网络工程 - Aruba/HPE 5400R ZL VLAN 接口未 ping - 吾爱随笔录

我认为这将是一个简单的。

我正在尝试设置 Aruba/HPE 5412R ZL2 机箱交换机。我在交换机上设置了几个 VLAN，并在它们之间建立了路由。所有的 VLAN 都有分配给它们的 IP 地址。

但是，我分配给 VLAN 的地址无法访问，除非 VLAN 有一些标记/未标记的端口并且某些东西已插入这些端口之一。这向我表明，交换机有选择地禁用 IP 地址，直到连接了某些东西。对于至少其中一个 VLAN，我希望交换机不这样做，因为这个 IP 地址将是我指定为管理 IP 的地址。

我在网络上拥有的其他 5400 交换机（不是我配置的）具有 VLAN 地址，这些地址没有分配给任何东西，但仍然可以 ping 通，所以我认为某处必须有一个启用命令，我只是找不到它。任何人都可以提出任何建议吗？

开关配置如下（尚不完整）：

    Running configuration:

    ; J9851A Configuration Editor; Created on release #KB.16.04.0009
    ; Ver #11:10.9b.7f.bf.bb.ff.7c.59.fc.7b.ff.ff.fc.ff.ff.3f.ef:90
    hostname "HTGFS-CoreSw-HubRm-001"
    module A type j9986a
    module B type j9986a
    module C type j9986a
    module D type j9986a
    module E type j9986a
    module F type j9986a
    module K type j9990a
    module L type j9990a
    console idle-timeout 2400
    console idle-timeout serial-usb 2400
    trunk K23-K24,L23-L24 trk1 lacp
    mvrp enable
    telnet-server listen data
    web-management listen data
    ip access-list extended "WirelessNetworks"
         10 deny ip 172.24.0.0 0.0.255.255 10.0.0.0 0.255.255.255
         20 deny ip 172.21.0.0 0.0.255.255 10.0.0.0 0.255.255.255
         30 deny ip 172.22.0.0 0.0.255.255 10.0.0.0 0.255.255.255
         40 deny ip 172.23.0.0 0.0.255.255 10.0.0.0 0.255.255.255
         50 deny ip 172.25.0.0 0.0.255.255 10.0.0.0 0.255.255.255
         60 deny ip 172.26.0.0 0.0.255.255 10.0.0.0 0.255.255.255
         70 deny ip 172.27.0.0 0.0.255.255 10.0.0.0 0.255.255.255
         80 deny ip 172.28.0.0 0.0.255.255 10.0.0.0 0.255.255.255
         90 deny ip 172.29.0.0 0.0.255.255 10.0.0.0 0.255.255.255
         100 deny ip 172.30.0.0 0.0.255.255 10.0.0.0 0.255.255.255
         110 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
       exit
    ip ssh listen data
    ip route 0.0.0.0 0.0.0.0 192.168.1.150
    ip route 172.16.0.0 255.255.0.0 192.168.1.1
    ip route 192.168.1.0 255.255.255.0 192.168.1.1
    ip router-id 10.0.0.2
    ip routing
    ip multicast-routing
    snmp-server community "public" unrestricted
    snmp-server listen data
    oobm
       disable
       no ip address
       exit
    router ospf
       area backbone
       redistribute connected
       enable
       exit
    router pim
       enable
       exit
    vlan 1
       name "DEFAULT_VLAN"
       no untagged
     A1-A24,B1-B24,C1-C24,D1-D24,E1-E24,F1-F24,K1-K14,K17-K20,L1-L14,L17-L19
       untagged K15-K16,K21-K22,L15-L16,L20-L22,Trk1
       no ip address
       exit
    vlan 56
       name "***CCTV***"
       untagged K17-K20,L17-L19
       tagged L20,Trk1
       no ip address
       ip igmp
       exit
    vlan 100
       name "WAN"
       tagged L20,Trk1
       ip address 10.0.0.2 255.255.255.0
       ip address 192.168.1.20 255.255.240.0
       ip igmp
       ip ospf 10.0.0.2 area backbone
       exit
    vlan 140
       name "Free School Data Range 1"
       untagged A1-A24,C1-C24,E1-E24
       ip address 10.2.140.1 255.255.254.0
       ip helper-address 10.5.200.10
       ip helper-address 10.5.200.11
       ip igmp
       exit
    vlan 144
       name "Free School Data Range 2"
       untagged B1-B24,D1-D24,F1-F24
       ip address 10.2.144.1 255.255.254.0
       ip helper-address 10.5.200.10
       ip helper-address 10.5.200.11
       ip igmp
       exit
    vlan 200
       name "Free School Server Range"
       untagged K1,L1
       ip address 10.2.200.1 255.255.255.0
       ip helper-address 10.5.200.11
       ip helper-address 10.5.200.10
       ip igmp
       exit
    vlan 210
       name "Free School Server Management"
       untagged K2,L2
       ip address 10.2.210.1 255.255.255.0
       ip igmp
       exit
    vlan 212
       name "Free School Network Management"
       ip address 10.2.212.1 255.255.255.0
       exit
    vlan 214
       name "Free School Wifi Management"
       untagged K3-K14,L3-L14
       ip address 10.2.214.1 255.255.255.0
       ip helper-address 10.5.200.10
       ip helper-address 10.5.200.11
       exit
    vlan 218
       name "CCTV"
       ip address 10.2.218.1 255.255.255.0
       ip igmp
       exit
    vlan 220
       name "Voice"
       tagged A1-A24,B1-B24,C1-C24,D1-D24,E1-E24,F1-F24,K1-K20,L1-L19
       ip address 10.2.220.1 255.255.255.0
       ip helper-address 10.5.200.10
       ip helper-address 10.5.200.11
       ip igmp
       voice
       exit
    vlan 222
       name "Free School Guest Wifi"
       tagged A1-A24,B1-B24,C1-C24,D1-D24,E1-E24,F1-F24,K1-K20,L1-L19
       ip address 172.22.16.1 255.255.252.0
       ip helper-address 10.5.200.10
       ip helper-address 10.5.200.11
       ip igmp
       exit
    vlan 224
       name "Free School Trusted Wifi"
       tagged A1-A24,B1-B24,C1-C24,D1-D24,E1-E24,F1-F24,K1-K20,L1-L19
       ip address 10.2.224.1 255.255.240.0
       ip helper-address 10.5.200.10
       ip helper-address 10.5.200.11
       ip igmp
       exit
    vlan 240
       name "Free School BYOD Wifi"
       tagged A1-A24,B1-B24,C1-C24,D1-D24,E1-E24,F1-F24,K1-K20,L1-L19
       ip address 172.22.0.1 255.255.248.0
       ip helper-address 10.5.200.11
       ip helper-address 10.5.200.10
       exit
    spanning-tree
    spanning-tree A1 admin-edge-port
    spanning-tree A1 bpdu-protection
    <same spanning tree config for the other ports>
    spanning-tree Trk1 priority 4
    spanning-tree bpdu-protection-timeout 300 priority 0
    tftp server listen data
    loop-protect A1-A24,B1-B24,C1-C24,D1-D24,E1-E24,F1-F24,K1-K20,L1-L19
    loop-protect disable-timer 10

我无法 ping 通的 VLAN 接口是 212 和 218，可以来自交换机的管理接口，也可以来自连接到网络的计算机。212 可能永远不会有任何端口（未）标记。

谢谢