*Jan 20 18:38:14:156 2021 D-EN-ZK-XC-LCB-R1 ARP/7/ARP_SEND: -Slot=2; Sent an ARP message, operation: 1, sender MAC: 6893-2075-cc34, sender IP: 41.167.199.126, target MAC: 0000-0000-0000, target IP: 41.167.199.126. *Jan 20 18:38:14:156 2021 D-EN-ZK-XC-LCB-R1 ARP/7/ARP_SEND: -Slot=2; Sent an ARP message, operation: 1, sender MAC: 6893-2075-cc34, sender IP: 41.167.199.126, target MAC: 0000-0000-0000, target IP: 41.167.199.126.
MSR 5660 端口GigabitEthernet2/0/0.10 直连华为交换机GigabitEthernet0/0/24
MSR 5660版本version 7.1.064, Release 0707P16,
ip vpn-instance vpn-rt
route-distinguisher 24126:1
vpn-target 24126:100 import-extcommunity
vpn-target 24126:100 export-extcommunity
interface GigabitEthernet2/0/0.10
description vpn-rt
ip binding vpn-instance vpn-rt
ip address 41.167.199.126 255.255.255.128
qos apply policy rt inbound
vlan-type dot1q vid 10
dis ip inter brief
*down: administratively down
(s): spoofing (l): loopback
Interface Physical Protocol IP Address Description
GE2/0/0 up up -- --
GE2/0/0.10 up up 41.167.199.126 vpn-rt
GE2/0/1 down down -- --
GE2/0/1.20 down down vpn-nrt
GE2/0/2 up up -- --
GE2/0/3 down down -- --
GE2/0/4 down down -- --
GE2/0/5 down down -- --
GE2/0/6 down down -- --
GE2/0/7 down down -- --
GE2/0/8 down down -- --
GE2/0/9 down down -- --
Loop0 up up(s) --
MGE0 down down -- --
Ser2/2/0 down down description XC...
Ser2/2/1 down down -- --
Ser2/3/0 down down --
Ser2/3/1 down down -- --
XGE2/0/10 down down -- --
XGE2/0/11 down down -- --
交换机配置VLAN 三层vlan配置地址,物理接口配置trunk,允许所有vlan通过。
(0)
最佳答案
您好,请知:
由于有vpn实例,因此需确认下接口、路由、QOS、ACL等是否已绑定了VPN实例,如果没绑定,是没有回包的,因为已经被VPN给拦截。
(0)
traffic classifier e operator and if-match any # traffic classifier nrt operator and if-match any # traffic classifier out operator and if-match any # traffic classifier rt operator and if-match any # traffic behavior e remark ip-precedence 2 # traffic behavior nrt remark ip-precedence 3 # traffic behavior rt remark ip-precedence 4 # qos policy e classifier e behavior e # qos policy nrt classifier nrt behavior nrt # qos policy out classifier rt behavior rt classifier nrt behavior nrt classifier e behavior e # qos policy rt classifier rt behavior rt
看发的debug是只有send没有回应,可以华为交换机上看下是否有收到arp报文。
(0)
IP ADDRESS MAC ADDRESS EXPIRE(M) TYPE INTERFACE VPN-INSTANCE VLAN ------------------------------------------------------------------------------ 41.167.199.253 b008-7536-9946 I - Vlanif20 41.167.199.252 000e-c659-2de9 14 D-0 GE0/0/4 20 41.167.199.254 Incomplete 1 D-0 GE0/0/24 20 ------------------------------------------------------------------------------ Total:3 Dynamic:2 Static:0 Interface:1 这是另外一台华为交换机,上联也是咱们的路由器,都是子接口不同的vid,是能看到ARP的....
IP ADDRESS MAC ADDRESS EXPIRE(M) TYPE INTERFACE VPN-INSTANCE VLAN ------------------------------------------------------------------------------ 41.167.199.253 b008-7536-9946 I - Vlanif20 41.167.199.252 000e-c659-2de9 14 D-0 GE0/0/4 20 41.167.199.254 Incomplete 1 D-0 GE0/0/24 20 ------------------------------------------------------------------------------ Total:3 Dynamic:2 Static:0 Interface:1 这是另外一台华为交换机,上联也是咱们的路由器,都是子接口不同的vid,是能看到ARP的....
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
traffic classifier e operator and if-match any # traffic classifier nrt operator and if-match any # traffic classifier out operator and if-match any # traffic classifier rt operator and if-match any # traffic behavior e remark ip-precedence 2 # traffic behavior nrt remark ip-precedence 3 # traffic behavior rt remark ip-precedence 4 # qos policy e classifier e behavior e # qos policy nrt classifier nrt behavior nrt # qos policy out classifier rt behavior rt classifier nrt behavior nrt classifier e behavior e # qos policy rt classifier rt behavior rt