESS 1
client max-count 20
cipher-suite tkip
security-ie rsn
service-template enable
#
wlan service-template 2 crypto
ssid cyc_601_2.4G
bind WLAN-ESS 0
client max-count 8
cipher-suite tkip
security-ie rsn
service-template enable
#
wlan ap-group default_group
ap c4ca-d9e5-5520
ap c4ca-d9e5-8e30
#
interface Bridge-Aggregation1
port link-type trunk
port trunk permit vlan 1 10
arp detection trust
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.200.254 255.255.255.0
#
interface Vlan-interface10
ip address 192.168.199.254 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan 1 10
port link-aggregation group 1
#
interface GigabitEthernet1/0/2
port link-type trunk
port trunk permit vlan 1 10
port link-aggregation group 1
#
interface WLAN-ESS0
port access vlan 10
port-security max-mac-count 40
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher $c$3$tZ62Np0sWSGTc3gl+IG8p3oTipbGWeoWz/GT
#
interface WLAN-ESS1
port access vlan 10
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher $c$3$IeycQXXywcO4IrJbWTUD6bV5oWohuSCOWAR9
#
wlan ap c4ca-d9e5-5520 model WA2612-AGN id 2
serial-id 210236A0ALC11C060345
radio 1
service-template 2
radio enable
#
wlan ap c4ca-d9e5-8e30 model WA2612-AGN id 1
serial-id 213335A0ALC11C002341
radio 1
service-template 2
radio enable
#
wlan ips
malformed-detect-policy default
signature deauth_flood signature-id 1
signature broadcast_deauth_flood signature-id 2
signature disassoc_flood signature-id 3
signature broadcast_disassoc_flood signature-id 4
signature eapol_logoff_flood signature-id 5
signature eap_success_flood signature-id 6
signature eap_failure_flood signature-id 7
signature pspoll_flood signature-id 8
signature cts_flood signature-id 9
signature rts_flood signature-id 10
signature addba_req_flood signature-id 11
signature-policy default
countermeasure-policy default
attack-detect-policy default
virtual-security-domain default
attack-detect-policy default
malformed-detect-policy default
signature-policy default
countermeasure-policy default
#
ip route-static 0.0.0.0 0.0.0.0 192.168.1.1
ip route-static 192.0.0.0 255.0.0.0 192.168.1.1
ip route-static 192.168.199.0 255.255.255.0 192.168.200.252
#
dhcp server forbidden-ip 192.168.200.250 192.168.200.254
dhcp server forbidden-ip 192.168.199.250 192.168.199.254
#
dhcp enable
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
#
return
<H3C_AC254> ///////////////////////// AC控制器
(0)
1.交换机部分不能上网:1-7口是属于vlan 1,应该是没有回指路由。8口可以上网时属于vlan 11,而且是使用192.168.1.X。
2.AC不能上网,是你写的默认路由未生效,路由表上就没有任何出去的路由。是缺少到192.168.1.1的路由并且回指路由。
如果想都可以上网,最简单的办法,都划分到vlan 11 ,使用192.168.1.X上网。不过考虑下无线的配置,修改的比较多。
(1)
你交换机和AC直接都不通,路由指向都没有,怎么会通
在不改变现有的架构的方式下,最简单的方法就是,两端创建一个相同的VLAN,并配置IP地址,然后AC上配置默认路由指向交换机的VLAN网关,交换机上配置199.0和200.0的路由并指向AC上VLAN网关
最后,最好不要使用VLAN1
(1)
感谢指点,现在两边都配了vlan99,并加的互指路由,进了一步,交换部分可ping通外网,内网 AC部分可ping通内网,包换192.168.1.6,但ping不通 192.168.1.1(能通应该就能上外网了) <POE_switch_200.252> <POE_switch_200.252>display ip routing-table Routing Tables: Public Destinations : 11 Routes : 11 Destination/Mask Proto Pre Cost NextHop Interface 0.0.0.0/0 Static 60 0 192.168.99.254 Vlan99 127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0 127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0 192.168.0.0/24 Direct 0 0 192.168.0.101 Vlan1 192.168.0.101/32 Direct 0 0 127.0.0.1 InLoop0 192.168.1.0/24 Direct 0 0 192.168.1.6 Vlan11 192.168.1.6/32 Direct 0 0 127.0.0.1 InLoop0 192.168.99.0/24 Direct 0 0 192.168.99.252 Vlan99 192.168.99.252/32 Direct 0 0 127.0.0.1 InLoop0 192.168.200.0/24 Direct 0 0 192.168.200.252 Vlan200 192.168.200.252/32 Direct 0 0 127.0.0.1 InLoop0 <POE_switch_200.252> <H3C_AC254>display ip routing-table Routing Tables: Public Destinations : 11 Routes : 11 Destination/Mask Proto Pre Cost NextHop Interface 0.0.0.0/0 Static 60 0 192.168.99.252 Vlan99 127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0 127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0 192.168.0.0/24 Direct 0 0 192.168.0.100 Vlan1 192.168.0.100/32 Direct 0 0 127.0.0.1 InLoop0 192.168.99.0/24 Direct 0 0 192.168.99.254 Vlan99 192.168.99.254/32 Direct 0 0 127.0.0.1 InLoop0 192.168.199.0/24 Direct 0 0 192.168.199.254 Vlan10 192.168.199.254/32 Direct 0 0 127.0.0.1 InLoop0 192.168.200.0/24 Direct 0 0 192.168.200.254 Vlan200 192.168.200.254/32 Direct 0 0 127.0.0.1 InLoop0 <H3C_AC254>
不知为何,贴过来就没了换行符
交换机上也要写一条默认路由指向192.168.1.1 路由器上写两条199.0和200.0的回程路由,指向192.168.1.6
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明