将多个 VLAN 中继到 3650 交换机上的单个中继端口

网络工程 思科 路由 局域网 数据包跟踪器 树干
2022-03-03 23:14:53

早晨：

我是 Cisco Packet Tracer 世界的新手，我正在为一个 uni 项目创建一个网络。到目前为止，我所拥有的是：

5 个 VLAN（子网划分为 192.168.2.0/26、192.168.3.0/36 等）

所有都连接到 3650 交换机上的端口 Gig 1/0/2 - 1/0/6

终端设备能够相应地与所有相应的 VLAN 进行通信。

VLAN 都在交换机处终止，并且（我相信）中继到具有 IP 192.168.40.1/30 的端口 1/0/24。然后将端口 1/0/24 连接到 IP 为 192.168.40.2 的通用 PT 路由器的端口 9/0 上的端口，这也是默认的 IP 路由器（最后的网关）。

从那里，路由器连接到另一个路由器，这两个路由器都在 192.168.50.0/30 的子网中，然后该路由器连接到 192.168.60.0/30 子网中的另一个 3650 交换机。

路由器和交换机可以毫无问题地相互 ping 通。我已经使用 EIGRP 设置了路由。

我似乎遇到的问题是，无论我尝试什么，我都无法让终端设备的数据包比中继端口更远。以下示例 ping 结果：

ping 交换机：

C:>ping 192.168.40.1 ping 192.168.40.1 32字节数据：

来自 192.168.40.1 的回复：bytes=32 time=11ms TTL=255 来自 192.168.40.1 的回复：bytes=32 time=35ms TTL=255 来自 192.168.40.1 的回复：bytes=32 time=30ms TTL=255 来自 192.168.40.1 的回复：字节=32 时间=36ms TTL=255

ping 路由器

C:>ping 192.168.40.2

用 32 字节的数据 ping 192.168.40.2：

请求超时。请求超时。请求超时。请求超时。

Switch#show protocols

Global values:

  Internet Protocol routing is enabled

GigabitEthernet1/0/2 is up, line protocol is up

GigabitEthernet1/0/3 is up, line protocol is up

GigabitEthernet1/0/4 is up, line protocol is up

GigabitEthernet1/0/5 is up, line protocol is up

GigabitEthernet1/0/6 is up, line protocol is up

GigabitEthernet1/0/24 is up, line protocol is up

  Internet address is 192.168.40.1/30

Vlan2 is up, line protocol is up

  Internet address is 192.168.2.62/26

Vlan3 is up, line protocol is up

  Internet address is 192.168.3.62/26

Vlan4 is up, line protocol is up

  Internet address is 192.168.4.62/26

Vlan5 is up, line protocol is up

  Internet address is 192.168.5.62/26

Vlan6 is up, line protocol is up

  Internet address is 192.168.6.62/26

运行配置（Sanitised-ish）

Switch#show running-config
Building configuration...

Current configuration : 2815 bytes
!
version 16.3.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Switch!
!
ip dhcp excluded-address 192.168.2.1 192.168.2.10
ip dhcp excluded-address 192.168.3.1 192.168.3.10
ip dhcp excluded-address 192.168.4.1 192.168.4.10
ip dhcp excluded-address 192.168.5.1 192.168.5.10
ip dhcp excluded-address 192.168.6.1 192.168.6.10
!
ip dhcp pool vlan2
 network 192.168.2.0 255.255.255.192
 default-router 192.168.2.62
 dns-server 8.8.8.8
ip dhcp pool vlan3
 network 192.168.3.0 255.255.255.192
 default-router 192.168.3.62
 dns-server 8.8.8.8
ip dhcp pool vlan4
 network 192.168.4.0 255.255.255.192
 default-router 192.168.4.62
 dns-server 8.8.8.8
ip dhcp pool vlan5
 network 192.168.5.0 255.255.255.192
 default-router 192.168.5.62
 dns-server 8.8.8.8
ip dhcp pool vlan6
 network 192.168.6.0 255.255.255.192
 default-router 192.168.6.62
 dns-server 8.8.8.8!
!
ip cef
ip routing
!
no ipv6 cef!
!
spanning-tree mode pvst!
!
interface GigabitEthernet1/0/2
 switchport access vlan 2
!
interface GigabitEthernet1/0/3
 switchport access vlan 3
!
interface GigabitEthernet1/0/4
 switchport access vlan 4
!
interface GigabitEthernet1/0/5
 switchport access vlan 5
!
interface GigabitEthernet1/0/6
 switchport access vlan 6
!
interface GigabitEthernet1/0/24
 no switchport
 ip address 192.168.40.1 255.255.255.252
 duplex auto
 speed auto
!
interface Vlan1
 no ip address
 shutdown
!
interface Vlan2
 mac-address 0004.9aa1.d701
 ip address 192.168.2.62 255.255.255.192
!
interface Vlan3
 mac-address 0004.9aa1.d702
 ip address 192.168.3.62 255.255.255.192
!
interface Vlan4
 mac-address 0004.9aa1.d703
 ip address 192.168.4.62 255.255.255.192
!
interface Vlan5
 mac-address 0004.9aa1.d704
 ip address 192.168.5.62 255.255.255.192
!
interface Vlan6
 mac-address 0004.9aa1.d705
 ip address 192.168.6.62 255.255.255.192
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.40.2 
!
ip flow-export version 9

!
line con 0
!
line aux 0
!
line vty 0 4
 login
!
end

路由器 1 配置（已清理）

Router#show running-config 
Building configuration...

Current configuration : 707 bytes
!
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Router
!
no ip cef
no ipv6 cef

!
interface GigabitEthernet8/0
 ip address 192.168.50.1 255.255.255.252
!
interface GigabitEthernet9/0
 ip address 192.168.40.2 255.255.255.252
 duplex auto
 speed auto
!
router eigrp 10
 network 192.168.40.0 0.0.0.3
 network 192.168.50.0 0.0.0.3
 auto-summary
!
router ospf 1
 log-adjacency-changes
 network 192.168.40.0 0.0.0.3 area 0
 network 192.168.50.0 0.0.0.3 area 0
!
ip classless
!
ip flow-export version 9!
!
line con 0
!
line aux 0
!
line vty 0 4
 login!
!
end

IP 路由

Switch#show ip rout
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
       * - candidate default, U - per-user static route, o - ODR
       P - periodic downloaded static route

Gateway of last resort is 192.168.40.2 to network 0.0.0.0

     192.168.2.0/26 is subnetted, 1 subnets
C       192.168.2.0 is directly connected, Vlan2
     192.168.3.0/26 is subnetted, 1 subnets
C       192.168.3.0 is directly connected, Vlan3
     192.168.4.0/26 is subnetted, 1 subnets
C       192.168.4.0 is directly connected, Vlan4
     192.168.5.0/26 is subnetted, 1 subnets
C       192.168.5.0 is directly connected, Vlan5
     192.168.6.0/26 is subnetted, 1 subnets
C       192.168.6.0 is directly connected, Vlan6
     192.168.40.0/30 is subnetted, 1 subnets
C       192.168.40.0 is directly connected, GigabitEthernet1/0/24
D    192.168.50.0/24 [90/3072] via 192.168.40.2, 00:13:12, GigabitEthernet1/0/24
D    192.168.60.0/24 [90/3328] via 192.168.40.2, 00:13:12, GigabitEthernet1/0/24
S*   0.0.0.0/0 [1/0] via 192.168.40.2

根据进一步的研究，我做了以下工作：

Switch>show interfaces gigabitEthernet 1/0/23 switchport 
Name: Gig1/0/23
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: down
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 100 (Inactive)
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk private VLANs: none
Operational private-vlan: none
Trunking VLANs Enabled: 2-6
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL
Protected: false
Appliance trust: none

Router#show running-config 
Building configuration...

Current configuration : 978 bytes
!
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Router
!
no ip cef
no ipv6 cef
!
interface GigabitEthernet8/0
 ip address 192.168.50.1 255.255.255.252
!
interface GigabitEthernet9/0
 no ip address
 duplex auto
 speed auto
 shutdown
!
interface GigabitEthernet9/0.1
 encapsulation dot1Q 1 native
 ip address 192.168.2.62 255.255.255.192
!
interface GigabitEthernet9/0.2
 encapsulation dot1Q 2
 ip address 192.168.3.62 255.255.255.192
!
interface GigabitEthernet9/0.3
 encapsulation dot1Q 3
 ip address 192.168.4.62 255.255.255.192
!
interface GigabitEthernet9/0.4
 encapsulation dot1Q 4
 ip address 192.168.5.62 255.255.255.192
!
interface GigabitEthernet9/0.5
 encapsulation dot1Q 5
 ip address 192.168.6.62 255.255.255.192
!
ip classless
!
ip flow-export version 9
!
line con 0
!
line aux 0
!
line vty 0 4
 login
!
!
!
end

我觉得我快要破解它了，但是从 1/0/23 到 9/0 的链接仍然断开，我不确定如何启动它来测试它。

1个回答

您的（第 3 层）交换机上没有启用 EIGRP，因此路由器和其他设备不知道如何访问交换机上的网络。

顺便说一句，你不是中继 VLAN。VLAN 在交换机上终止。端口 1/0/24 是路由接口，而不是中继端口。

其它你可能感兴趣的问题
上一篇这可能是什么类型的攻击？（Wireshark pcap） 下一篇路由器和交换机路由协议配置