大侠们救命，路由器内部端口ping不通

snriyt

我在ge 1/1上ping 不通ge1/3是怎么回事

1. #show ip route
   
2. 
   
3. Gateway of last resort is 10.1.3.182 to network 0.0.0.0
   
4. 
   
5. C    192.168.251.0/24 is directly connected, GigabitEthernet1/3
   
6. C    192.168.252.0/24 is directly connected, GigabitEthernet1/3
   
7. S*   0.0.0.0/0 [1/0] via 10.1.3.182
   
8. #ping 192.168.251.254
   
9. 
   
10. Type escape sequence to abort.
    
11. Sending 5, 100-byte ICMP Echos to 192.168.251.254, timeout is 2 seconds:
    
12. .....
    
13. Success rate is 0 percent (0/5)
    
14. 
    
15. 
    
16. 
    
17. #show interfaces gigabitEthernet 1/3
    
18. GigabitEthernet1/3 is up, line protocol is up (connected)
    
19.   Hardware is C6k 1000Mb 802.3, address is 0023.33c6.7440 (bia 0023.33c6.7440)
    
20.   Internet address is 192.168.251.254/24
    
21.   MTU 1500 bytes, BW 100000 Kbit, DLY 10 usec,
    
22.      reliability 255/255, txload 1/255, rxload 1/255
    
23.   Encapsulation ARPA, loopback not set
    
24.   Keepalive set (10 sec)
    
25.   Full-duplex, 100Mb/s
    
26.   input flow-control is off, output flow-control is off
    
27.   Clock mode is auto
    
28.   ARP type: ARPA, ARP Timeout 04:00:00
    
29.   Last input 00:00:00, output 00:00:06, output hang never
    
30.   Last clearing of "show interface" counters never
    
31.   Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
    
32.   Queueing strategy: fifo
    
33.   Output queue: 0/40 (size/max)
    
34.   5 minute input rate 1000 bits/sec, 2 packets/sec
    
35.   5 minute output rate 258000 bits/sec, 15 packets/sec
    
36.   L2 Switched: ucast: 3896 pkt, 260990 bytes - mcast: 385303 pkt, 32159126 bytes
    
37.   L3 in Switched: ucast: 888287 pkt, 203583393 bytes - mcast: 0 pkt, 0 bytes mcast
    
38.   L3 out Switched: ucast: 1264427 pkt, 1125140247 bytes mcast: 0 pkt, 0 bytes
    
39.      2346896 packets input, 386455158 bytes, 0 no buffer
    
40.      Received 573021 broadcasts (0 IP multicasts)
    
41.      0 runts, 0 giants, 0 throttles
    
42.      0 input errors, 0 CRC, 1 frame, 0 overrun, 0 ignored
    
43.      0 watchdog, 0 multicast, 0 pause input
    
44.      0 input packets with dribble condition detected
    
45.      1434331 packets output, 1140897596 bytes, 0 underruns
    
46.      0 output errors, 0 collisions, 2 interface resets
    
47.      0 babbles, 0 late collision, 0 deferred
    
48.      0 lost carrier, 0 no carrier, 0 PAUSE output
    
49.      0 output buffer failures, 0 output buffers swapped out

复制代码

aplah

ip routing 打开了没

sh run贴出来看看

ssffzz1

详细的说说你的环境还有配置信息上来看看，单纯的看接口状态还不能确定问题。

snriyt

回复 2# aplah

1. 
   
2. 
   
3. !
   
4. 
   
5. !
   
6. !
   
7. redundancy
   
8. mode sso
   
9. main-cpu
   
10.   auto-sync running-config
    
11. spanning-tree mode pvst
    
12. spanning-tree extend system-id
    
13. diagnostic cns publish cisco.cns.device.diag_results
    
14. diagnostic cns subscribe cisco.cns.device.diag_commands
    
15. fabric timer 15
    
16. !
    
17. vlan internal allocation policy ascending
    
18. vlan access-log ratelimit 2000
    
19. !
    
20. !
    
21. !
    
22. --More--         !
    
23. --More--         interface GigabitEthernet1/1
    
24. --More--          description internal port
    
25. --More--          ip address 10.72.222.254 255.255.255.192 secondary
    
26. --More--          ip address 10.72.222.190 255.255.255.192
    
27. --More--          ip access-group 105 in
    
28. --More--          no ip redirects
    
29. --More--         !
    
30. --More--         interface GigabitEthernet1/2
    
31. --More--          description external port
    
32. --More--          ip address 10.1.3.181 255.255.255.252
    
33. --More--          ip access-group 106 in
    
34. --More--         !
    
35. --More--         interface GigabitEthernet1/3
    
36. --More--          ip address 192.168.252.254 255.255.255.0 secondary
    
37. --More--          ip address 192.168.253.254 255.255.255.0 secondary
    
38. --More--          ip address 192.168.251.254 255.255.255.0
    
39. --More--          ip access-group 109 in
    
40. --More--          no ip redirects
    
41. --More--          ip route-cache flow
    
42. --More--         !
    
43. 
    
44. --More--         interface GigabitEthernet1/45
    
45. --More--          ip address 28.82.17.10 255.255.255.252
    
46. --More--         !
    
47. --More--         interface GigabitEthernet1/46
    
48. --More--          ip address 28.82.17.6 255.255.255.252
    
49. --More--         !
    
50. 
    
51. 
    
52. --More--         router ospf 100
    
53. --More--          log-adjacency-changes
    
54. --More--          redistribute connected subnets
    
55. --More--          redistribute static subnets
    
56. --More--          network 10.1.3.180 0.0.0.3 area 0
    
57. --More--          network 10.72.222.128 0.0.0.63 area 1
    
58. --More--          network 10.72.222.192 0.0.0.63 area 1
    
59. --More--          network 192.168.251.0 0.0.0.255 area 1
    
60. --More--          network 192.168.252.0 0.0.0.255 area 1
    
61. --More--          network 192.168.253.0 0.0.0.255 area 1
    
62. --More--         !
    
63. --More--         ip classless
    
64. --More--         ip route 0.0.0.0 0.0.0.0 10.1.3.182
    
65. --More--         !
    
66. --More--         no ip http server
    
67. --More--         !
    
68. --More--         access-list 105 deny   tcp any any eq 135
    
69. --More--         access-list 105 deny   udp any any eq 135
    
70. --More--         access-list 105 deny   udp any any eq 1434
    
71. --More--         access-list 105 deny   tcp any any eq 139
    
72. --More--         access-list 105 deny   udp any any eq netbios-ss
    
73. --More--         access-list 105 deny   tcp any any eq 445
    
74. --More--         access-list 105 deny   udp any any eq 445
    
75. --More--         access-list 105 deny   tcp any any eq 593
    
76. --More--         access-list 105 deny   udp any any eq 593
    
77. --More--         access-list 105 deny   tcp any any eq 5554
    
78. --More--         access-list 105 deny   tcp any any eq 9996
    
79. --More--         access-list 105 permit ip any any
    
80. --More--         access-list 106 deny   tcp any any eq 135
    
81. --More--         access-list 106 deny   udp any any eq 135
    
82. --More--         access-list 106 deny   udp any any eq 1434
    
83. --More--         access-list 106 deny   tcp any any eq 139
    
84. --More--         access-list 106 deny   udp any any eq netbios-ss
    
85. --More--         access-list 106 deny   tcp any any eq 445
    
86. --More--         access-list 106 deny   udp any any eq 445
    
87. --More--         access-list 106 deny   tcp any any eq 593
    
88. --More--         access-list 106 deny   udp any any eq 593
    
89. --More--         access-list 106 deny   tcp any any eq 5554
    
90. --More--         access-list 106 deny   tcp any any eq 9996
    
91. --More--         access-list 106 permit ip any any
    
92. --More--         access-list 108 deny   tcp any any eq 135
    
93. --More--         access-list 108 deny   udp any any eq 135
    
94. --More--         access-list 108 deny   udp any any eq 1434
    
95. --More--         access-list 108 deny   tcp any any eq 139
    
96. --More--         access-list 108 deny   udp any any eq netbios-ss
    
97. --More--         access-list 108 deny   tcp any any eq 445
    
98. --More--         access-list 108 deny   udp any any eq 445
    
99. --More--         access-list 108 deny   tcp any any eq 593
    
100. --More--         access-list 108 deny   udp any any eq 593
     
101. --More--         access-list 108 deny   tcp any any eq 5554
     
102. --More--         access-list 108 deny   tcp any any eq 9996
     
103. --More--         access-list 108 permit ip 192.168.251.0 0.0.0.224 host 28.82.17.5
     
104. --More--         access-list 108 permit ip host 192.168.252.79 host 28.82.17.5
     
105. --More--         access-list 108 permit ip host 192.168.252.125 host 28.82.17.5
     
106. --More--         access-list 108 deny   ip any host 28.82.17.5
     
107. --More--         access-list 108 permit ip any any
     
108. --More--         access-list 109 deny   tcp any any eq 135
     
109. --More--         access-list 109 deny   udp any any eq 135
     
110. --More--         access-list 109 deny   udp any any eq 1434
     
111. --More--         access-list 109 deny   tcp any any eq 139
     
112. --More--         access-list 109 deny   udp any any eq netbios-ss
     
113. --More--         access-list 109 deny   tcp any any eq 445
     
114. --More--         access-list 109 deny   udp any any eq 445
     
115. --More--         access-list 109 deny   tcp any any eq 593
     
116. --More--         access-list 109 deny   udp any any eq 593
     
117. --More--         access-list 109 deny   tcp any any eq 5554
     
118. --More--         access-list 109 deny   tcp any any eq 9996
     
119. --More--         access-list 109 permit ip any 10.0.0.0 0.0.0.255
     
120. --More--         access-list 109 permit ip any 192.0.0.0 0.0.0.255
     
121. --More--         access-list 109 permit ip any 172.0.0.0 0.0.0.255
     
122. --More--         access-list 109 permit ip any host 28.82.17.5
     
123. --More--         access-list 109 permit ip any host 28.82.17.9
     
124. --More--         !
     
125. 
     
126. --More--         

复制代码

还有，我在10.72.这个网段，本机能够ping通192.168.251.254这个口，但是在路由器上是ping不通，192.168这个网段能访问28.82这个网段，但是不能访问10.72这个

ssffzz1

1、10.72的网关对吗？
2、109那个ACL对吗？

ssffzz1

你可以先去掉虽有ACL试试。
如果去掉ACL还不通，给我pc机的ipconfig /all route print 还有tracert的结果。

snriyt

回复 3# ssffzz1

1. 
   
2. 
   
3.     C    192.168.251.0/24 is directly connected, GigabitEthernet1/3
   
4.      10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks
   
5. C       10.72.222.128/26 is directly connected, GigabitEthernet1/1
   
6. C       10.72.222.192/26 is directly connected, GigabitEthernet1/1
   
7. C       10.1.3.180/30 is directly connected, GigabitEthernet1/2
   
8.      28.0.0.0/30 is subnetted, 2 subnets
   
9. C       28.82.17.8 is directly connected, GigabitEthernet1/45
   
10. C       28.82.17.4 is directly connected, GigabitEthernet1/46
    
11. C    192.168.253.0/24 is directly connected, GigabitEthernet1/3
    
12. C    192.168.252.0/24 is directly connected, GigabitEthernet1/3

复制代码

snriyt

回复 6# ssffzz1


    但是我是在路由器上（10.72.远程登陆）执行的ping 操作，ping路由上的端口，没有道理不通啊，

ssffzz1

我又糊涂了。

还是没搞明白你是如何测试的。你再详细说说。

snriyt

pc上（10.72.222.251）能ping路由器端口A（１９２.１６８.２５１.２５４），但是A端口下的机器不能与10.72这个网段机器通信。路由器中也不能ping通端口Ａ.但是端口Ａ下的机器能与路由器的端口Ｂ28.82.17.网段相通信。