分别有5个vlan 每个交换机一个
7 C( k0 W- e0 F! }' p+ O目前情况是, 从三层核心上 可以ping的通下面的交换机的管理IP地址,; w7 l' B) S: i% C& i0 M7 i
但是二层交换机无法ping通三层核心管理IP地址地址
: z3 v2 x* H0 M. \( y!7 E' L7 A8 ?/ s( g% u" f4 k: l
hostname hexin" W+ W& X7 e/ h Q/ w
!
( V+ q9 L* O- ^5 j" oboot-start-marker
+ {' Z/ j& u3 k/ aboot-end-marker* @) a" P4 w- ~, \* Y9 z
!
L, x, U/ b& A9 l!0 x. }# h5 ^, e3 I) @: h
!
1 K, s+ d9 q) N8 H9 B4 d8 lno aaa new-model
) F D( Q! Y* W!
; I n" s; ^; ]% M: \6 Q: d6 E! c* V!4 c$ u* Y2 ?" z" {4 [
!: C. O+ z9 ^) Y" y, V2 W; }
!
1 ?1 d: O }& X$ C3 G) W! ; l0 c' Q# S! Q1 E. ^' z# U `6 }
!
! j: V: F! e- N% r% L6 ^2 Hip dhcp excluded-address 10.10.10.1 10.10.10.10
7 x2 e' X7 I" t2 [1 L. b: b1 e+ aip dhcp excluded-address 10.10.20.1 10.10.20.10
+ c& I& I, F: ]8 n& Hip dhcp excluded-address 10.10.30.1 10.10.30.10) e. G8 _& q5 j
ip dhcp excluded-address 10.10.40.1 10.10.40.10
6 R, f& V& w& [- [, O! |- ?ip dhcp excluded-address 10.10.50.1 10.10.50.10, r" T4 t3 j* u9 F8 B5 J5 B) Q T
!
: f, Z$ N6 ~( w" B) H7 Yip dhcp pool kd
( l N( N7 r$ R* Q6 y0 z# l5 \ network 10.10.10.0 255.255.255.0' z8 q$ X7 p+ o& E* G4 v5 D3 P+ ?
dns-server 8.8.8.8
0 Y" ~" y2 I# {& j8 z% H default-router 10.10.10.254
$ t. _, E: M* ]" q; w* r! g: f* K0 ~ lease 3 . E. p" C4 K9 _
!
2 c6 T7 T/ L% y' b' o$ g9 I& Z- xip dhcp pool kd1
+ I) {7 U# Y, e9 ]' h6 c network 10.10.20.0 255.255.255.0: H4 w' P1 D& W! T& ]
dns-server 8.8.8.8
/ S- W* D7 p" D8 Y default-router 10.10.20.254
8 q0 H9 V: b4 ]* K1 r( g lease 3 * [- l) Z1 u) g! a
!
6 M2 \4 m% |8 h* B K: Jip dhcp pool kd2
/ |1 s: N, y0 O: ^' O# r% G7 t network 10.10.30.0 255.255.255.0
! ^/ r T8 K! y9 H* E3 Z dns-server 1.1.1.1
; w P) a% l# H, c/ P default-router 10.10.30.254 / Q! n( J. M$ h- C, X6 h4 X, T
lease 3 % N4 @5 _) o2 S, \9 Z* {. _
! : x1 Y( u1 n- [* o8 k
ip dhcp pool kd3* T- Z+ I- q( l3 z! m1 T; a5 k+ W
network 10.10.40.0 255.255.255.0
5 D/ X8 Y4 {5 N1 V# ^" f dns-server 1.1.1.1
8 P1 h8 o0 m2 d# U0 w default-router 10.10.40.254
. l+ |3 U. W4 u4 W* _ lease 3
3 Q" ]# @. z! e# h!
; q) P# o2 l6 Lip dhcp pool kd4
2 X3 o4 W/ \& }1 v network 10.10.50.0 255.255.255.0
* Z* F% U/ r4 j* p7 ` dns-server 8.8.8.8
) E, k2 w7 I0 f, r default-router 10.10.50.254 ( k& y+ | G/ i- P
lease 3
" z9 Y/ x- y( E9 v!
9 f0 H4 O' |7 X, J2 i* G& s! \" S/ j! & K3 ]5 }) T R* M
no ip domain-lookup$ F ], u; u) g* Y& J8 o
ip cef
. z" ~- N. ?' c I& N- m0 s0 ]7 M: h3 X# }no ipv6 cef
# k* f) P! ?* i+ @6 k+ l* C% L!
1 D' m% G( ^( v7 ~8 S. I! 5 n+ U8 U. R7 z8 U- K
!
# L: P/ k6 V3 O% _. e% v9 jspanning-tree mode pvst% w4 R+ `& F% K* G/ L: O
spanning-tree extend system-id
. j; j3 G2 ]" S- c! : u; r1 V5 Q) |5 l; p& M
! : M! C* y; A9 @: u$ [; H" h' Y% c
!
: w, o6 Z# V. G) Y) O: B!
6 C1 A* T3 B6 {8 ]! j" O& u R!
( b, O: p4 x% C: X9 y& }6 g( Z. l( j! ' ~; ]% s$ r/ z8 H( j
! 3 J$ D0 H7 `! A. x+ t' C
! # y; T& w/ s2 r2 g
! " `6 S* t# N' R, W- L$ [/ |
!
2 c6 T0 c# A( C: r% w!
; P* t' |) ?) ?" X8 @' D' m! : W$ I8 V" h q
!
3 W3 {$ F, A7 U4 s" p!
5 S- o R$ j$ g6 W: ^, H0 G8 C!
: z- g6 N' Z( ninterface GigabitEthernet0/0
8 x1 |1 o) q; {8 x' k @% R negotiation auto' O, e) s3 u3 e r9 c4 _
!
" T3 A0 b* a$ ?0 ointerface GigabitEthernet0/1
& s7 a1 T: @5 D D negotiation auto
; }& A( x" m" N, p g5 w( |' a' t8 Q+ j! & X* h! {9 q1 y9 W# p4 L( ?/ a
interface GigabitEthernet0/2
! ~2 t% L1 i. c! T$ r' i$ L negotiation auto1 W5 K8 z3 x) I( ~) M s) w
!
?; g# v& g9 U' e8 n: Binterface GigabitEthernet0/3
# d8 B- @% [2 Q; x negotiation auto; f" d8 |1 O( Z" |# `, }% R& z
! ) |; _5 z( O2 J) u
interface GigabitEthernet1/0: o J6 N# Z! I3 {6 J
negotiation auto
$ g4 k) E8 h6 z6 V5 \; J$ o!
8 W' J, B' x0 h5 I. ginterface GigabitEthernet1/1
6 ~6 s1 q& Q3 X! i2 U negotiation auto( y+ G7 V6 y4 b5 h( }
!
5 h' P& X7 N' I& T! r6 E U( Rinterface GigabitEthernet1/2
5 v1 H8 l) B9 V7 w2 ? negotiation auto
' e- `6 m7 U1 o/ m2 ~!
, D' R1 F) T: A1 D7 n+ \& Q8 o8 finterface GigabitEthernet1/3& f) f2 a( r* c, P
negotiation auto$ K$ G/ P3 G4 |- x
! * g; y: \1 N3 {
interface Vlan1
) n A" P* S; W2 F6 B no ip address, ]. \$ |# O/ ?4 f! H4 k8 r
! + h! v" C& b q5 p2 @: `
interface Vlan10
" k: c! a3 Y1 e* }0 A; @; \4 W+ V ip address 10.10.10.254 255.255.255.0* ~4 r" ~0 g% @
ip access-group vlan10 in( p1 F2 O( J. e! C
! " ]( A/ m- p- W: I9 u
interface Vlan20
% x K9 ?* y. u q, W$ [' y ip address 10.10.20.254 255.255.255.02 ]$ t4 w$ m, [5 Y
! / Z7 W8 @) N8 c# w1 B9 T
interface Vlan30
C$ S$ H0 T* g) H ip address 10.10.30.254 255.255.255.08 Q5 [! N0 A) J
!
c! \4 K0 `& minterface Vlan40
* \% U: d# @/ k/ |- } ip address 10.10.40.254 255.255.255.0
- i1 U( C+ N7 a" a E- V! 5 h X! P& i' J; v% g, g% I/ P
interface Vlan50
! m8 V* b# c6 B. a ip address 10.10.50.254 255.255.255.0
* n* f5 n6 d6 H3 {4 c2 q!
0 d. G( G5 @/ O( L* yinterface Vlan70
$ b3 h( H' r7 e8 M& X# p no ip address, @0 z& V5 M( e1 s6 q
!
! a, k9 {- y- C" C6 w7 v! g5 Fip forward-protocol nd6 v* l* Y# U: f2 j9 R4 v9 z
!
f5 Q k8 F5 L5 S7 B% g# V: m' Oip http server
6 h* x$ p, J6 ]" p tip http secure-server7 u$ @3 x$ j6 m$ i3 ]' u
!
# d8 c7 V( k/ B! W! zip ssh server algorithm encryption aes128-ctr aes192-ctr aes256-ctr
* d% [; `, p8 K+ S1 Cip ssh client algorithm encryption aes128-ctr aes192-ctr aes256-ctr
. C. q1 O+ D/ _- a!
i; B7 ^$ b, R4 ], iip access-list extended vlan10
# ?8 ^2 Y$ v; g: Qip access-list extended vlan20
6 {: D8 ^# p0 R' _! Q7 n. E I permit ip any any: {7 V6 r- ~3 b; i8 X7 ~4 ` p# E
! 9 g9 `+ D' n5 @7 P
!
1 {/ z+ P6 f7 p3 i$ h! ( B" N/ b' R5 y4 @$ A* H
! 2 ^7 |: H6 g- u2 }( ~
!
; {9 J+ n9 V# a! v0 V+ y h2 Wcontrol-plane+ K" T2 T# g6 X8 I- A. w# Q" i
! . N5 C- R8 O3 J0 Z
banner exec ^C
0 l/ N* D4 X+ X0 \. r! m i, aIOSv - Cisco Systems Confidential -
0 j9 S* V# r) F) D/ X B- [, Y: d8 E
; R) _" `! ~+ N9 R& P
. M3 `% f/ o& \: D& m- V核心配置如下,请问怎么做,才能让2层交换机可以ping通3层交换机管理IP地址) e& X3 K5 y8 I5 [) o
目前所有的网络都是通的,
/ v5 k8 B R+ a; O" ]% \4 {4 u/ @4 u* C9 N$ H
|