H3C防火墙开启DHCP，下接交换机做DHCP中继，但PC无法获取IP

 做了一个防火墙直连网络的实验，我在防火墙上做DHCP，然后下接交换机，全网就开了个VLAN10,

防火墙VLAN10 172.16.10.254

交换机VLAN10 172.16.10.253

 

防火墙查arp表可以看到交换机VLAN10接口地址。pc配IP地址。也能被防火墙arp看到，但就是ping不通

实在搞不懂了，请高手给指点一下。谢谢

 

 

 防火墙配置

sysname FW

#

context Admin id 1

#

 telnet server enable

#

 irf mac-address persistent timer

 irf auto-update enable

 undo irf link-delay

 irf member 1 priority 1

#

 dhcp enable

#

 xbar load-single

 password-recovery enable

 lpu-type f-series

#

vlan 1

#

vlan 10

#

dhcp server ip-pool vlan10

 gateway-list 172.16.10.254

 network 172.16.10.0 mask 255.255.255.0

 dns-list 8.8.8.8

#

interface NULL0

#

interface Vlan-interface10

 ip address 172.16.10.254 255.255.255.0

 manage ping inbound

 manage ping outbound

#

interface GigabitEthernet1/0/0

 port link-mode route

 combo enable copper

 ip address 192.168.88.254 255.255.255.0

 manage ping inbound

 manage ping outbound

#

interface GigabitEthernet1/0/1

 port link-mode route

 combo enable copper

 ip address 192.168.0.1 255.255.255.0

#

interface GigabitEthernet1/0/2

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/3

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/4

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/5

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/6

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/7

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/8

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/9

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/10

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/11

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/12

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/13

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/14

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/15

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/16

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/17

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/18

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/19

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/20

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/21

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/22

 port link-mode route

 combo enable copper

#

interface GigabitEthernet1/0/23

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 combo enable copper

#

security-zone name Local

#

security-zone name Trust

 import interface GigabitEthernet1/0/0

 import interface GigabitEthernet1/0/23 vlan 10

#

security-zone name DMZ

#

security-zone name Untrust

#

security-zone name Management

#

 scheduler logfile size 16

#

line class aux

 user-role network-operator

#

line class console

 user-role network-admin

#

line class tty

 user-role network-operator

#

line class vty

 user-role network-operator

#

line aux 0

 user-role network-admin

#

line con 0

 authentication-mode scheme

 user-role network-admin

 idle-timeout 0 0

#

line vty 0 4

 authentication-mode scheme

 user-role network-admin

#

line vty 5 63

 user-role network-operator

#

 info-center loghost 127.0.0.1 port 3301 format default

 info-center source CFGLOG loghost level informational

#

domain system

#

 aaa session-limit ftp 16

 aaa session-limit telnet 16

 aaa session-limit ssh 16

 domain default enable system

#

role name level-0

 description Predefined level-0 role

#

user-group system

#

local-user admin class manage

 password hash $h$6$x0S6vpCC8aDLCpNC$jwtrKflHhU/bNCzjPHTXmBJPLAU5Vec8PibJv96qnF1VkczL72Uw7xb0+vqg/wDbMkUAYAm9G8+6aDzXuHZCog==

 service-type telnet terminal http

 authorization-attribute user-role level-3

 authorization-attribute user-role network-admin

 authorization-attribute user-role network-operator

#

 ip http enable

 ip https enable

#

security-policy ip

 rule 0 name permit

  action pass

 rule 10 name dhcp

  action pass

  service dhcp-client

  service dhcp-server

#

return

交换机配置

[SW]dis cur

#

 version 7.1.070, Alpha 7170

#

 sysname SW

#

 irf mac-address persistent timer

 irf auto-update enable

 undo irf link-delay

 irf member 1 priority 1

#

 dhcp enable

#

 lldp global enable

#

 system-working-mode standard

 xbar load-single

 password-recovery enable

 lpu-type f-series

#

vlan 1

#

vlan 10

#

 stp global enable

#

interface NULL0

#

interface Vlan-interface10

 ip address 172.16.10.253 255.255.255.0

 dhcp select relay

 dhcp relay server-address 172.16.10.254

#

interface FortyGigE1/0/53

 port link-mode bridge

#

interface FortyGigE1/0/54

 port link-mode bridge

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port access vlan 10

 combo enable fiber

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/3

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/4

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/5

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/6

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/7

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/8

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/9

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/10

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/11

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/12

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/13

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/14

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/15

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/16

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/17

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/18

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/19

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/20

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/21

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/22

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/23

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/24

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/25

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/26

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/27

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/28

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/29

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/30

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/31

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/32

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/33

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/34

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/35

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/36

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/37

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/38

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/39

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/40

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/41

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/42

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/43

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/44

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/45

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/46

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/47

 port link-mode bridge

 combo enable fiber

#

interface GigabitEthernet1/0/48

 port link-mode bridge

 combo enable fiber

#

interface M-GigabitEthernet0/0/0

#

interface Ten-GigabitEthernet1/0/49

 port link-mode bridge

 combo enable fiber

#

interface Ten-GigabitEthernet1/0/50

 port link-mode bridge

 combo enable fiber

#

interface Ten-GigabitEthernet1/0/51

 port link-mode bridge

 combo enable fiber

#

interface Ten-GigabitEthernet1/0/52

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 10

 combo enable fiber

#

 scheduler logfile size 16

#

line class aux

 user-role network-operator

#

line class console

 user-role network-admin

#

line class tty

 user-role network-operator

#

line class vty

 user-role network-operator

#

line aux 0

 user-role network-operator

#

line con 0

 user-role network-admin

 idle-timeout 0 0

#

line vty 0 63

 user-role network-operator

#

radius scheme system

 user-name-format without-domain

#

domain system

#

 domain default enable system

#

role name level-0

 description Predefined level-0 role

 

#

 

#

user-group system

#

 

return