6006 vlan 间做nat 遇到的问题:destination host unreachable

success_king

一台6006（没有rj45模块），设一个g口为vlan 900，外网ip，ip nat outside，下联一个3524接网通的线路（光纤收发器转rj45）；其余g口为其他8个vlan，内部地址，ip nat inside。\r\n\r\n设置静态路由 ip route 0.0.0.0 0.0.0.0 218.56.38.161(网通给的网关)。\r\n\r\n设置完后测试，遇到一些奇怪的问题，同一台机器设置192.168.30.186可以ping通218.56.38.161，internet访问正常，而192.168.30.188就ping不通218.56.38.161，提示destination host unreachable ,其他网段也有这种情况，不理解啊。请指点\r\n\r\nmsfc router配置部分如下：\r\n\r\nip subnet-zero\r\nno ip domain-lookup\r\n!\r\nip cef\r\ncns event-service server\r\n!\r\n!\r\n!\r\ninterface Vlan1\r\n ip address 192.168.222.253 255.255.255.0\r\n ip nat inside\r\n!\r\ninterface Vlan10\r\n  ip address 192.168.10.253 255.255.255.0\r\n ip nat inside\r\n!\r\ninterface Vlan20\r\n  ip address 192.168.20.253 255.255.255.0\r\n ip nat inside\r\n!\r\ninterface Vlan30\r\n  ip address 192.168.30.253 255.255.255.0\r\n ip nat inside\r\n!\r\ninterface Vlan40\r\n  ip address 192.168.40.253 255.255.255.0\r\n ip nat inside\r\n!\r\ninterface Vlan50\r\n  ip address 192.168.50.253 255.255.255.0\r\n ip nat inside\r\n!\r\ninterface Vlan60\r\n  ip address 192.168.60.253 255.255.255.0\r\n!\r\ninterface Vlan70\r\n  ip address 192.168.70.253 255.255.255.0\r\n ip nat inside\r\n!\r\ninterface Vlan80\r\n  ip address 192.168.80.253 255.255.255.0\r\n ip nat inside\r\n!\r\ninterface Vlan900\r\n ip address 218.56.38.162 255.255.255.224\r\n ip nat outside\r\n!\r\nip nat pool cnc-access 218.56.38.170 218.56.38.179 netmask 255.255.255.224\r\nip nat inside source list 1 pool cnc-access\r\nip classless\r\nip route 0.0.0.0 0.0.0.0 218.56.38.161\r\nno ip http server\r\n!\r\naccess-list 1 permit 192.168.0.0 0.0.255.255

nfshanq

这个是基本的路由问题。\r\n你说的不是很清楚。\r\n同提示信息来看。你的路由不通。\r\n应该不是nat 的问题。

success_king

那为什么同样一台机器，ip为186就通，188就不通呢？\r\n6006交换机部分的配置如下：\r\n!\r\n#!\r\n#vtp\r\nset vtp domain CNANET\r\nset vlan 1 name default type ethernet mtu 1500 said 100001 state active\r\nset vlan 10 name  type ethernet mtu 1500 said 100010 state active\r\nset vlan 20 name  type ethernet mtu 1500 said 100020 state active\r\nset vlan 30 name  type ethernet mtu 1500 said 100030 state active\r\nset vlan 40 name type ethernet mtu 1500 said 100040 state active\r\nset vlan 50 name  type ethernet mtu 1500 said 100050 state active\r\nset vlan 60 name  type ethernet mtu 1500 said 100060 state suspend\r\nset vlan 70 name  type ethernet mtu 1500 said 100070 state active\r\nset vlan 80 name  type ethernet mtu 1500 said 100080 state active\r\nset vlan 900 name type ethernet mtu 1500 said 100900 state active\r\nset vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state active\r\nset vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004 state activ\r\ne stp ieee\r\nset vlan 1005 name trnet-default type trbrf mtu 1500 said 101005 state active st\r\np ibm\r\nset vlan 1003 name token-ring-default type trcrf mtu 1500 said 101003 state acti\r\nve mode srb aremaxhop 7 stemaxhop 7 backupcrf off\r\n!\r\n#ip\r\nset interface sc0 1 192.168.222.254/255.255.255.0 192.168.222.255\r\n\r\nset ip route 0.0.0.0/0.0.0.0 192.168.222.253\r\n!\r\n#set boot command\r\nset boot config-register 0x2\r\nset boot system flash bootflash:cat6000-sup.5-4-3.bin\r\n!\r\n# default port status is enable\r\n!\r\n!\r\n#module 1 : 2-port 1000BaseX Supervisor\r\nset udld enable 1/1\r\n!\r\n#module 2 : 8-port 1000BaseX Ethernet\r\nset vlan 10 2/1\r\nset vlan 40 2/2\r\nset vlan 70 2/4\r\nset vlan 80 2/3\r\n!\r\n#module 3 : 8-port 1000BaseX Ethernet\r\nset vlan 30 3/3\r\nset vlan 50 3/2\r\nset vlan 900 3/6\r\nset udld enable 3/4-5,3/7-8\r\n!\r\n#module 4 : 8-port 1000BaseX Ethernet\r\n!\r\n#module 5 : 8-port 1000BaseX Ethernet\r\n!\r\n#module 6 empty\r\n!\r\n#module 15 : 1-port Multilayer Switch Feature Card\r\n!\r\n#module 16 empty\r\n\r\n\r\n其中set ip route 0.0.0.0/0.0.0.0 192.168.222.253是否得当？\r\nset vlan 900 name VLAN0900 type ethernet mtu 1500 said 100900 state active 下联3524接网通线路，vlan900的参数是否需要更改？\r\n\r\n盼复，谢谢！

success_king

折腾了两天，发现如下问题：\r\n\r\npool中的10个地址用完（sh ip nat s显示type generic, total addresses 10, allocated 10 (100%), misses 138），就出现开头所出现问题了：第10以后的ip就出现destination host unreachable \r\n\r\n加入如下配置\r\n! \r\nip nat translation timeout 1800 \r\nip nat translation tcp-timeout 180 \r\nip nat translation udp-timeout 60 \r\nip nat translation port-timeout tcp 21 60 \r\n\r\n好像也不管用，继续折腾中......

success_king

唉！折腾完了\r\n\r\n看了看cisco的教程才知道：原来漏了个overload\r\n\r\n现在整个世界清净了