交换机上网配置

 

 

一台WX3010E,8口

交换部分和AC控制部分现状如下：

 

 

<POE_switch_200.252>tracert 211.97.142.108

 traceroute to 211.97.142.108(211.97.142.108) 30 hops max,40 bytes packet, press CTRL_C to break

 1  192.168.1.1 9 ms 3 ms 2 ms

 2  220.250.60.1 4 ms 3 ms 4 ms

 3  218.106.149.213 5 ms 4 ms 15 ms

 4  218.104.229.37 22 ms 218.104.227.5 22 ms 218.104.227.9 85 ms

 5  58.23.0.198 9 ms 11 ms 218.107.221.130 15 ms

 6  218.107.221.46 14 ms 10 ms 11 ms

 7  * * *

 8  *

<POE_switch_200.252>ping 211.97.142.108    /////////////外网主机

  PING 211.97.142.108: 56  data bytes, press CTRL_C to break

    Reply from 211.97.142.108: bytes=56 Sequence=1 ttl=58 time=11 ms

    Reply from 211.97.142.108: bytes=56 Sequence=2 ttl=58 time=10 ms

    Reply from 211.97.142.108: bytes=56 Sequence=3 ttl=58 time=11 ms

    Reply from 211.97.142.108: bytes=56 Sequence=4 ttl=58 time=11 ms

    Reply from 211.97.142.108: bytes=56 Sequence=5 ttl=58 time=10 ms

 

  --- 211.97.142.108 ping statistics ---

    5 packet(s) transmitted

    5 packet(s) received

    0.00% packet loss

    round-trip min/avg/max = 10/10/11 ms

 

<POE_switch_200.252>

<POE_switch_200.252>display ip routing-table

Routing Tables: Public

        Destinations : 9        Routes : 9

 

Destination/Mask    Proto  Pre  Cost         NextHop         Interface

 

0.0.0.0/0           Static 60   0            192.168.1.1     Vlan11

127.0.0.0/8         Direct 0    0            127.0.0.1       InLoop0

127.0.0.1/32        Direct 0    0            127.0.0.1       InLoop0

192.168.0.0/16      Static 60   0            192.168.200.254 Vlan1

192.168.1.0/24      Direct 0    0            192.168.1.6     Vlan11

192.168.1.6/32      Direct 0    0            127.0.0.1       InLoop0

192.168.199.0/24    Static 60   0            192.168.200.254 Vlan1

192.168.200.0/24    Direct 0    0            192.168.200.252 Vlan1

192.168.200.252/32  Direct 0    0            127.0.0.1       InLoop0

 

<POE_switch_200.252>

<POE_switch_200.252>dis vlan all

 VLAN ID: 1

 VLAN Type: static

 Route Interface: configured

 IP Address: 192.168.200.252

 Subnet Mask: 255.255.255.0

 Description: VLAN 0001

 Name: VLAN 0001

 Tagged   Ports: none

 Untagged Ports:

    Bridge-Aggregation1

    GigabitEthernet1/0/1     GigabitEthernet1/0/2     GigabitEthernet1/0/3

    GigabitEthernet1/0/4     GigabitEthernet1/0/5     GigabitEthernet1/0/6

    GigabitEthernet1/0/7     GigabitEthernet1/0/9     GigabitEthernet1/0/10

    GigabitEthernet1/0/11    GigabitEthernet1/0/12

 

 VLAN ID: 10

 VLAN Type: static

 Route Interface: not configured

 Description: VLAN 0010

 Name: VLAN 0010

 Tagged   Ports:

    Bridge-Aggregation1

    GigabitEthernet1/0/8     GigabitEthernet1/0/11    GigabitEthernet1/0/12

 Untagged Ports: none

 

 VLAN ID: 11

 VLAN Type: static

 Route Interface: configured

 IP Address: 192.168.1.6

 Subnet Mask: 255.255.255.0

 Description: VLAN 0011

 Name: VLAN 0011

 Tagged   Ports: none

 Untagged Ports:

    GigabitEthernet1/0/8

 

<POE_switch_200.252>

******************************   以上是 交换部分现状  ***************************************

<H3C_AC254>display ip routing-table

Routing Tables: Public

        Destinations : 6        Routes : 6

 

Destination/Mask    Proto  Pre  Cost         NextHop         Interface

 

127.0.0.0/8         Direct 0    0            127.0.0.1       InLoop0

127.0.0.1/32        Direct 0    0            127.0.0.1       InLoop0

192.168.199.0/24    Direct 0    0            192.168.199.254 Vlan10

192.168.199.254/32  Direct 0    0            127.0.0.1       InLoop0

192.168.200.0/24    Direct 0    0            192.168.200.254 Vlan1

192.168.200.254/32  Direct 0    0            127.0.0.1       InLoop0

 

<H3C_AC254>ping 211.97.142.108

  PING 211.97.142.108: 56  data bytes, press CTRL_C to break

    Request time out

    Request time out

    Request time out

    Request time out

    Request time out

 

  --- 211.97.142.108 ping statistics ---

    5 packet(s) transmitted

    0 packet(s) received

    100.00% packet loss

 

<H3C_AC254>tracert 211.97.142.108

 traceroute to 211.97.142.108(211.97.142.108) 30 hops max,40 bytes packet, press CTRL_C to break

 1  * * *

 2  * * *

 3  * * *

 4  * * *

 5  * * *

 6  * * *

 7  * * *

 8  * * *

 9 

<H3C_AC254>

<H3C_AC254>dis vlan all

 VLAN ID: 1

 VLAN Type: static

 Route Interface: configured

 IPv4 address: 192.168.200.254

 IPv4 subnet mask: 255.255.255.0

 Description: VLAN 0001

 Name: VLAN 0001

 Tagged   Ports: none

 Untagged Ports:

    Bridge-Aggregation1

    GigabitEthernet1/0/1     GigabitEthernet1/0/2

 

 VLAN ID: 10

 VLAN Type: static

 Route Interface: configured

 IPv4 address: 192.168.199.254

 IPv4 subnet mask: 255.255.255.0

 Description: VLAN 0010

 Name: VLAN 0010

 Tagged   Ports:

    Bridge-Aggregation1

    GigabitEthernet1/0/1     GigabitEthernet1/0/2

 Untagged Ports:

    WLAN-ESS0   

    WLAN-DBSS0:0             WLAN-DBSS0:1

    WLAN-ESS1

 

<H3C_AC254>

<H3C_AC254>dis ver

H3C Comware Platform Software

Comware Software, Version 5.20, Release 3509P58

Copyright (c) 2004-2016 Hangzhou H3C Tech. Co., Ltd. All rights reserved.

H3C WX3010E uptime is 0 week, 0 day, 7 hours, 44 minutes

 

H3C WX3010E with 1 RMI XLS 208 750MHz Processor

512M bytes DDR2

16M bytes Flash Memory

999M bytes CFCard Memory

 

Hardware Version is Ver.C

CPLD Version is 004

Basic Bootrom Version is 2.03

Extend Bootrom Version is 2.03

[Slot 0]WX3010ELSW Hardware Version is NA

[Slot 1]WX3010ERPU Hardware Version is Ver.C

 

******************************   以上是 AC控制器部分现状  ***************************************

 

目前交换部分在第8口接上网线连上一级路由器，交换部分可Ping通互联网上的主机

AC部分不能Ping通互联网上的主机

连在1-7口的PC上不了互联网(192.168.200.xxx)

 

请问如何实现连到AC控制器的终端、主机都能上互联网，如果有具体指令最好

 

 

 

 

 

<H3C_AC254>dis cur

#

 version 5.20, Release 3509P58

#

 sysname H3C_AC254

#

 domain default enable system

#

 telnet server enable

#

 port-security enable

#

 oap management-ip 192.168.200.254 slot 0

#

 wlan auto-ap enable

 wlan auto-persistent enable

#

 password-recovery enable

#

vlan 1

#

vlan 10

#

domain system

 access-limit disable

 state active

 idle-cut disable

 self-service-url disable

#

dhcp server ip-pool ap

 network 192.168.200.0 mask 255.255.255.0

#

dhcp server ip-pool client

 network 192.168.199.0 mask 255.255.255.0

 gateway-list 192.168.199.254

 dns-list 8.8.8.8

#

user-group system

 group-attribute allow-guest

#

local-user admin

 password cipher $c$3$5thOGCmEj3a1X9VYzVd/0+LqpO39/w==

 authorization-attribute level 3

 service-type telnet

 service-type web

#

wlan rrm

 dot11a mandatory-rate 6 12 24

 dot11a supported-rate 9 18 36 48 54

 dot11b mandatory-rate 1 2

 dot11b supported-rate 5.5 11

 dot11g mandatory-rate 1 2 5.5 11

 dot11g supported-rate 6 9 12 18 24 36 48 54

#

wlan service-template 1 crypto

 ssid cyc_601_5G

 bind WLAN-ESS 1

 client max-count 20

 cipher-suite tkip

 security-ie rsn

 service-template enable

#

wlan service-template 2 crypto

 ssid cyc_601_2.4G

 bind WLAN-ESS 0

 client max-count 8

 cipher-suite tkip

 security-ie rsn

 service-template enable

#

wlan ap-group default_group

 ap c4ca-d9e5-5520

 ap c4ca-d9e5-8e30

#

interface Bridge-Aggregation1

 port link-type trunk

 port trunk permit vlan 1 10

 arp detection trust

#

interface NULL0

#

interface Vlan-interface1

 ip address 192.168.200.254 255.255.255.0

#

interface Vlan-interface10

 ip address 192.168.199.254 255.255.255.0

#

interface GigabitEthernet1/0/1

 port link-type trunk

 port trunk permit vlan 1 10

 port link-aggregation group 1

#

interface GigabitEthernet1/0/2

 port link-type trunk

 port trunk permit vlan 1 10

 port link-aggregation group 1

#

interface WLAN-ESS0

 port access vlan 10

 port-security max-mac-count 40

 port-security port-mode psk

 port-security tx-key-type 11key

 port-security preshared-key pass-phrase cipher $c$3$tZ62Np0sWSGTc3gl+IG8p3oTipbGWeoWz/GT

#

interface WLAN-ESS1

 port access vlan 10

 port-security port-mode psk

 port-security tx-key-type 11key

 port-security preshared-key pass-phrase cipher $c$3$IeycQXXywcO4IrJbWTUD6bV5oWohuSCOWAR9

#

wlan ap c4ca-d9e5-5520 model WA2612-AGN id 2

 serial-id 210236A0ALC11C060345

 radio 1

  service-template 2

  radio enable

#

wlan ap c4ca-d9e5-8e30 model WA2612-AGN id 1

 serial-id 213335A0ALC11C002341

 radio 1

  service-template 2

  radio enable

#

wlan ips

 malformed-detect-policy default

 signature deauth_flood signature-id 1

 signature broadcast_deauth_flood signature-id 2

 signature disassoc_flood signature-id 3

 signature broadcast_disassoc_flood signature-id 4

 signature eapol_logoff_flood signature-id 5

 signature eap_success_flood signature-id 6

 signature eap_failure_flood signature-id 7

 signature pspoll_flood signature-id 8

 signature cts_flood signature-id 9

 signature rts_flood signature-id 10

 signature addba_req_flood signature-id 11

 signature-policy default

 countermeasure-policy default

 attack-detect-policy default

 virtual-security-domain default

  attack-detect-policy default

  malformed-detect-policy default

  signature-policy default

  countermeasure-policy default

#

 ip route-static 0.0.0.0 0.0.0.0 192.168.1.1

 ip route-static 192.0.0.0 255.0.0.0 192.168.1.1

 ip route-static 192.168.199.0 255.255.255.0 192.168.200.252

#

 dhcp server forbidden-ip 192.168.200.250 192.168.200.254

 dhcp server forbidden-ip 192.168.199.250 192.168.199.254

#

 dhcp enable

#

user-interface con 0

user-interface vty 0 4

 authentication-mode scheme

 user privilege level 3

#

return

<H3C_AC254>             /////////////////////////             AC控制器