交换机下联的傻瓜交换机掉包
- 0关注
- 0收藏，372浏览
问题描述：
设备为S5130
DEVICE_NAME : S5130-28S-EI
DEVICE_SERIAL_NUMBER : 210235A1C9H165000803
MAC_ADDRESS : 8CE6-6667-6225
MANUFACTURING_DATE : 2016-05-18
VENDOR_NAME : H3C
问题：AP分配的ip地址，ping 从华为S2100交换机获得的地址大量掉包，不知道原因。
组网及组网描述：
拓扑结构
华为ap-华为ac-（23口）华三S5130（上连）-外网核心交换机-出口防火墙
华为S2100(无配置，当傻瓜交换机使用)-(21口)华三S5130（上连）-外网核心交换机-出口防火墙
华三配置：
[H3C]dis ip routing-table
Destinations : 29 Routes : 29
Destination/Mask Proto Pre Cost NextHop Interface
0.0.0.0/0 Static 60 0 192.168.1.1 Vlan100
0.0.0.0/32 Direct 0 0 127.0.0.1 InLoop0
127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0
127.0.0.0/32 Direct 0 0 127.0.0.1 InLoop0
127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0
127.255.255.255/32 Direct 0 0 127.0.0.1 InLoop0
172.16.0.0/24 Static 60 0 192.168.200.2 Vlan200
172.16.2.0/24 Static 60 0 192.168.200.2 Vlan200
172.16.3.0/24 Static 60 0 192.168.200.2 Vlan200
192.168.0.0/24 Direct 0 0 192.168.0.254 Vlan9
192.168.0.0/32 Direct 0 0 192.168.0.254 Vlan9
192.168.0.254/32 Direct 0 0 127.0.0.1 InLoop0
192.168.0.255/32 Direct 0 0 192.168.0.254 Vlan9
192.168.1.0/24 Direct 0 0 192.168.1.2 Vlan100
192.168.1.0/32 Direct 0 0 192.168.1.2 Vlan100
192.168.1.2/32 Direct 0 0 127.0.0.1 InLoop0
192.168.1.255/32 Direct 0 0 192.168.1.2 Vlan100
192.168.10.0/24 Static 60 0 192.168.200.2 Vlan200
192.168.200.0/30 Direct 0 0 192.168.200.1 Vlan200
192.168.200.0/32 Direct 0 0 192.168.200.1 Vlan200
192.168.200.1/32 Direct 0 0 127.0.0.1 InLoop0
192.168.200.3/32 Direct 0 0 192.168.200.1 Vlan200
192.168.253.0/24 Direct 0 0 192.168.253.254 Vlan4000
192.168.253.0/32 Direct 0 0 192.168.253.254 Vlan4000
192.168.253.254/32 Direct 0 0 127.0.0.1 InLoop0
192.168.253.255/32 Direct 0 0 192.168.253.254 Vlan4000
224.0.0.0/4 Direct 0 0 0.0.0.0 NULL0
224.0.0.0/24 Direct 0 0 0.0.0.0 NULL0
255.255.255.255/32 Direct 0 0 127.0.0.1 InLoop0
[H3C] dis cu
#
version 7.1.045, Release 3109P09
#
sysname H3C
#
telnet server enable
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
#
dhcp enable
#
lldp global enable
#
password-recovery enable
#
vlan 1
#
vlan 4
description yewu
#
vlan 9
#
vlan 100
description TO-hexin
#
vlan 200
description TO-ac
#
vlan 4000
#
stp global enable
#
dhcp server ip-pool client
gateway-list 192.168.0.254
network 192.168.0.0 mask 255.255.255.0
address range 192.168.0.1 192.168.0.245
dns-list 221.13.65.34 8.8.8.8
#
interface NULL0
#
interface Vlan-interface9
ip address 192.168.0.254 255.255.255.0
dhcp server apply ip-pool client
#
interface Vlan-interface100
ip address 192.168.1.2 255.255.255.0
#
interface Vlan-interface200
ip address 192.168.200.1 255.255.255.252
#
interface Vlan-interface4000
ip address 192.168.253.254 255.255.255.0
#
interface GigabitEthernet1/0/1
port access vlan 4
#
interface GigabitEthernet1/0/2
port access vlan 4
#
interface GigabitEthernet1/0/3
port access vlan 4
#
interface GigabitEthernet1/0/4
port access vlan 4
#
interface GigabitEthernet1/0/5
port access vlan 4
#
interface GigabitEthernet1/0/6
port access vlan 4
#
interface GigabitEthernet1/0/7
port access vlan 4
#
interface GigabitEthernet1/0/8
port access vlan 4
#
interface GigabitEthernet1/0/9
#
interface GigabitEthernet1/0/10
#
interface GigabitEthernet1/0/11
#
interface GigabitEthernet1/0/12
#
interface GigabitEthernet1/0/13
#
interface GigabitEthernet1/0/14
#
interface GigabitEthernet1/0/15
#
interface GigabitEthernet1/0/16
#
interface GigabitEthernet1/0/17
#
interface GigabitEthernet1/0/18
#
interface GigabitEthernet1/0/19
#
interface GigabitEthernet1/0/20
#
interface GigabitEthernet1/0/21
port access vlan 9
#
interface GigabitEthernet1/0/22
#
interface GigabitEthernet1/0/23
port access vlan 200
#
interface GigabitEthernet1/0/24
port link-type trunk
port trunk permit vlan all
#
interface Ten-GigabitEthernet1/0/25
#
interface Ten-GigabitEthernet1/0/26
#
interface Ten-GigabitEthernet1/0/27
#
interface Ten-GigabitEthernet1/0/28
#
scheduler logfile size 16
#
line class aux
user-role network-admin
#
line class vty
user-role network-operator
#
line aux 0
authentication-mode password
user-role level-15
user-role network-admin
#
line vty 0 4
authentication-mode scheme
user-role level-15
user-role network-admin
user-role network-operator
#
line vty 5 63
user-role network-operator
#
ip route-static 0.0.0.0 0 192.168.1.1
ip route-static 172.16.0.0 24 192.168.200.2
ip route-static 172.16.2.0 24 192.168.200.2
ip route-static 172.16.3.0 24 192.168.200.2
ip route-static 192.168.10.0 24 192.168.200.2
#
radius scheme system
user-name-format without-domain
#
domain system
#
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name level-1
description Predefined level-1 role
#
role name level-2
description Predefined level-2 role
#
role name level-3
description Predefined level-3 role
#
role name level-4
description Predefined level-4 role
#
role name level-5
description Predefined level-5 role
#
role name level-6
description Predefined level-6 role
#
role name level-7
description Predefined level-7 role
#
role name level-8
description Predefined level-8 role
#
role name level-9
description Predefined level-9 role
#
role name level-10
description Predefined level-10 role
#
role name level-11
description Predefined level-11 role
#
role name level-12
description Predefined level-12 role
#
role name level-13
description Predefined level-13 role
#
role name level-14
description Predefined level-14 role
#
user-group system
#
local-user admin class manage
password hash $h$6$Bd4qf7a8AItOcUDu$2mWoPIxtiTEY2gyGP42wZY4llcxmJDbFrGdDj+zAKgwHuySLJ+2MsmWA2p8NC+W6xvo1Y62VfkC2nzE8mVxbnQ==
service-type ssh telnet http https
authorization-attribute user-role network-operator
#
return
- 2024-09-04提问
- 举报
-
(0)
最佳答案
测试下有线丢包吗
- 2024-09-04回答
- 评论(1)
- 举报
-
(0)
从华为ac ping 一样掉包 ，如果同网段就不掉包
从华为ac ping 一样掉包 ，如果同网段就不掉包
看链路是不是拥塞，接口下是不是有错包，做流统定位丢包位置
- 2024-09-04回答
- 评论(2)
- 举报
-
(0)
这个是华为AC 的 上连口 统计的流量，华三的S5130上面我创了一个VLAN9，DHCP下发，下连的 华为S2100当傻瓜用，可以获取地址 可以上网，就是ACping会掉包
GigabitEthernet0/0/7 current state : DOWN Line protocol current state : DOWN Description:HUAWEI, AC Series, GigabitEthernet0/0/7 Interface Switch Port, PVID : 10, TPID : 8100(Hex), The Maximum Frame Length is 9216 IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is f898-ef6c-7103 Last physical up time : - Last physical down time : 2024-09-01 09:52:26 Current system time: 2024-09-04 02:52:21 Port Mode: COMBO AUTO Current Work Mode: COPPER Speed : 1000, Loopback: NONE Duplex: FULL, Negotiation: ENABLE Mdi : AUTO Last 300 seconds input rate 0 bits/sec, 0 packets/sec Last 300 seconds output rate 0 bits/sec, 0 packets/sec Input peak rate 0 bits/sec,Record time: - Output peak rate 0 bits/sec,Record time: - Input: 0 packets, 0 bytes Unicast: 0, Multicast: 0 Broadcast: 0, Jumbo: 0 Discard: 0, Total Error: 0 CRC: 0, Giants: 0 Jabbers: 0, Throttles: 0 Runts: 0 Output: 0 packets, 0 bytes Unicast: 0, Multicast: 0 Broadcast: 0, Jumbo: 0 Discard: 0, Total Error: 0 Collisions: 0, ExcessiveCollisions: 0 Deferreds: 0 Input bandwidth utilization threshold : 100.00% Output bandwidth utilization threshold: 100.00% Input bandwidth utilization : 0% Output bandwidth utilization : 0% [AC6005]dis interface gi 0/0/8 GigabitEthernet0/0/8 current state : UP Line protocol current state : UP Description:HUAWEI, AC Series, GigabitEthernet0/0/8 Interface Switch Port, PVID : 200, TPID : 8100(Hex), The Maximum Frame Length is 9216 IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is f898-ef6c-7103 Last physical up time : 2024-09-01 09:52:53 Last physical down time : 2024-09-01 09:52:26 Current system time: 2024-09-04 02:53:13 Port Mode: COMBO AUTO Current Work Mode: COPPER Speed : 1000, Loopback: NONE Duplex: FULL, Negotiation: ENABLE Mdi : AUTO Last 300 seconds input rate 5881976 bits/sec, 733 packets/sec Last 300 seconds output rate 8439408 bits/sec, 1231 packets/sec Input peak rate 126747992 bits/sec,Record time: 2024-09-03 07:31:18 Output peak rate 98676160 bits/sec,Record time: 2024-09-03 02:27:49 Input: 35919433 packets, 38662816288 bytes Unicast: 35794585, Multicast: 124824 Broadcast: 24, Jumbo: 0 Discard: 0, Total Error: 0 CRC: 0, Giants: 0 Jabbers: 0, Throttles: 0 Runts: 0 Output: 43778102 packets, 32695247183 bytes Unicast: 43770298, Multicast: 7802 Broadcast: 2, Jumbo: 0 Discard: 0, Total Error: 0 Collisions: 0, ExcessiveCollisions: 0 Deferreds: 0 Input bandwidth utilization threshold : 100.00% Output bandwidth utilization threshold: 100.00% Input bandwidth utilization : 0.85% Output bandwidth utilization : 0.06%
这个是华为AC 的 上连口 统计的流量，华三的S5130上面我创了一个VLAN9，DHCP下发，下连的 华为S2100当傻瓜用，可以获取地址 可以上网，就是ACping会掉包
先排查一下内网看看吧
AP-AC（是否有丢包？）
AC-核心
有线没问题的话 就是无线需要进行优化了
信道 频段这些 发射功率和天线调整等等
- 2024-09-04回答
- 评论(9)
- 举报
-
(0)
你掉了 哥们
AP发射的wifi信号正常上网，获取的wifi ping会掉包，ac ping 也会掉包 如果ping 192.168.0.254 （此ip在华三交换机上，用来做悠闲网络的网关，下连S2100当傻瓜交换机使用） 192.168.0.249（打印机ip） 这个ip就掉包了 80%
有线环境下 也掉包？
S2100 ping 你的上联呢 是否掉包？
C:\Users\77414>tracert 192.168.0.249 通过最多 30 个跃点跟踪 到 bogon [192.168.0.249] 的路由: 1 3 ms 3 ms 3 ms bogon [172.16.3.254] AC地址 2 * * * 请求超时。 应该过一个 192.168.0.254 （华三交换机） 3 * * * 请求超时。 4 * * 4 ms bogon [192.168.0.249] 打印机地址 跟踪完成。
怎么我感觉线是你的vlan 或者路由没互通呀 内网环境都到不了 外网正常 就是内网问题了 有远程的话 可以协助你看一下
你掉了 哥们
编辑答案
亲~登录后才可以操作哦!
确定你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
- 1. 您举报的内容是什么？（请在邮件中列出您举报的内容和链接地址）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
- 3. 是哪家企业？（营业执照，单位登记证明等证件）
- 4. 您与该企业的关系是？（您是企业法人或被授权人，需提供企业委托授权书）
抄袭了我的内容
×
原文链接或出处
诽谤我
×
- 1. 您举报的内容以及侵犯了您什么权益？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
对根叔社区有害的内容
×
不规范转载
×
举报说明