ER3260G2 + WA4320-ACN-SI VLAN
- 0关注
- 0收藏，740浏览
问题描述：
1、[ WA4320-ACN-SI ] - VLAN10 口无法获得从 [ ER3260G2 ] - VLAN10 - DHCP Server 下发的 IP
2、手动给 [ WA4320-ACN-SI ] - VLAN10 口配置上 IP - 10.65.33.11/24，配置后，尝试通过 10.65.33.0/24 或 10.65.32.0/24 的设备访问 10.65.33.11，均不可达。
当前需要达到的目的是：
[ ER3260G2 ] - VLAN10 与 [ WA4320-ACN-SI ] - VLAN10 连通
组网及组网描述：
设备连接情况
[ ER3260G2 ] - LAN1 <----> [ POE SWITCH ] <----> [ WA4320-ACN-SI ]
ER3260G2 路由器配置信息
1、路由器配置了两个 VLAN，VLAN1 - 10.65.32.1，VLAN10 10.65.33.1
2、两个 VLAN 接口都启用了 DHCP，网段分别为 10.65.32.0/24，10.65.33.0/24
3、路由器的 4 个 LAN 口 VLAN Trunk 均配置为 PVID 1，Allow All VLAN
WA4320-ACN-SI FAT AP 配置信息
1、AP 也配置了两个 VLAN，VLAN1 - 10.65.32.11，VLAN10 - 10.65.33.11
2、AP 网口 VLAN Trunk 配置为 PVID 1，Allow All VLAN
AP 的更多信息如下：
[WA4320]dis int g1/0/1
GigabitEthernet1/0/1 current state: UP
IP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 487a-****-****
Description: GigabitEthernet1/0/1 Interface
Loopback is not set
Media type is twisted pair, promiscuous mode set
1000Mbps-speed mode, full-duplex mode
Link speed type is autonegotiation, link duplex type is autonegotiation
Flow-control is not enabled
The Maximum Frame Length is 1600
Broadcast MAX-ratio: 100%
Unicast MAX-ratio: 100%
Multicast MAX-ratio: 100%
PVID: 1
Port link-type: trunk
VLAN passing : 1(default vlan), 10
VLAN permitted: 1(default vlan), 2-4094
Trunk port encapsulation: IEEE 802.1q
Port priority: 0
Last clearing of counters: Never
Last 300 seconds input: 19 packets/sec 8241 bytes/sec 0%
Last 300 seconds output: 15 packets/sec 3897 bytes/sec 0%
Input (total): 544170 packets, 155073275 bytes
160093 unicasts, 229191 broadcasts, 154886 multicasts, - pauses
Input (normal): 544170 packets, 155073275 bytes
160093 unicasts, 229191 broadcasts, 154886 multicasts, - pauses
Input: 0 input errors, 0 runts, 0 giants, - throttles
0 CRC, 0 frame, 0 overruns, 0 aborts
0 ignored, - parity errors
Output (total): 151990 packets, 32851994 bytes
148368 unicasts, 1229 broadcasts, 2393 multicasts, - pauses
Output (normal): 151990 packets, 32851994 bytes
148368 unicasts, 1229 broadcasts, 2393 multicasts, - pauses
Output: 0 output errors, 0 underruns, 0 buffer failures
0 aborts, 0 deferred, 0 collisions, 0 late collisions
- lost carrier, 0 no carrier
[WA4320]dis int vlan 1
Vlan-interface1 current state: UP
Line protocol current state: UP
Description: Vlan-interface1 Interface
The Maximum Transmit Unit is 1500
Internet Address is 10.65.32.11/24 Primary
IP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 487a-****-****
IPv6 Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 487a-****-****
Last clearing of counters: Never
[WA4320]dis int vlan 10
Vlan-interface100 current state: UP
Line protocol current state: UP
Description: Vlan-interface100 Interface
The Maximum Transmit Unit is 1500
Internet Address is 10.65.33.11/24 Primary
IP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 487a-****-****
IPv6 Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 487a-****-****
Last clearing of counters: Never
[WA4320]dis vlan 1
VLAN ID: 1
VLAN Type: static
Route Interface: configured
IPv4 address: 10.65.32.11
IPv4 subnet mask: 255.255.255.0
Description: VLAN 0001
Name: VLAN 0001
Tagged Ports: none
Untagged Ports:
GigabitEthernet1/0/1
WLAN-BSS32 WLAN-BSS33 WLAN-BSS34
[WA4320]dis vlan 10
VLAN ID: 10
VLAN Type: static
Route Interface: configured
IPv4 address: 10.65.33.11
IPv4 subnet mask: 255.255.255.0
Description: VLAN 0010
Name: VLAN 0010
Tagged Ports:
GigabitEthernet1/0/1
Untagged Ports: none
- 2022-10-31提问
- 举报
-
(0)
交换机互联也配置trunk 允许所有vlan，
- 2022-10-31回答
- 评论(10)
- 举报
-
(0)
交换机是不可网管的 POE 交换机
确实是透传问题，后面找到症结。原来路由器过来的主线是先被接到 Asuswrt-Merlin AP 上，再从 Asuswrt-Merlin AP，到交换机，再到 WA4320 AP，后面把主线挪到交换机，问题解决。感谢您的帮助。
[WA4320]dis int g bri
The brief information of interface(s) under bridge mode:
Link: ADM - administratively down; Stby - standby
Speed or Duplex: (a)/A - auto; H - half; F - full
Type: A - access; T - trunk; H - hybrid
Interface Link Speed Duplex Type PVID Description
GE1/0/1 UP 1G(a) F(a) T 1
[WA4320]dis ip int bri
*down: administratively down
(s): spoofing (l): loopback
Interface Physical Protocol IP Address Description
Vlan1 up up 10.65.32.11 --
Vlan10 up up 10.65.33.11 --
[WA4320]dis cu
#
version 5.20, Release 1509P01
#
sysname WA4320
#
clock timezone Beijing add 08:00:00
#
domain default enable system
#
telnet server enable
#
port-security enable
#
password-recovery enable
#
undo attack-defense tcp fragment enable
#
vlan 1
#
vlan 10
#
domain system
authentication lan-access local
authorization lan-access local
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
group-attribute allow-guest
#
local-user *****
password cipher ****************************
authorization-attribute level 3
service-type telnet
service-type web
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
#
wlan service-template 1 clear
ssid H3C
#
wlan service-template 2 crypto
ssid AP
cipher-suite ccmp
security-ie rsn
key-derivation sha256
service-template enable
#
cwmp
undo cwmp enable
#
interface NULL0
#
interface Vlan-interface1
ip address 10.65.32.11 255.255.255.0
#
interface Vlan-interface10
ip address 10.65.33.11 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
#
interface WLAN-BSS32
#
interface WLAN-BSS33
port link-type hybrid
port hybrid vlan 1 untagged
#
interface WLAN-BSS34
port link-type hybrid
port hybrid vlan 1 untagged
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher ***************************
#
interface WLAN-Radio1/0/1
service-template 2 interface wlan-bss 34
#
interface WLAN-Radio1/0/2
service-template 1 interface wlan-bss 33
#
ntp-service unicast-server 120.25.115.20
ntp-service unicast-server 162.159.200.123
#
arp-snooping enable
#
load xml-configuration
#
load tr069-configuration
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
#
return
- 2022-10-31回答
- 评论(0)
- 举报
-
(0)
编辑答案
亲~登录后才可以操作哦!
确定你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
- 1. 您举报的内容是什么？（请在邮件中列出您举报的内容和链接地址）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
- 3. 是哪家企业？（营业执照，单位登记证明等证件）
- 4. 您与该企业的关系是？（您是企业法人或被授权人，需提供企业委托授权书）
抄袭了我的内容
×
原文链接或出处
诽谤我
×
- 1. 您举报的内容以及侵犯了您什么权益？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
对根叔社区有害的内容
×
不规范转载
×
举报说明
[WA4320]dis int g bri The brief information of interface(s) under bridge mode: Link: ADM - administratively down; Stby - standby Speed or Duplex: (a)/A - auto; H - half; F - full Type: A - access; T - trunk; H - hybrid Interface Link Speed Duplex Type PVID Description GE1/0/1 UP 1G(a) F(a) T 1 [WA4320]dis ip int bri *down: administratively down (s): spoofing (l): loopback Interface Physical Protocol IP Address Description Vlan1 up up 10.65.32.11 -- Vlan10 up up 10.65.33.11 -- [WA4320]dis cu # version 5.20, Release 1509P01 # sysname WA4320 # clock timezone Beijing add 08:00:00 # domain default enable system # telnet server enable # port-security enable # password-recovery enable # undo attack-defense tcp fragment enable # vlan 1 # vlan 10 # domain system authentication lan-access local authorization lan-access local access-limit disable state active idle-cut disable self-service-url disable # user-group system group-attribute allow-guest # local-user ***** password cipher **************************** authorization-attribute level 3 service-type telnet service-type web # wlan rrm dot11a mandatory-rate 6 12 24 dot11a supported-rate 9 18 36 48 54 dot11b mandatory-rate 1 2 dot11b supported-rate 5.5 11 dot11g mandatory-rate 1 2 5.5 11 dot11g supported-rate 6 9 12 18 24 36 48 54 # wlan service-template 1 clear ssid H3C # wlan service-template 2 crypto ssid AP cipher-suite ccmp security-ie rsn key-derivation sha256 service-template enable # cwmp undo cwmp enable # interface NULL0 # interface Vlan-interface1 ip address 10.65.32.11 255.255.255.0 # interface Vlan-interface10 ip address 10.65.33.11 255.255.255.0 # interface GigabitEthernet1/0/1 port link-type trunk port trunk permit vlan all # interface WLAN-BSS32 # interface WLAN-BSS33 port link-type hybrid port hybrid vlan 1 untagged # interface WLAN-BSS34 port link-type hybrid port hybrid vlan 1 untagged port-security port-mode psk port-security tx-key-type 11key port-security preshared-key pass-phrase cipher *************************** # interface WLAN-Radio1/0/1 service-template 2 interface wlan-bss 34 # interface WLAN-Radio1/0/2 service-template 1 interface wlan-bss 33 # ntp-service unicast-server 120.25.115.20 ntp-service unicast-server 162.159.200.123 # arp-snooping enable # load xml-configuration # load tr069-configuration # user-interface con 0 user-interface vty 0 4 authentication-mode scheme # return
路由器 ap直连吗？直连应该可以通信了 看看arp能否学到 dis arp all
是直连。只能学到 vlan1 的 arp，没有 vlan10。