6006 vlan 间做nat 遇到的问题:destination host unreachable

success_king

一台6006（没有rj45模块），设一个g口为vlan 900，外网ip，ip nat outside，下联一个3524接网通的线路（光纤收发器转rj45）；其余g口为其他8个vlan，内部地址，ip nat inside。

设置静态路由 ip route 0.0.0.0 0.0.0.0 218.56.38.161(网通给的网关)。

设置完后测试，遇到一些奇怪的问题，同一台机器设置192.168.30.186可以ping通218.56.38.161，internet访问正常，而192.168.30.188就ping不通218.56.38.161，提示destination host unreachable ,其他网段也有这种情况，不理解啊。请指点

msfc router配置部分如下：

ip subnet-zero
no ip domain-lookup
!
ip cef
cns event-service server
!
!
!
interface Vlan1
ip address 192.168.222.253 255.255.255.0
ip nat inside
!
interface Vlan10
  ip address 192.168.10.253 255.255.255.0
ip nat inside
!
interface Vlan20
  ip address 192.168.20.253 255.255.255.0
ip nat inside
!
interface Vlan30
  ip address 192.168.30.253 255.255.255.0
ip nat inside
!
interface Vlan40
  ip address 192.168.40.253 255.255.255.0
ip nat inside
!
interface Vlan50
  ip address 192.168.50.253 255.255.255.0
ip nat inside
!
interface Vlan60
  ip address 192.168.60.253 255.255.255.0
!
interface Vlan70
  ip address 192.168.70.253 255.255.255.0
ip nat inside
!
interface Vlan80
  ip address 192.168.80.253 255.255.255.0
ip nat inside
!
interface Vlan900
ip address 218.56.38.162 255.255.255.224
ip nat outside
!
ip nat pool cnc-access 218.56.38.170 218.56.38.179 netmask 255.255.255.224
ip nat inside source list 1 pool cnc-access
ip classless
ip route 0.0.0.0 0.0.0.0 218.56.38.161
no ip http server
!
access-list 1 permit 192.168.0.0 0.0.255.255

nfshanq

这个是基本的路由问题。
你说的不是很清楚。
同提示信息来看。你的路由不通。
应该不是nat 的问题。

success_king

那为什么同样一台机器，ip为186就通，188就不通呢？
6006交换机部分的配置如下：
!
#!
#vtp
set vtp domain CNANET
set vlan 1 name default type ethernet mtu 1500 said 100001 state active
set vlan 10 name  type ethernet mtu 1500 said 100010 state active
set vlan 20 name  type ethernet mtu 1500 said 100020 state active
set vlan 30 name  type ethernet mtu 1500 said 100030 state active
set vlan 40 name type ethernet mtu 1500 said 100040 state active
set vlan 50 name  type ethernet mtu 1500 said 100050 state active
set vlan 60 name  type ethernet mtu 1500 said 100060 state suspend
set vlan 70 name  type ethernet mtu 1500 said 100070 state active
set vlan 80 name  type ethernet mtu 1500 said 100080 state active
set vlan 900 name type ethernet mtu 1500 said 100900 state active
set vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state active
set vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004 state activ
e stp ieee
set vlan 1005 name trnet-default type trbrf mtu 1500 said 101005 state active st
p ibm
set vlan 1003 name token-ring-default type trcrf mtu 1500 said 101003 state acti
ve mode srb aremaxhop 7 stemaxhop 7 backupcrf off
!
#ip
set interface sc0 1 192.168.222.254/255.255.255.0 192.168.222.255

set ip route 0.0.0.0/0.0.0.0 192.168.222.253
!
#set boot command
set boot config-register 0x2
set boot system flash bootflash:cat6000-sup.5-4-3.bin
!
# default port status is enable
!
!
#module 1 : 2-port 1000BaseX Supervisor
set udld enable 1/1
!
#module 2 : 8-port 1000BaseX Ethernet
set vlan 10 2/1
set vlan 40 2/2
set vlan 70 2/4
set vlan 80 2/3
!
#module 3 : 8-port 1000BaseX Ethernet
set vlan 30 3/3
set vlan 50 3/2
set vlan 900 3/6
set udld enable 3/4-5,3/7-8
!
#module 4 : 8-port 1000BaseX Ethernet
!
#module 5 : 8-port 1000BaseX Ethernet
!
#module 6 empty
!
#module 15 : 1-port Multilayer Switch Feature Card
!
#module 16 empty


其中set ip route 0.0.0.0/0.0.0.0 192.168.222.253是否得当？
set vlan 900 name VLAN0900 type ethernet mtu 1500 said 100900 state active 下联3524接网通线路，vlan900的参数是否需要更改？

盼复，谢谢！

success_king

自己顶一下

success_king

折腾了两天，发现如下问题：

pool中的10个地址用完（sh ip nat s显示type generic, total addresses 10, allocated 10 (100%), misses 138），就出现开头所出现问题了：第10以后的ip就出现destination host unreachable

加入如下配置
!
ip nat translation timeout 1800
ip nat translation tcp-timeout 180
ip nat translation udp-timeout 60
ip nat translation port-timeout tcp 21 60

好像也不管用，继续折腾中......

success_king

唉！折腾完了

看了看cisco的教程才知道：原来漏了个overload

现在整个世界清净了