公司网络布局是这样
VPN网关---AC（网桥模式）---H3C5510三层交换机--普通交换机
三层交换机配置
[H3C_5510]disp cur
#
version 5.20, Release 530
#
sysname H3C_5510
#
domain default enable sys
#
telnet server enable
#
mirroring-group 1 local
#
vlan 1
#
vlan 2
#
vlan 10
#
vlan 20
#
vlan 100
#
domain system
access-limit disable
access-limit disable
state active
idle-cut disable
self-service-url disable
#
dhcp server ip-pool 0
network 192.168.0.0 mask 255.255.255.0
gateway-list 192.168.0.250
dns-list 61.128.192.68 61.128.128.68
expired day 365
#
dhcp server ip-pool 1
network 192.168.4.0 mask 255.255.255.0
gateway-list 192.168.4.254
dns-list 61.128.192.68 61.128.128.68
#
interface NULL0
#
interface Vlan-interface10
ip address 192.168.4.254 255.255.255.0
#
interface Vlan-interface20
ip address 192.168.2.253 255.255.255.0
#interface Vlan-interface100
ip address 192.168.0.250 255.255.255.0
#
interface GigabitEthernet1/0/1
port access vlan 10
duplex full
#
interface GigabitEthernet1/0/2
port access vlan 10
duplex full
#
interface GigabitEthernet1/0/3
port access vlan 10
duplex full
#
interface GigabitEthernet1/0/4
port access vlan 10
#
interface GigabitEthernet1/0/5
port access vlan 10
#
interface GigabitEthernet1/0/6
port access vlan 20
interface GigabitEthernet1/0/7
port access vlan 20
#
interface GigabitEthernet1/0/8
port access vlan 20
#
interface GigabitEthernet1/0/9
port access vlan 20
#
interface GigabitEthernet1/0/10
port access vlan 20
#
interface GigabitEthernet1/0/11
#
interface GigabitEthernet1/0/12
#
interface GigabitEthernet1/0/13
#
interface GigabitEthernet1/0/14
#
interface GigabitEthernet1/0/15
#
interface GigabitEthernet1/0/16
interface GigabitEthernet1/0/17
#
interface GigabitEthernet1/0/18
#
interface GigabitEthernet1/0/19
#
interface GigabitEthernet1/0/20
mirroring-group 1 monitor-port
#
interface GigabitEthernet1/0/21
port access vlan 10
#
interface GigabitEthernet1/0/22
#
interface GigabitEthernet1/0/23
port access vlan 100
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/24
port access vlan 100
#
interface GigabitEthernet1/0/25
shutdown
---- More ----
interface GigabitEthernet1/0/26
shutdown
#
interface GigabitEthernet1/0/27
shutdown
#
interface GigabitEthernet1/0/28
shutdown
#
ip route-static 0.0.0.0 0.0.0.0 192.16
ip route-static 192.168.0.0 255.255.25
ip route-static 192.168.2.0 255.255.25
#
snmp-agent
snmp-agent local-engineid 000063A27F00
snmp-agent community read public
snmp-agent sys-info version all
#
dhcp server ping timeout 5
dhcp server ping packets 5
dhcp server forbidden-ip 192.168.0.1
dhcp server forbidden-ip 192.168.0.2
dhcp server forbidden-ip 192.168.0.3
dhcp server forbidden-ip 192.168.0.4
问题就是在目的口接入笔记本，总数获取不到数据包。。 |
发表于 2008-10-15 10:17:13