使用HCL做实验,发现路由器对内网的交换机的telnet服务进行映射后,其他设备无法telnet成功。
R1配置:
interface GigabitEthernet0/1
port link-mode route
combo enable copper
ip address 100.1.1.1 255.255.255.0
nat outbound 2100 nat server protocol tcp global 100.1.1.100 23 inside 10.1.1.100 23
R1测试内网服务器:
<R1>ping 10.1.1.100
Ping 10.1.1.100 (10.1.1.100): 56 data bytes, press CTRL_C to break
56 bytes from 10.1.1.100: icmp_seq=0 ttl=253 time=4.000 ms
56 bytes from 10.1.1.100: icmp_seq=1 ttl=253 time=4.000 ms
56 bytes from 10.1.1.100: icmp_seq=2 ttl=253 time=3.000 ms
56 bytes from 10.1.1.100: icmp_seq=3 ttl=253 time=4.000 ms
56 bytes from 10.1.1.100: icmp_seq=4 ttl=253 time=3.000 ms
--- Ping statistics for 10.1.1.100 --- 5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss
round-trip min/avg/max/std-dev = 3.000/3.600/4.000/0.490 ms
%Mar 4 15:59:46:312 2019 R1 PING/6/PING_STATISTICS: Ping statistics for 10.1.1.100: 5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss, round-trip min/avg/max/std-dev = 3.000/3.600/4.000/0.490 ms.
<R1> telnet 10.1.1.100
Trying 10.1.1.100 ...
Press CTRL+K to abort
Connected to 10.1.1.100 ...
******************************************************************************
* Copyright (c) 2004-2017 New H3C Technologies Co., Ltd. All rights reserved.*
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************
login:
R3测试内网服务器:
<R3>telnet 100.1.1.100
Trying 100.1.1.100 ...
Press CTRL+K to abort
Connected to 100.1.1.100 ...
Failed to connect to the remote host!
(0)
我猜,你内网那台路由器(telnet server)没有配置默认路由给R1
(0)
内网路由器的路由情况: <S3>dis ip routing-table Destinations : 20 Routes : 20 Destination/Mask Proto Pre Cost NextHop Interface 0.0.0.0/0 Static 60 0 192.168.0.254 Vlan10 0.0.0.0/32 Direct 0 0 127.0.0.1 InLoop0 10.0.0.0/8 Static 60 0 10.1.0.254 Vlan20
写了默认路由了
你这个组网什么样的?服务器没有直接连接到R1上吗?我看服务器下一跳是192.168.0.254,这样吧,你在R1上ping -a 100.1.1.1 10.1.1.100,这样能通吗?如果不行的话,说明内网的某个三层网络设备没有配置到外网的路由
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
你这个组网什么样的?服务器没有直接连接到R1上吗?我看服务器下一跳是192.168.0.254,这样吧,你在R1上ping -a 100.1.1.1 10.1.1.100,这样能通吗?如果不行的话,说明内网的某个三层网络设备没有配置到外网的路由