华为s5720s三层连接爱快配置问题.

x223734

网络环境如下,三层交换上联口配置了vlanif2 地址为192.168.2.5
爱快路由下联口为lan 配置ip为192.168.2.1
现在底下得172.20.0.1X等得dhcp都是在三层上做得.
配置完毕底下的pc还是不能联网,只能访问192.168.2.5三层的上联接口,但是在三层上又能连接到192.168.2.1. 不知问题该从哪里排查起,求助.

linnan2004

静态路由、回程路由写了没？

x223734

linnan2004 发表于 2019-8-27 14:42
静态路由、回程路由写了没？

写了吖,爱快上写了 172.20.0.0 / 23
172.22.0.0/23
172.24.0.0/23
网关地址都是 1

x223734

静态写了的.
三层写的是ip rou 0.0.0.0 0.0.0.0 192.168.2.1

linnan2004

三层交换机上也要写

x223734

23位只是末尾三个吖 172.20.0.1-172.20.1.254  不同段吖

linnan2004

x223734 发表于 2019-8-27 15:00
23位只是末尾三个吖 172.20.0.1-172.20.1.254  不同段吖

哦，那没问题

你看看交换机上的路由表状况

秀字营

x223734 发表于 2019-8-27 14:57
静态写了的.
三层写的是ip rou 0.0.0.0 0.0.0.0 192.168.2.1

爱快路由器静态路由配置错误
https://www.ikuai8.com/zhic/ymgn/lyym/wlsz/94829.html
仔细查看案例中各接口IP，和案例中的静态路由书写规则哦

x223734

linnan2004 发表于 2019-8-27 14:57
三层交换机上也要写

[HUAWEI]dis cu
!Software Version V200R011C10SPC600
#
sysname HUAWEI
#
vlan batch 2 to 4094
#
authentication-profile name default_authen_profile
authentication-profile name dot1x_authen_profile
authentication-profile name mac_authen_profile
authentication-profile name portal_authen_profile
authentication-profile name dot1xmac_authen_profile
authentication-profile name multi_authen_profile
#
telnet server enable
#
dhcp enable
#
radius-server template default
#
pki realm default
certificate-check none
#
free-rule-template name default_free_rule
#
portal-access-profile name portal_access_profile
#
vlan 20
description bgyx
vlan 22
description bgwx
vlan 24
description fkwx
#
interface Vlanif1
ip address 192.168.1.253 255.255.255.0
#
interface Vlanif2
ip address 192.168.2.5 255.255.255.0
#
interface Vlanif20
ip address 172.20.0.1 255.255.254.0
dhcp select interface
dhcp server excluded-ip-address 172.20.0.1 172.20.0.5
dhcp server dns-list 218.85.152.99 218.85.157.99
#
interface Vlanif22
ip address 172.22.0.1 255.255.254.0
dhcp select interface
dhcp server excluded-ip-address 172.22.0.1 172.22.0.5
dhcp server dns-list 218.85.152.99 218.85.157.99
#                                         
interface Vlanif24
ip address 172.24.0.1 255.255.254.0
dhcp select interface
dhcp server excluded-ip-address 172.24.0.1 172.24.0.5
dhcp server dns-list 218.85.152.99 218.85.157.99
#
interface Vlanif999
ip address 172.30.0.1 255.255.255.0
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
port default vlan 20
#
interface GigabitEthernet0/0/2
port default vlan 20
#
interface GigabitEthernet0/0/3
port default vlan 22
#
interface GigabitEthernet0/0/4
port default vlan 22
#
interface GigabitEthernet0/0/5            
port default vlan 24
#
interface GigabitEthernet0/0/6
port default vlan 24
#
interface GigabitEthernet0/0/7
#
interface GigabitEthernet0/0/8
#
interface GigabitEthernet0/0/9
#
interface GigabitEthernet0/0/10
#
interface GigabitEthernet0/0/11
#
interface GigabitEthernet0/0/12
#
interface GigabitEthernet0/0/13
#
interface GigabitEthernet0/0/14
#
interface GigabitEthernet0/0/15
#
interface GigabitEthernet0/0/16           
#
interface GigabitEthernet0/0/17
#
interface GigabitEthernet0/0/18
#
interface GigabitEthernet0/0/19
#
interface GigabitEthernet0/0/20
#
interface GigabitEthernet0/0/21
#
interface GigabitEthernet0/0/22
#
interface GigabitEthernet0/0/23
description upup
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/24
description upup
port link-type access
port default vlan 2
#
interface GigabitEthernet0/0/25           
#
interface GigabitEthernet0/0/26
#
interface GigabitEthernet0/0/27
#
interface GigabitEthernet0/0/28
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 192.168.2.1
#
snmp-agent
snmp-agent local-engineid 800007DB0320658E7593A0
snmp-agent community read cipher %^%#Qxr_9x!Hz2g}aJG.]A71#"bxAtnV^.feL8CKW2&1oD3T=6gg76s<`5)%8:ZC5]GzE~XHqKfmn!09L,1T%^%#
snmp-agent sys-info version v2c
undo snmp-agent sys-info version v3
#
stelnet ipv4 server enable
stelnet ipv6 server enable
#
user-interface con 0
authentication-mode aaa
user-interface vty 0 4
authentication-mode aaa                  
protocol inbound all
user-interface vty 16 20
#
dot1x-access-profile name dot1x_access_profile
#
mac-access-profile name mac_access_profile
#

上联口为int g 0/0/24  172.20.0.1/23段的是1-2口

x223734

linnan2004 发表于 2019-8-27 14:57
三层交换机上也要写

是我写错了嘛,,求教....