在核心交换机上做了v6的地址池,分给vlan24下的设备,服务器接近vlan24后可以正常获取地址,核心与poe交换机通过链路聚合相连,poe又接了胖ap,发现ap发出信号后,笔记本连上可以得到来自核心的地址;但是ping不通核心的vlan24网关,也不能ping通服务器
H3C WX3010E 胖AP 从上联交换获取到ipv6地址后ping不通网关2001:1003:1005::1,也不能与2001:1003:1005::/64网段的其他服务器(centos)通信
胖ap的配置是:
[WA4620i-ACN]dis current-configuration
#
version 5.20, Release 1508P03
#
sysname WA4620i-ACN
#
domain default enable system
#
ipv6
#
telnet server enable
#
port-security enable
#
password-recovery enable
#
undo attack-defense tcp fragment enable
#
vlan 1
#
vlan 24
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
dhcp server ip-pool ipv6pool
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$T/chYu8DJsOyL/UmqAmYUwYBLBZR7dkqduuS2vI=
authorization-attribute level 3
service-type telnet
service-type web
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
#
wlan service-template 1 clear
ssid service1
#
wlan service-template 2 crypto
ssid h3c-ipv6
cipher-suite tkip
cipher-suite ccmp
security-ie rsn
security-ie wpa
gtk-rekey client-offline enable
fast-association enable
service-template enable
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.0.50 255.255.255.0
#
interface Vlan-interface24
undo ipv6 nd ra halt
ipv6 address dhcp-alloc
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet1/0/2
description ith
port link-type trunk
port trunk permit vlan all
#
interface WLAN-BSS1
port access vlan 24
#
interface WLAN-BSS32
port link-type hybrid
port hybrid vlan 1 untagged
port hybrid pvid vlan 24
qos trust dot11e
#
interface WLAN-BSS33
port link-type hybrid
port hybrid vlan 1 untagged
port hybrid pvid vlan 24
qos trust dot11e
#
interface WLAN-BSS34
port link-type hybrid
port hybrid vlan 1 24 untagged
port hybrid pvid vlan 24
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher $c$3$U9akTY5hNJaFoniK8X+VWsmnSYdq5NpG1RshgA==
#
interface WLAN-BSS35
port link-type hybrid
port hybrid vlan 1 untagged
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher $c$3$U9akTY5hNJaFoniK8X+VWsmnSYdq5NpG1RshgA==
#
interface WLAN-Radio1/0/1
service-template 2 interface wlan-bss 34
#
interface WLAN-Radio1/0/2
radio-type dot11g
channel 6
service-template 1 interface wlan-bss 33
#
undo info-center enable
#
dhcp enable
#
arp-snooping enable
#
load xml-configuration
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
#
return
[WA4620i-ACN]
拓扑图如上;有清楚的小伙伴吗 求告知,谢谢~
(0)
胖ap,默认终端隔离,undo wlan-client-isolation enable
(1)
我试试 谢谢
删除这个arp-snooping enable
如果不行可以尝试电脑替换ap测试,如果电脑可以的话,可以将ap恢复出厂再试试看
(0)
搞错了 电脑的IPv6地址是我手动配置的。。那就是说ap还没得到核心的地址,没有分配出去地址给笔记本,请问ap需要怎么调呢
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明