华为s5700交换机划分VLAN100、VLAN110、VLAN120、VLAN130；默认VLAN1

Vlanif100：192.168.0.1  24

Vlanif110：192.168.1.1  24

Vlanif120：192.168.2.1  24

Vlanif130：192.168.3.1  24  \\此VLAN下的交换机端口与路由的LAN相连

并基于vlanif启用vlanif100、vlanif110、vlanif120的DHCP，

配置默认路由ip route static 0.0.0.0  0.0.0.0 192.168.3.254  \\下一跳IP为路由器LAN口地址

在路由上做回程路由指向下一跳192.168.3.1

现在的情况是192.168.1.0段下的电脑ping不通192.168.0.0段的的电脑(注意是某些此网段的电脑哈，不是所有都ping不通

，当然ping 192.168.0.1是所有都通的)；192.168.0.0段ping192.168.1.0段目前还没发现有ping不通的现象，并且

192.168.1.0网段内互ping都是有某些电脑不通。请问什么原因？十万火急！400分求帮助

下面是交换机配置信息：

!Software Version V100R005C01SPC100

sysname Quidway

#

vlan batch 11 to 25 100 110 120 130

#

mac-authen

#

dhcp enable

#

http server load flash:/s5700si-v100r005c01spc100.web.zip

#

time-range mac-deny 00:00 to 23:59 daily

#

acl name denyprint 4001

rule 0 deny ether-ii source-mac 00ee-8904-f872 8021p 7

rule 5 deny source-mac 00ee-8904-f872rule 100 permit

​ rule 100 permit

#

aaa

authentication-scheme default

authentication-mode radius local

authorization-scheme default

accounting-scheme default

domain default

authorization-scheme default

domain default_admin

local-user admin password simple pyxbl1

local-user admin service-type http

local-user user password simple pyxbl1

local-user user privilege level 3

local-user user service-type telnet terminal

#

interface Vlanif100

ip address 192.168.0.1 255.255.255.0

dhcp select interface

dhcp server excluded-ip-address 192.168.0.2 192.168.0.159

dhcp server excluded-ip-address 192.168.0.250 192.168.0.254

dhcp server dns-list 61.139.2.69 8.8.8.8

dhcp server domain-name dhcp100

#

interface Vlanif110

ip address 192.168.1.1 255.255.255.0

dhcp select interface

dhcp server excluded-ip-address 192.168.1.2 192.168.1.86

dhcp server excluded-ip-address 192.168.1.250 192.168.1.254

dhcp server dns-list 61.139.2.69 8.8.8.8

dhcp server lease day 0 hour 1 minute 0

dhcp server domain-name dhcp110

#

interface Vlanif120

ip address 192.168.2.1 255.255.255.0

#

interface Vlanif130

ip address 192.168.3.1 255.255.255.0

#

interface MEth0/0/1

#

interface GigabitEthernet0/0/1

port link-type access

port default vlan 11

#

interface GigabitEthernet0/0/2

port link-type access

port default vlan 12

#

interface GigabitEthernet0/0/3

port link-type access

port default vlan 13

#

interface GigabitEthernet0/0/4

port link-type access

port default vlan 14

#

interface GigabitEthernet0/0/5

port link-type access

port default vlan 15

#

interface GigabitEthernet0/0/6

port link-type access

port default vlan 16

#

interface GigabitEthernet0/0/7

port link-type access

port default vlan 17

#

interface GigabitEthernet0/0/8

port link-type access

port default vlan 18

#

interface GigabitEthernet0/0/9

port link-type access

port default vlan 19

#

interface GigabitEthernet0/0/10

port link-type access

port default vlan 20

#

interface GigabitEthernet0/0/11

port link-type access

port default vlan 21

#

interface GigabitEthernet0/0/12

port link-type access

port default vlan 22

#

interface GigabitEthernet0/0/13

port link-type access

port default vlan 23

#

interface GigabitEthernet0/0/14

port link-type access

port default vlan 24

#

interface GigabitEthernet0/0/15

port link-type access

port default vlan 25

#

interface GigabitEthernet0/0/16

port link-type access

port default vlan 100

#

interface GigabitEthernet0/0/17

port link-type access

port default vlan 100

traffic-filter inbound acl name denyprint rule 0

traffic-filter inbound acl name denyprint rule 5

traffic-filter inbound acl name denyprint rule 100#

interface GigabitEthernet0/0/18

port link-type access

port default vlan 110

#

interface GigabitEthernet0/0/19

port link-type access

port default vlan 110

#

interface GigabitEthernet0/0/20

port link-type access

port default vlan 110

#

interface GigabitEthernet0/0/21

port link-type access

port default vlan 120

#

interface GigabitEthernet0/0/22

port link-type access

port default vlan 130

#

interface GigabitEthernet0/0/23

port link-type trunk

port trunk allow-pass vlan 11 to 25

#

interface GigabitEthernet0/0/24

#

interface NULL0

#

ip route-static 0.0.0.0 0.0.0.0 192.168.3.254

#

snmp-agent

snmp-agent local-engineid 000007DB7F00000100003D5E

snmp-agent sys-info version v3

#

mac-address blackhole 00ee-8904-f872 vlan 1

#

user-interface con 0

idle-timeout 0 0

user-interface vty 0 4

authentication-mode aaa

#

return

分享至：