s5500交换机二层访问，为什么走网关
- 0关注
- 0收藏，129浏览
问题描述：
设备换了5500v2后，直连路由不生效，二层访问都走网关，网关在异地加上汇聚已满，导致本地二层互访延时很大，这是哪里配置问题,配置照着旧设备抄的
ping接口地址，都要绕去网关
来自 10.10.106.221 的回复: 字节=32 时间=123ms TTL=253
来自 10.10.106.221 的回复: 字节=32 时间=107ms TTL=253
来自 10.10.106.221 的回复: 字节=32 时间=123ms TTL=253
来自 10.10.106.221 的回复: 字节=32 时间=90ms TTL=253，
本地设备互访
正在 Ping 10.10.106.3 具有 32 字节的数据:
来自 10.10.106.3 的回复: 字节=32 时间=238ms TTL=126
来自 10.10.106.3 的回复: 字节=32 时间=222ms TTL=126
来自 10.10.106.3 的回复: 字节=32 时间=231ms TTL=126
来自 10.10.106.3 的回复: 字节=32 时间=225ms TTL=126
二层学到的mac都是网关的
C:\Users\Administrator>arp -a
接口: 10.10.106.3 --- 0x5
Internet 地址 物理地址 类型
10.10.106.1 e0-cb-19-89-3c-f4 动态
10.10.106.2 e0-cb-19-89-3c-f4 动态
10.10.106.4 e0-cb-19-89-3c-f4 动态
10.10.106.8 e0-cb-19-89-3c-f4 动态
10.10.106.15 e0-cb-19-89-3c-f4 动态
10.10.106.16 e0-cb-19-89-3c-f4 动态
10.10.106.17 e0-cb-19-89-3c-f4 动态
10.10.106.18 e0-cb-19-89-3c-f4 动态
10.10.106.33 e0-cb-19-89-3c-f4 动态
10.10.106.74 e0-cb-19-89-3c-f4 动态
10.10.106.100 e0-cb-19-89-3c-f4 动态
10.10.106.189 e0-cb-19-89-3c-f4 动态
10.10.106.200 e0-cb-19-89-3c-f4 动态
10.10.106.221 78-a1-3e-4c-79-b4 动态
10.10.106.222 e0-cb-19-89-3c-f4 动态
10.10.106.255 ff-ff-ff-ff-ff-ff 静态
10.37.224.1 68-ab-09-4f-bd-43 动态
224.0.0.2 01-00-5e-00-00-02 静态
224.0.0.22 01-00-5e-00-00-16 静态
224.0.0.251 01-00-5e-00-00-fb 静态
224.0.0.252 01-00-5e-00-00-fc 静态
239.255.255.250 01-00-5e-7f-ff-fa 静态
组网及组网描述：
路由
0.0.0.0/0 Static 60 0 10.10.106.1 Vlan1000
0.0.0.0/32 Direct 0 0 127.0.0.1 InLoop0
10.10.106.0/24 Direct 0 0 10.10.106.221 Vlan1000
10.10.106.0/32 Direct 0 0 10.10.106.221 Vlan1000
10.10.106.221/32 Direct 0 0 127.0.0.1 InLoop0
10.10.106.255/32 Direct 0 0 10.10.106.221 Vlan1000
127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0
127.0.0.0/32 Direct 0 0 127.0.0.1 InLoop0
127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0
127.255.255.255/32 Direct 0 0 127.0.0.1 InLoop0
172.20.15.0/24 Static 60 0 192.168.104.1 Vlan104
192.168.104.0/24 Direct 0 0 192.168.104.2 Vlan104
192.168.104.0/32 Direct 0 0 192.168.104.2 Vlan104
192.168.104.2/32 Direct 0 0 127.0.0.1 InLoop0
192.168.104.255/32 Direct 0 0 192.168.104.2 Vlan104
224.0.0.0/4 Direct 0 0 0.0.0.0 NULL0
224.0.0.0/24 Direct 0 0 0.0.0.0 NULL0
255.255.255.255/32 Direct 0 0 127.0.0.1 InLoop0
配置
version 7.1.070, Release 6628P47
#
sysname jiashanjiaotong
#
telnet server enable
telnet server acl 2099
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
#
lldp global enable
#
password-recovery enable
#
vlan 1
#
vlan 104
#
vlan 1000
#
stp instance 0 priority 61440
stp port-log instance 0 to 4094
stp port-log vlan 1 to 4094
stp global enable
#
interface Bridge-Aggregation1
port link-type trunk
port trunk permit vlan all
link-aggregation mode dynamic
#
interface NULL0
#
interface Vlan-interface1
ip address dhcp-alloc
dhcp client identifier ascii 78a13e4c79a2-VLAN0001
ipv6 address dhcp-alloc
ipv6 dhcp client duid ascii 78a13e4c79a2-VLAN0001
#
interface Vlan-interface104
ip address 192.168.104.2 255.255.255.0
#
interface Vlan-interface1000
ip address 10.10.106.221 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-mode bridge
port access vlan 1000
#
interface GigabitEthernet1/0/2
port link-mode bridge
port access vlan 1000
#
interface GigabitEthernet1/0/3
port link-mode bridge
port access vlan 1000
#
interface GigabitEthernet1/0/4
port link-mode bridge
port access vlan 1000
#
interface GigabitEthernet1/0/5
port link-mode bridge
port access vlan 1000
#
interface GigabitEthernet1/0/6
port link-mode bridge
port access vlan 1000
#
interface GigabitEthernet1/0/7
port link-mode bridge
port access vlan 1000
#
interface GigabitEthernet1/0/8
port link-mode bridge
port access vlan 1000
#
interface GigabitEthernet1/0/9
port link-mode bridge
port access vlan 1000
#
interface GigabitEthernet1/0/10
port link-mode bridge
port access vlan 1000
#
interface GigabitEthernet1/0/11
port link-mode bridge
port access vlan 1000
#
interface GigabitEthernet1/0/12
port link-mode bridge
port access vlan 1000
#
interface GigabitEthernet1/0/13
port link-mode bridge
port access vlan 1000
#
interface GigabitEthernet1/0/14
port link-mode bridge
port access vlan 1000
#
interface GigabitEthernet1/0/15
port link-mode bridge
port access vlan 1000
#
interface GigabitEthernet1/0/16
port link-mode bridge
port access vlan 104
#
interface GigabitEthernet1/0/17
port link-mode bridge
combo enable auto
#
interface GigabitEthernet1/0/18
port link-mode bridge
combo enable auto
#
interface GigabitEthernet1/0/19
port link-mode bridge
combo enable auto
#
interface GigabitEthernet1/0/20
port link-mode bridge
combo enable auto
#
interface GigabitEthernet1/0/21
port link-mode bridge
combo enable auto
#
interface GigabitEthernet1/0/22
port link-mode bridge
combo enable auto
#
interface GigabitEthernet1/0/23
port link-mode bridge
port link-type trunk
port trunk permit vlan all
combo enable auto
port link-aggregation group 1
#
interface GigabitEthernet1/0/24
port link-mode bridge
port link-type trunk
port trunk permit vlan all
combo enable auto
port link-aggregation group 1
#
interface M-GigabitEthernet0/0/0
#
interface Ten-GigabitEthernet1/0/25
port link-mode bridge
#
interface Ten-GigabitEthernet1/0/26
port link-mode bridge
#
interface Ten-GigabitEthernet1/0/27
port link-mode bridge
#
interface Ten-GigabitEthernet1/0/28
port link-mode bridge
port access vlan 1000
#
scheduler logfile size 16
#
line class aux
user-role network-admin
#
line class usb
user-role network-admin
#
line class vty
user-role network-operator
#
line aux 0
user-role network-admin
#
line vty 0 4
authentication-mode scheme
user-role network-operator
idle-timeout 3600 0
#
line vty 5 63
user-role network-operator
#
ip route-static 0.0.0.0 0 10.10.106.1
ip route-static 172.20.15.0 24 192.168.104.1
#
info-center logbuffer size 1024
#
acl number 2099
rule 100 permit source 10.10.106.15 0
rule 1000 deny
#
radius scheme system
user-name-format without-domain
#
domain system
#
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name level-1
description Predefined level-1 role
#
role name level-2
description Predefined level-2 role
#
role name level-3
description Predefined level-3 role
#
role name level-4
description Predefined level-4 role
#
role name level-5
description Predefined level-5 role
#
role name level-6
description Predefined level-6 role
#
role name level-7
description Predefined level-7 role
#
role name level-8
description Predefined level-8 role
#
role name level-9
description Predefined level-9 role
#
role name level-10
description Predefined level-10 role
#
role name level-11
description Predefined level-11 role
#
role name level-12
description Predefined level-12 role
#
role name level-13
description Predefined level-13 role
#
role name level-14
description Predefined level-14 role
#
user-group system
#
local-user admin class manage
password hash $h$6$9B5D3PJ/rFTdxBT8$lDor6A3hs+9xFNPd0GBwRgyJrrki4sGENvCzzvIAJOJQbXanLu4U0hTVpuQhGENXvafwrOFmEz2+1oGAomQnUg==
service-type http https
authorization-attribute user-role network-admin
authorization-attribute user-role network-operator
password-control length 8
#
local-user zjjtcmcc2018 class manage
password hash $h$6$5LG4F6rfIK910e3X$a3x4iCgtAQLW9lNgQsviEp9bI/6zUWjMgi8lLncbaPwiLqMiNgCVWRWLKiKTW/vyTEXe5paELsdc+dC4WBYwVQ==
service-type telnet ssh
authorization-attribute user-role network-admin
authorization-attribute user-role network-operator
password-control length 8
#
security-enhanced level 1
#
ip http acl 2099
ip http enable
- 2024-11-11提问
- 举报
-
(0)
最佳答案
从交换机上tracert 10.10.106.15
traceroute to 10.10.106.15 (10.10.106.15), 30 hops at most, 40 bytes each packet, press CTRL+C to break
1 10.10.20.1 (10.10.20.1) 68.235 ms 60.967 ms 60.313 ms
2 10.10.106.15 (10.10.106.15) 61.739 ms 62.840 ms 59.255 ms
- 2024-11-11回答
- 评论(0)
- 举报
-
(0)
这也看不出跨网关了啊，
- 2024-11-11回答
- 评论(3)
- 举报
-
(0)
以太网适配器 以太网 4: 连接特定的 DNS 后缀 . . . . . . . : 本地链接 IPv6 地址. . . . . . . . : fe80::546c:e050:671f:1c6e%5 IPv4 地址 . . . . . . . . . . . . : 10.10.106.3 子网掩码 . . . . . . . . . . . . : 255.255.255.0 IPv4 地址 . . . . . . . . . . . . : 10.37.224.26 子网掩码 . . . . . . . . . . . . : 255.255.255.128 默认网关. . . . . . . . . . . . . : fe80::1%5 10.10.106.1 隧道适配器 isatap.{31B88A4B-3F1F-4F3A-B1BF-54602CBBA3DE}: 媒体状态 . . . . . . . . . . . . : 媒体已断开连接 连接特定的 DNS 后缀 . . . . . . . : C:\Users\Administrator>ping 10.10.106.222 正在 Ping 10.10.106.222 具有 32 字节的数据: 来自 10.10.106.222 的回复: 字节=32 时间=70ms TTL=128 来自 10.10.106.222 的回复: 字节=32 时间=72ms TTL=128 来自 10.10.106.222 的回复: 字节=32 时间=64ms TTL=128 来自 10.10.106.222 的回复: 字节=32 时间=52ms TTL=128 10.10.106.222 的 Ping 统计信息: 数据包: 已发送 = 4，已接收 = 4，丢失 = 0 (0% 丢失)， 往返行程的估计时间(以毫秒为单位): 最短 = 52ms，最长 = 72ms，平均 = 64ms C:\Users\Administrator>tracert -d 10.10.106.222 通过最多 30 个跃点跟踪到 10.10.106.222 的路由 1 46 ms 42 ms 46 ms 10.10.20.1 2 50 ms 49 ms 48 ms 10.10.106.222 跟踪完成。 C:\Users\Administrator>
这介个设备都是插在s5500上的，延时都是和去网关绕一圈一样大
编辑答案
亲~登录后才可以操作哦!
确定你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
- 1. 您举报的内容是什么？（请在邮件中列出您举报的内容和链接地址）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
- 3. 是哪家企业？（营业执照，单位登记证明等证件）
- 4. 您与该企业的关系是？（您是企业法人或被授权人，需提供企业委托授权书）
抄袭了我的内容
×
原文链接或出处
诽谤我
×
- 1. 您举报的内容以及侵犯了您什么权益？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
对根叔社区有害的内容
×
不规范转载
×
举报说明