S5024PV2-EI VLAN互访

我将防火墙关闭后可以ping通，但是为什么我在防火墙打开的状态时将两台PC的ip改为同一网段，放在同一个VLAN下时也是可以ping通的？

这个跟交换机是否是同一VLAN没有关系的，防火墙开启后默认是禁用PING的

那为什么我开着防火墙把更改为两台PC同一网段后可以ping同呢？

可以

网关通，应该就没问题了，三层设备起了网关，自然vlan间路由是互通的。你可以dis cu 粘贴下所有配置，我帮你看看哪里有问题。

<H3C>dis cu # version 5.20.99, Release 1111 # sysname H3C # domain default enable system # ipv6 # telnet server enable # port-group-vlan 1 # password-recovery enable # vlan 1 # vlan 100 # vlan 200 # domain system access-limit disable state active idle-cut disable self-service-url disable # user-group system group-attribute allow-guest # local-user admin password cipher $c$3$EkhzOhFEh59+WPOOlD32QaWsr0DwDZyU authorization-attribute level 3 service-type telnet service-type web # interface NULL0 # interface Vlan-interface1 ip address 192.168.0.233 255.255.255.0 # interface Vlan-interface100 ip address 192.168.100.233 255.255.255.0 # interface Vlan-interface200 ip address 192.168.200.233 255.255.255.0 # interface GigabitEthernet1/0/1 # interface GigabitEthernet1/0/2 # interface GigabitEthernet1/0/3 # interface GigabitEthernet1/0/4 # interface GigabitEthernet1/0/5 # interface GigabitEthernet1/0/6 # interface GigabitEthernet1/0/7 # interface GigabitEthernet1/0/8 # interface GigabitEthernet1/0/9 # interface GigabitEthernet1/0/10 # interface GigabitEthernet1/0/11 # interface GigabitEthernet1/0/12 # interface GigabitEthernet1/0/13 # interface GigabitEthernet1/0/14 # interface GigabitEthernet1/0/15 # interface GigabitEthernet1/0/16 # interface GigabitEthernet1/0/17 port access vlan 100 # interface GigabitEthernet1/0/18 port access vlan 100 # interface GigabitEthernet1/0/19 port access vlan 100 # interface GigabitEthernet1/0/20 port access vlan 100 # interface GigabitEthernet1/0/21 port access vlan 200 # interface GigabitEthernet1/0/22 port access vlan 200 # interface GigabitEthernet1/0/23 port access vlan 200 # interface GigabitEthernet1/0/24 port access vlan 200 # interface GigabitEthernet1/0/25 # interface GigabitEthernet1/0/26 # interface GigabitEthernet1/0/27 # interface GigabitEthernet1/0/28 # undo info-center logfile enable # load xml-configuration # user-interface aux 0 user-interface vty 0 15 authentication-mode scheme # return

然后你的两个pc接的是哪两个接口

17（192.168.100.100）和23（192.168.200.200）

如此看来，你的配置没有问题。

恩，谢谢