思科模拟器配置NAT后无法ping通外网

图
! q+ S3 t( W6 \! Q; C( `' z

思科模拟器配置NAT后无法ping通外网

代码
NAT部分
" W! C$ R* V* {, e( s( F外网
en
) e% F! w4 j2 ^+ p1 \conf t
5 l+ @0 g$ Y; {0 ~! o/ S8 y7 Hint s1/0
clock rate 64000
  w8 I7 @; d* X% sip add 200.1.1.2 255.255.255.0
no sh
$ {+ D3 m! A" I  m$ B: B1 Sint loopback0
ip add 8.8.8.8 255.255.255.255


! U4 \! u$ }5 U- J# k2 [, ?- N, q+ ER0
$ g: i' i/ j: Q+ l5 s5 Aen
conf t
int s1/0
ip add 200.1.1.1 255.255.255.0
no sh
9 Q" F! B/ z2 pip route 0.0.0.0 0.0.0.0 200.1.1.2
, k! Y1 G7 d4 i( F8 Zint s1/0
ip nat outside
int f0/1
& u* {) q! s) N% P/ Z5 j" c! Y$ sip nat inside
9 x2 u3 @. Q4 G0 V) S/ bexit
access-list 1 permit 192.168.0.0 0.0.255.255
ip nat pool cisco 200.1.1.11 200.1.1.20 netmask 255.255.255.0
9 e/ r" M! X: U% e2 n- v2 I: Fip nat inside source list 1 int s1/0 overload

0 Z! d6 I% E& R$ ^( J6 k/ P
3 L2 v: |* X+ \5 `DHCP和vlan部分
% F- v3 F) _$ t/ [/ v6 fR0
$ o$ w3 e/ f1 ]7 p- \0 pen
conf t
ip dhcp pool qiantai
network 192.168.1.0 255.255.255.240
# Y0 o7 i  H( |; R8 E* U2 E* _( ?Default-router 192.168.1.14      
( b/ m9 P3 }2 u/ [% l. C7 i+ rexit
ip dhcp pool fivexiuxi
network 192.168.1.16 255.255.255.240
Default-router 192.168.1.30      
+ |. V' u$ c, v( L. X, l" texit
7 O5 C1 w5 y* }; ]' ?* z6 H( h" tip dhcp pool fivehuiyi
0 a$ Q5 A/ x3 ~+ W# U$ j: Hnetwork 192.168.1.32 255.255.255.240
Default-router 192.168.1.46      
- f, M2 U: H' q, e% Wexit
ip dhcp pool sixxiuxi
7 n# }+ r: I% vnetwork 192.168.1.48 255.255.255.240
Default-router 192.168.1.62      
exit
ip dhcp pool sixhuiyi
network 192.168.1.64 255.255.255.240
1 h2 X$ x' D7 R* `Default-router 192.168.1.78      
2 S3 h2 c; N* k6 j# S  C& H: Sexit
* \3 `" n/ \& K* zip dhcp pool sevenxiuxi
network 192.168.1.80 255.255.255.240
% P0 f& X) V" sDefault-router 192.168.1.93      
exit
- u2 D! W; J# u7 q$ N( gip dhcp pool sevenhuiyi
network 192.168.1.96 255.255.255.240
Default-router 192.168.1.110      
$ v+ V5 V  ?, o; _9 t/ lexit
ip dhcp pool fiveITjishu
0 A6 F, d! ]8 U& p1 Q: rnetwork 192.168.2.0 255.255.255.128
Default-router 192.168.2.126
' K* C. S- S! f! V: i0 Kexit
4 q/ i8 R2 i2 ~ip dhcp pool fiveshangwu
  R$ T8 d; [1 s9 G! t5 Xnetwork 192.168.2.128 255.255.255.128
Default-router 192.168.2.252
exit
ip dhcp pool sixxiaoshou
6 i% W/ |# M, b* t/ ?network 192.168.3.0 255.255.255.128
Default-router 192.168.3.126
- D# u" z- a9 B3 {" h; {exit
ip dhcp pool sixcaigou
network 192.168.3.128 255.255.255.128
2 |( S1 Y5 D$ h9 @Default-router 192.168.3.252
exit
6 I' H% |0 a: @" g, i9 jip dhcp pool sevenshichang
4 X6 d4 V% ?, S8 L, g; pnetwork 192.168.4.0 255.255.255.128
  {4 I- m' o' V# T5 UDefault-router 192.168.4.126
" P+ t: J$ O. t" v3 p( mexit
ip dhcp pool sevenxingzheng
6 b: W1 |) K' V) `2 D- X; knetwork 192.168.4.128 255.255.255.192
& A6 {* b% a8 \& M8 h" @) U2 o! p" ^Default-router 192.168.4.190
exit
ip dhcp pool sevencaiwu
network 192.168.4.192 255.255.255.192
% Q" |* R) p4 j) c- m5 Z, @Default-router 192.168.4.252
: D9 V1 D7 j2 gexit
Ip Dhcp Excluded-address 192.168.1.14
Ip Dhcp Excluded-address 192.168.1.30
: @  H& `3 ]: S# F. X: gIp Dhcp Excluded-address 192.168.1.46
3 z1 E1 f, U1 g0 b, S  QIp Dhcp Excluded-address 192.168.1.62
Ip Dhcp Excluded-address 192.168.1.78
- f2 L4 Z0 ^9 V7 W* K# p1 w: EIp Dhcp Excluded-address 192.168.1.93
, E! W' Z- \' O% a: u% _8 XIp Dhcp Excluded-address 192.168.1.110
Ip Dhcp Excluded-address 192.168.2.126
Ip Dhcp Excluded-address 192.168.2.252
; s6 a; L7 z$ H' i& v6 KIp Dhcp Excluded-address 192.168.3.126  
Ip Dhcp Excluded-address 192.168.3.252
Ip Dhcp Excluded-address 192.168.4.126
Ip Dhcp Excluded-address 192.168.4.190
+ i  m4 w7 j; Y' l8 m0 J/ bIp Dhcp Excluded-address 192.168.4.252
int f0/1
ip address 192.168.5.2 255.255.255.0
4 t5 }1 ]4 B0 o% ?no shutdown
exit
' w: U3 ^, Q0 j# t3 @- O$ \ip route 192.168.0.0 255.255.255.240 192.168.5.1
/ X- c- y# y: O) {  Y8 p. G+ Kip route 192.168.1.0 255.255.255.240 192.168.5.1
! M+ O0 a- d% r+ O) v) d, |ip route 192.168.2.0 255.255.255.128 192.168.5.1
, ]8 x0 D5 b: i( o" ]% t% I4 _7 aip route 192.168.3.0 255.255.255.128 192.168.5.1
, p9 \7 R( O5 Z7 T! ?( t2 m' h5 jip route 192.168.4.0 255.255.255.128 192.168.5.1
ip route 192.168.5.0 255.255.255.192 192.168.5.1     
exit


! b/ W* S& f1 M' t% OSW2
en
* y  b* A' g! i6 F6 u0 Uconfigure terminal
vlan 10
vlan 15
; X# d* J9 X! tvlan 20
vlan 25
vlan 30
vlan 35
: r$ l. z8 t9 ]$ Rvlan 40
vlan 45
vlan 50
6 T: E- {7 z, M& r# h+ f0 r  qvlan 55
vlan 60
vlan 65
vlan 70
3 @- C0 V, N; T( e9 j$ U( xvlan 75
exit
* l2 ?; F0 ^9 \interface vlan 10
ip add 192.168.1.14 255.255.255.240
) j4 e( f2 p  rip nat inside
7 e8 z* D5 d, c' a1 T- t& Jip helper-address 192.168.5.2
no shutdown
exit
5 Y% E4 N% ~1 N& Minterface vlan 15
ip add 192.168.1.30 255.255.255.240
5 }) |* y; H4 M. T) m( tip nat inside      
ip helper-address 192.168.5.2               
$ g0 t, b, C) L3 V' ano shutdown
exit
interface vlan 20
& Y3 _% [) R4 q3 e' Pip add 192.168.1.46 255.255.255.240
4 _# ^, K: g! Y  l& i) x4 W0 dip nat inside
4 C# p4 n  O: G$ n+ n, cip helper-address 192.168.5.2         
no shutdown
2 x& X- N- @" F" ]0 L# ]- R, h7 vexit
* m1 L6 k: K$ F+ V% tinterface vlan 25
ip add 192.168.2.126 255.255.255.128
6 B4 N3 x* M* i7 I& Z/ D5 B4 Sip nat inside
) C* S4 K6 L. wip helper-address 192.168.5.2         
no shutdown
exit
! ]1 b; q, v( Q) S  f: g1 h5 ^" qinterface vlan 30
ip add 192.168.2.252 255.255.255.128
4 _0 P6 R4 P: i6 y5 l; f( }ip nat inside
! J, m% S( K1 A- U) t0 \) ^8 Kip helper-address 192.168.5.2         
no shutdown
exit
' F4 x2 D- p3 |8 hinterface vlan 35
ip add 192.168.1.62 255.255.255.240
ip nat inside
ip helper-address 192.168.5.2         
no shutdown
exit
0 k% y4 D* n! l6 z# n! s3 V, r0 Xinterface vlan 40
ip add 192.168.1.78 255.255.255.240
/ ~+ W7 ]$ {$ I2 B; a7 {ip nat inside
ip helper-address 192.168.5.2         
( w! w! q5 t" a- _/ I5 Pno shutdown
! o! N1 V9 F& r; g5 H1 N" }4 T& f# ~exit
% M$ H  M2 T8 s+ n; _interface vlan 45
4 q8 ]" r* \, w+ u$ e* [2 Kip add 192.168.3.126 255.255.255.128
. Y( q+ @# ~7 N9 Wip nat inside
: c: D" B4 i4 |4 M3 c" p( o& M9 Yip helper-address 192.168.5.2         
no shutdown
- d$ c& f( ]% a4 ?exit
4 C; ]% Q7 O6 J( X1 f- l- Ninterface vlan 50
, w- j! [; A' \; K$ W- nip add 192.168.3.252 255.255.255.128
ip nat inside
4 `, q7 W: R8 {3 g) J$ p! Dip helper-address 192.168.5.2         
no shutdown
exit
interface vlan 55
ip add 192.168.1.93 255.255.255.240
; A: e8 b8 f" iip nat inside
+ c" B( U5 }4 f3 X6 `: Rip helper-address 192.168.5.2         
9 o7 m; O5 Z: m4 g# A+ ?no shutdown
; r0 K1 B7 u3 z4 hexit
& v) {; l( K# Y/ Ainterface vlan 60
3 M3 V- |0 e& [1 d3 w: d7 \3 pip add 192.168.1.110 255.255.255.240
ip nat inside
0 z8 O' d) c# t# ^8 zip helper-address 192.168.5.2         
2 x" C! N+ S1 rno shutdown
) B9 {; _4 q$ g1 l. b7 d* pexit
9 x$ p1 f  ]; v+ W5 ~0 Kinterface vlan 65
' l5 {3 t: o# u3 ]. p$ F) P( u5 Sip add 192.168.4.126 255.255.255.128
& N8 ?' V3 n, ~6 ]) q. fip nat inside
8 W* f0 v! m: z- uip helper-address 192.168.5.2         
no shutdown
7 Y$ A+ {2 j, r2 y6 a4 Nexit
# E; }. q/ ^3 n  [' ?7 t7 ninterface vlan 70
* b& p4 E* J8 b# D3 M% Gip add 192.168.4.190 255.255.255.192
6 T4 h, n1 b* H4 u+ `) q6 `! g: Hip nat inside
ip helper-address 192.168.5.2         
) N7 x& V* ?" o* ?: ]no shutdown
exit
, E$ }1 o2 d8 G4 a1 Q- zinterface vlan 75
. x( \( ]- r1 }7 iip add 192.168.4.252 255.255.255.192
9 G. M* j% [- _6 k1 E& @ip nat inside
ip helper-address 192.168.5.2         
no shutdown
+ t, x. P+ a9 `5 lexit                              
  f& M% X6 X0 ]* N, dInterface  fastEthernet 0/1
, {( o3 V" b- p9 o; h5 W3 a  H0 Pswitchport trunk encapsulation dot1q     
7 _2 X, O. l5 U% qswitchport mode trunk  
Interface  fastEthernet 0/2
switchport trunk encapsulation dot1q     
* [: I. C7 _& x6 M  e9 jswitchport mode trunk
Interface  fastEthernet 0/3
3 @; ~5 B1 ^! iswitchport trunk encapsulation dot1q     
switchport mode trunk                    
- @: i  _9 e. r1 a# ?Interface  fastEthernet 0/22
no switchport                          
ip address 192.168.5.1 255.255.255.0
3 z; E, j+ J* Ino shutdown
exit
ip  routing                             
! p$ f# o$ \- ~router rip                             
" I+ v. x, X. H0 Xnetwork 192.168.1.0               
( Y" a  [  l5 `9 V8 inetwork 192.168.2.0               
& Z3 Y) P( m" c/ b& I$ o- gnetwork 192.168.3.0
. h8 N0 P" h! L. j- Znetwork 192.168.4.0
+ f3 t, Z( R$ b% A1 bnetwork 192.168.5.0
1 O: P5 |: Y. q5 P4 \exit   


二层交换机

en
0 ~0 `9 h, a( |" C! ~2 _configure terminal
7 h/ n) F' Q/ ]& m$ K6 ivlan 10
0 [2 Q  a/ U8 c" A! j( @vlan 15
vlan 20
vlan 25
  C" o! H# s3 tvlan 30
, ?9 D1 B2 H& h0 Xvlan 35
vlan 40
8 |$ ^& ~/ S  R7 Uvlan 45
vlan 50
vlan 55
$ p& v$ C6 R. G  Lvlan 60
/ o/ n. z) k3 @0 ~3 ovlan 65
+ k/ k# Y& c' L% G/ C3 i: `8 Ivlan 70
vlan 75
3 G: D& B' t5 g& S! T, ^exit
Interface Range fastEthernet 0/1 - 5   
switchport mode trunk
  t7 R+ ^% i. w" l1 ~interface  fastethernet 0/24
switchport mode trunk
interface  fastethernet 0/1
switchport access Vlan 55
interface  fastethernet 0/2
$ a( s& [( K- j7 J9 Tswitchport access Vlan 60
interface  fastethernet 0/3
switchport access Vlan 65
interface  fastethernet 0/4
switchport access Vlan 70
interface  fastethernet 0/5
switchport access vlan 75

% h2 B# f; L5 V1 U( ~4 \' k
$ N9 t" b; M, ?5 u接入层二层交换机
. [& Y3 f4 ^* F6 ?8 Ren
configure terminal
vlan 10
vlan 15
vlan 20
7 `' q) g' p- jvlan 25
vlan 30
vlan 35
0 y$ u" Y5 f2 F/ Rvlan 40
% C3 k3 f' E/ b. kvlan 45
vlan 50
9 j+ Z3 A8 y& G$ W( ^vlan 55
vlan 60
vlan 65
2 q4 p6 q  s- _  pvlan 70
" [2 W6 W9 Q: i. ?/ p5 Z! R0 ivlan 75
exit
2 t6 r6 v( D! I- M3 ~$ H6 oInterface Range fastEthernet 0/1   
( U6 Q  |( w4 r4 e6 }switchport mode access
! @5 S- ~4 z  k! A0 Z0 Y/ w2 Jinterface  fastethernet 0/2
2 X# ?* _2 b4 V4 Yswitchport mode trunk
interface  fastethernet 0/1
8 a$ _6 ]5 @6 t9 J) z, F+ r' n6 Mswitchport access Vlan 75

新人求助

贴的配置命令太多而且有点乱，从ICMP的截图来看，还没有到NAT那一步，应该是路由问题

Asshole 发表于 2017-5-10 14:39
贴的配置命令太多而且有点乱，从ICMP的截图来看，还没有到NAT那一步，应该是路由问题

请问该怎么改呢，DHCP分配地址是成功的，不同VLAN间也可以ping通

在模拟模式下看一下数据包的流向

没有默认路由

我给你说详细点吧，三层交换机到出口路由器没有默认路由，写一条到2811的fa0/1的默认路由，还有你2811的那台出口路由器是否有回包给三层交换机内所有网段的路由

看的头晕~~~~~~

1、核心交换机没有8个0的默认路由指向router 0的内网接口
0 a. G% l: d. U! R: b5 a$ u2、不没看懂交换机为什么要跑rip路由协议，一般这种双核心交换机架构拓扑，跑HSRP，网关是vip地址。