做好配置后,终端IP地址无法访问互联网
# ip vpn-instance 2 route-distinguisher 1:1 vpn-target 2:2 import-extcommunity vpn-target 1:1 export-extcommunity # ip vpn-instance 4 route-distinguisher 2:2 vpn-target 4:4 import-extcommunity vpn-target 3:3 export-extcommunity #
dhcp server ip-pool vlan2 vpn-instance 2 gateway-list 172.16.20.254 network 172.16.20.0 mask 255.255.255.0 dns-list 222.172.200.68 forbidden-ip 172.16.20.1 # dhcp server ip-pool vlan4 vpn-instance 4 gateway-list 172.16.40.254 network 172.16.40.0 mask 255.255.255.0 dns-list 222.172.200.68 # interface NULL0 # interface Vlan-interface2 ip binding vpn-instance 2 ip address 172.16.20.254 255.255.255.0 # interface Vlan-interface4 ip binding vpn-instance 4 ip address 172.16.40.254 255.255.255.0 #
# interface GigabitEthernet1/0/46 port link-mode bridge port access vlan 2 #
# ip route-static 0.0.0.0 0 1.18.1.1 ip route-static 172.16.20.0 24 vpn-instance 2 172.16.20.1 ip route-static vpn-instance 2 1.18.1.0 30 1.18.1.1 public ip route-static vpn-instance 2 172.16.40.0 24 vpn-instance 4 172.16.40.1 ip route-static vpn-instance 4 1.18.1.0 24 1.18.1.1 public ip route-static vpn-instance 4 172.16.20.0 24 vpn-instance 2 172.16.20.1 #
(0)
最佳答案
交换机不支持nat,你怎么上互联网
(0)
组网环境说错了,出口设备是一台防火墙,网关都在核心交换机上,分别做了VPN实例的
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
组网环境说错了,出口设备是一台防火墙,网关都在核心交换机上,分别做了VPN实例的