问题描述:
我写了ACL3000,在物理接口和vlanif1000都调用了,但是在交换机上带源ping -a 10.20.1.1 10.196.4.1能通
组网及组网描述:
dis current-configuration
#
version 7.1.070, Release 1119P20
#
sysname A-S5560-AGG
#
clock timezone beijing add 08:00:00
clock protocol none
#
telnet server enable
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
#
ospf 1 router-id 10.127.255.198
area 0.0.0.0
network 10.0.2.0 0.0.0.255
network 10.127.255.198 0.0.0.0
area 0.0.0.20
abr-summary 10.20.0.0 255.255.0.0
network 10.20.0.0 0.0.255.255
stub
#
ospfv3 1
router-id 10.127.255.198
area 0.0.0.0
abr-summary 2001:DA8:6010:1500:: 56
#
dhcp enable
#
lldp global enable
#
password-recovery enable
#
vlan 1
#
vlan 851
name ap-manage
#
vlan 1000
name sw-manage
#
vlan 1600 to 1609
#
vlan 1610
name duomeiti
#
vlan 1611
name shangxy_301-310
#
vlan 1612
name shangxy_401-412
#
vlan 1613
#
vlan 1614
name shangxy_jk
#
vlan 1615
description JingDong
#
vlan 1616
description Zhi_hui_jiao_shi
#
vlan 2510 to 2515
#
stp global enable
#
interface NULL0
#
interface LoopBack0
ip address 10.127.255.198 255.255.255.255
#
interface Vlan-interface1
ip address 10.20.0.1 255.255.255.192
#
interface Vlan-interface851
ip address 10.20.11.1 255.255.255.0
dhcp select relay
dhcp relay server-address 10.10.0.2
dhcp relay server-address 10.10.0.3
#
interface Vlan-interface1000
ip address 10.0.2.210 255.255.255.0
ospfv3 1 area 0.0.0.0
packet-filter 3000 inbound
packet-filter 3000 outbound
ipv6 address 2001:DA8:6010:5::5/64
#
interface Vlan-interface1600
ip address 10.20.10.1 255.255.255.0
dhcp select relay
dhcp relay server-address 10.10.0.2
dhcp relay server-address 10.10.0.3
#
interface Vlan-interface1601
ip address 10.20.1.1 255.255.255.0
ospfv3 1 area 0.0.0.0
dhcp select relay
dhcp relay server-address 10.10.0.2
dhcp relay server-address 10.10.0.3
ipv6 dhcp relay server-address 2001:DA8:6010:200::20
ipv6 dhcp relay server-address 2001:DA8:6010:200::21
ipv6 address 2001:DA8:6010:1501::1/64
ipv6 nd autoconfig managed-address-flag
ipv6 nd autoconfig other-flag
undo ipv6 nd ra halt
#
interface Vlan-interface1602
ip address 10.20.2.1 255.255.255.0
dhcp select relay
dhcp relay server-address 10.10.0.2
dhcp relay server-address 10.10.0.3
#
interface Vlan-interface1603
ip address 10.20.3.1 255.255.255.0
dhcp select relay
dhcp relay server-address 10.10.0.2
dhcp relay server-address 10.10.0.3
#
interface Vlan-interface1604
ip address 10.20.4.1 255.255.255.0
dhcp select relay
dhcp relay server-address 10.10.0.2
dhcp relay server-address 10.10.0.3
#
interface Vlan-interface1605
ip address 10.20.5.1 255.255.255.0
dhcp select relay
dhcp relay server-address 10.10.0.2
dhcp relay server-address 10.10.0.3
#
interface Vlan-interface1606
ip address 10.20.6.1 255.255.255.0
dhcp select relay
dhcp relay server-address 10.10.0.2
dhcp relay server-address 10.10.0.3
#
interface Vlan-interface1607
ip address 10.20.7.1 255.255.255.0
dhcp select relay
dhcp relay server-address 10.10.0.2
dhcp relay server-address 10.10.0.3
#
interface Vlan-interface1608
ip address 10.20.8.1 255.255.255.0
dhcp select relay
dhcp relay server-address 10.10.0.2
dhcp relay server-address 10.10.0.3
#
interface Vlan-interface1609
ip address 10.20.9.1 255.255.255.0
dhcp select relay
dhcp relay server-address 10.10.0.2
dhcp relay server-address 10.10.0.3
#
interface Vlan-interface1610
ip address 10.20.16.1 255.255.254.0
dhcp select relay
dhcp relay server-address 10.10.0.2
dhcp relay server-address 10.10.0.3
#
interface Vlan-interface1611
ip address 10.20.12.1 255.255.254.0
dhcp select relay
dhcp relay server-address 10.10.0.2
dhcp relay server-address 10.10.0.3
#
interface Vlan-interface1612
ip address 10.20.14.1 255.255.255.0
#
interface Vlan-interface1613
ip address 10.20.15.1 255.255.255.0
#
interface Vlan-interface1614
ip address 10.20.19.1 255.255.255.0
#
interface Vlan-interface1615
ip address 10.20.18.1 255.255.255.0
dhcp select relay
dhcp relay server-address 10.10.0.2
dhcp relay server-address 10.10.0.3
#
interface Vlan-interface1616
ip address 10.20.40.1 255.255.254.0
dhcp select relay
dhcp relay server-address 10.10.0.2
dhcp relay server-address 10.10.0.3
#
interface GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet1/0/2
port link-mode bridge
description a5
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet1/0/3
port link-mode bridge
description a2
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet1/0/4
port link-mode bridge
description A1
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet1/0/5
port link-mode bridge
description a3
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet1/0/6
port link-mode bridge
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet1/0/7
port link-mode bridge
description shangxueyuan
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet1/0/8
port link-mode bridge
description a4
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet1/0/9
port link-mode bridge
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet1/0/10
port link-mode bridge
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet1/0/11
port link-mode bridge
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet1/0/12
port link-mode bridge
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet1/0/13
port link-mode bridge
description A-2F-xiao-jiao-shi
port access vlan 1616
#
interface GigabitEthernet1/0/14
port link-mode bridge
#
interface GigabitEthernet1/0/15
port link-mode bridge
#
interface GigabitEthernet1/0/16
port link-mode bridge
#
interface GigabitEthernet1/0/17
port link-mode bridge
combo enable copper
#
interface GigabitEthernet1/0/18
port link-mode bridge
combo enable copper
#
interface GigabitEthernet1/0/19
port link-mode bridge
combo enable copper
#
interface GigabitEthernet1/0/20
port link-mode bridge
combo enable copper
#
interface GigabitEthernet1/0/21
port link-mode bridge
combo enable copper
#
interface GigabitEthernet1/0/22
port link-mode bridge
combo enable copper
#
interface GigabitEthernet1/0/23
port link-mode bridge
combo enable copper
#
interface GigabitEthernet1/0/24
port link-mode bridge
description jiaoxiao
port access vlan 1602
combo enable copper
#
interface M-GigabitEthernet0/0/0
#
interface Ten-GigabitEthernet1/0/25
port link-mode bridge
description uplink
port link-type trunk
port trunk permit vlan all
packet-filter 3000 inbound
packet-filter 3000 outbound
#
interface Ten-GigabitEthernet1/0/26
port link-mode bridge
description shangxueyuan-10G
port link-type trunk
port trunk permit vlan all
#
interface Ten-GigabitEthernet1/0/27
port link-mode bridge
description shangxueyuan-beiyong
port link-type trunk
暂无评论