分别有5个vlan 每个交换机一个
8 y1 z8 _/ {9 n |' B目前情况是, 从三层核心上 可以ping的通下面的交换机的管理IP地址,
2 C2 F# y* W/ K7 ]& f+ Q! C但是二层交换机无法ping通三层核心管理IP地址地址/ U, H7 M, W0 g% s5 {% w* k' p3 ]
!$ n+ a# D) ?) g9 O) R$ a
hostname hexin: x) g3 |+ z, E- G. C Y: S
!4 U! p$ `$ m0 e$ `5 l3 l- f; V5 M
boot-start-marker
- j0 Y& v2 }5 N8 n( n, `boot-end-marker9 M4 n# b. E$ g
!
, M+ B4 Z& ~4 p$ s% P& Z!6 D7 L+ W) C2 ?. C0 n2 I
!
/ j# m }4 A; Yno aaa new-model% I7 T' B- T. X5 Z) G
!
* x4 Q) D8 V' P) R!
; G) \7 n) y- m& k!
8 c/ A3 N$ k2 |!% O3 n- k5 k) Z% P
!
/ s S1 F& w2 j7 | b- q% L. p# A+ S!
Y H P6 q# L, U; S$ ]5 h2 fip dhcp excluded-address 10.10.10.1 10.10.10.10; e5 D: [. h! e
ip dhcp excluded-address 10.10.20.1 10.10.20.103 y7 B6 U- Q9 G3 D/ e
ip dhcp excluded-address 10.10.30.1 10.10.30.10
. V; R3 F- O0 b' K4 R. b3 w8 fip dhcp excluded-address 10.10.40.1 10.10.40.10
% v: v5 f3 I, R0 Wip dhcp excluded-address 10.10.50.1 10.10.50.10
3 v3 n4 `# L& Y( z4 a8 r! 3 ~: k# V T* q( w
ip dhcp pool kd6 v; T& [- R- n
network 10.10.10.0 255.255.255.0
2 E! M" G a1 v: x8 p+ _8 C1 u dns-server 8.8.8.8
) B7 Y" q$ O% f6 k default-router 10.10.10.254 6 b/ _+ c1 l4 D0 O3 C
lease 3
' V$ N/ j, c. Z9 g! - ? i$ j* c0 Y; ^) f
ip dhcp pool kd1
5 v. M; @1 @8 [- [' I network 10.10.20.0 255.255.255.00 t0 T/ R1 V' j6 n g2 H" }7 g
dns-server 8.8.8.8 ' n4 m4 Y: {" G3 j
default-router 10.10.20.254
" O& g( U. z1 X% B7 X/ Q! ?! Z( s lease 3
- I( q# o, J" S!
: n# ^; M3 I: k( }ip dhcp pool kd2
" @7 k# I, X) t# d" g l6 i network 10.10.30.0 255.255.255.02 W3 I; ^' R$ M9 d9 N
dns-server 1.1.1.1 * N# l2 C7 N: N: [# { C
default-router 10.10.30.254
8 P6 z+ p% _1 @' S9 S7 C lease 3
" \# f3 m- V0 T" Z7 v% v! 0 F ^' V' w& @4 h. ]& _" z
ip dhcp pool kd35 R# I V" G. }$ u. T% v" V
network 10.10.40.0 255.255.255.0- s% Z" C# W2 T4 W
dns-server 1.1.1.1
$ K3 f( F z7 m d% f default-router 10.10.40.254
$ ^: o+ _- n/ q. O# d& Z lease 3
, k1 f- b; t- G3 m% ]; P7 u9 d!
6 n3 b, l1 p8 z/ |5 S; Pip dhcp pool kd4
* T" v) T1 M' P6 K: p network 10.10.50.0 255.255.255.0
% |4 j! V2 c# ^0 b- L dns-server 8.8.8.8 3 I: D& L/ S2 ~. d/ w3 y
default-router 10.10.50.254
8 ^% T' O6 A, ?- f4 z% G lease 3 $ J- U9 ?! {9 E$ t6 Z4 [ w: R
!
! Z+ s' r1 c% w!
1 Q- k, Q, C$ I) tno ip domain-lookup
# K1 Y! \/ l' K* gip cef
; e4 i. @3 a1 x3 a/ @% [; ano ipv6 cef/ a& J! u6 P p/ h; h5 S
! 7 v! W! x9 Q5 i, R
! ' x. g# q$ W+ P7 c4 y; R
!
9 a7 J7 y9 n9 y5 H0 ^$ ^$ Kspanning-tree mode pvst1 r' [6 E- [$ P3 x: N6 \
spanning-tree extend system-id
4 `9 }# ^) B0 v; r! 8 o- o& F9 u p, g( G
! 2 Y: ]) p- G/ Z; [# L0 ~% Z
!
7 M$ I! ?( `% z1 U4 t) x! 2 V, {% M$ W7 V) d/ j/ f/ ^9 C! K
! 6 N7 b$ y8 j) ]( y
!
" H& b# S! R+ N/ @7 i8 ?4 c! % v. T- q- g: Q$ K- @4 b9 k0 C5 }
!
2 F, _% z5 }5 @" d5 L) @( Q; L* f" B! / H9 \: W; O5 @6 I. t% z6 H
!
3 Z7 e' n; t8 t$ \3 P7 N!
9 p5 j% U. k% y1 c- T$ Q! + ]8 M; e2 }1 e- Y
!
" C) H$ m- k+ [1 A- @( H. ^" A+ `! ! o+ y# {0 G' C* u
! - Q8 x: l0 w3 G% Q' B0 l- j
interface GigabitEthernet0/0
( q. V3 e) G9 ~; h0 s- d negotiation auto
& f9 g1 J, H& {. P0 O+ Q, I!
r J' P Y/ R$ Jinterface GigabitEthernet0/18 Q& V; c( E# K0 J$ @
negotiation auto
1 x) E# ^1 L% y9 ?!
2 l2 e+ O7 z I5 @: Kinterface GigabitEthernet0/2
4 C1 s# B8 g/ U negotiation auto! S9 ^' @5 d. ^* s0 h: G
! # H3 b3 X, v8 f* g
interface GigabitEthernet0/3
% ~& |, F; t1 e' z0 o' z negotiation auto
+ M! Y5 I- c3 R0 C9 \' Z! , q/ u1 ?3 H2 B
interface GigabitEthernet1/08 N3 M. f- P+ c" J1 H
negotiation auto! Y4 j; [ D% f+ m8 `2 p
!
. |$ f: @5 K0 W1 K# M3 [. E5 zinterface GigabitEthernet1/1
3 _* V4 ?( l; W( O negotiation auto1 \6 ^* Q: j! U2 ^: |; p+ ^8 B5 z1 C
!
! K! @4 R% `$ O" o7 sinterface GigabitEthernet1/2
) O2 N6 X- M5 Z3 ? negotiation auto
; H$ E0 }7 F9 z& c7 C9 S! E! 0 P& `4 X& y5 h U+ ^5 V6 H
interface GigabitEthernet1/3
" V$ I3 ~. } @( }+ a negotiation auto
6 U$ g, I: l% r* } ^1 G v$ H! 1 F6 M3 s* m p' C7 o
interface Vlan1
& T h) h/ ~4 u& f$ i. {) V3 ? no ip address
1 ~$ R( J F8 o* C4 Z: P! % k2 R' U5 F5 m
interface Vlan10
* l5 \7 U" {; r9 h) r ip address 10.10.10.254 255.255.255.02 Y# U- L/ x( O3 G: |4 P8 a! b
ip access-group vlan10 in% B3 _! A( x; T0 p% h5 d0 \8 `
!
$ O: T+ O) p$ u3 J6 S* ], Kinterface Vlan20- [% d2 M0 x0 X+ i7 h% v
ip address 10.10.20.254 255.255.255.09 y3 ?6 `: d: A: T6 v
!
+ O. [4 {0 @- z/ ^ I7 }$ G Kinterface Vlan309 |6 [( [0 e* k8 }0 I, `
ip address 10.10.30.254 255.255.255.0
9 x9 u6 U% j& X* H7 d6 {6 s+ p!
6 I2 i; t8 a# f4 }. P( yinterface Vlan40
4 R" ?: @- Z1 |7 ^( Y ip address 10.10.40.254 255.255.255.09 o2 ?: e7 @5 @* F% D
!
1 F) U6 Q/ t0 ninterface Vlan50
6 j# `% m4 i m- T6 {3 | ip address 10.10.50.254 255.255.255.0# o+ W" |' n/ o s9 ]
! $ f. n' `8 C5 `; E8 H+ h
interface Vlan70
3 q+ \7 a: \4 p8 p! Y; E$ ? no ip address
% X5 O- ~2 Q, l- i0 E!
" D- m z. [/ o" w+ w1 i- bip forward-protocol nd
$ O! `# f! Q( U) }2 x9 f! d!
& Q# h- L' G3 X6 d0 Cip http server
7 E) K+ w8 l. R! T' iip http secure-server& y1 |' }& E' x) k; G7 ~+ p
! 1 E7 |* I G5 D5 X+ ~+ ]7 E. B/ f9 C* M
ip ssh server algorithm encryption aes128-ctr aes192-ctr aes256-ctr
( c* x) w6 u- ?' E6 I. T# Fip ssh client algorithm encryption aes128-ctr aes192-ctr aes256-ctr- Y+ A! `4 m0 |$ v: K, N
!
2 e0 K. q) `5 O- i. F5 R5 t5 ^ip access-list extended vlan10
1 F: y! Y7 |. Y. F7 \/ m; s6 F; Fip access-list extended vlan20! B' c- K2 e$ `" j
permit ip any any8 m L6 a2 G' `+ S
! ) x3 C& ?! J( v" m2 }) i" E
!
4 g: _5 i9 A+ N' l$ G' }! " ?2 Q+ Z& w% _, }( ^; ~
!
. t8 ^* g2 O3 Z! 8 @/ o8 V1 W+ g, k/ L4 A
control-plane2 a- w% D* M. X$ y2 ^! f% g
! % L( o1 G/ Q7 k. n0 n1 X
banner exec ^C
% m9 X: Q6 b: Y! y% b0 DIOSv - Cisco Systems Confidential -9 w7 s# k. T z \0 S" u. p
/ R% ~& Q, |* P4 V5 T: z: ?( [) T0 u& c. V R7 l& t. k6 G/ m
核心配置如下,请问怎么做,才能让2层交换机可以ping通3层交换机管理IP地址
6 c* m1 }5 M/ ~" V: n目前所有的网络都是通的,
) ?1 u( j$ o, |, S
& U1 U8 |, b6 [9 U; [& A |