求助H3C S3600-28TP-SI 配置

发布于2021-12-31 17:31:09

求助设置,我划分了4个VLAN 1 2 3 4 其中1可以访问2 3 4 2 3 4 可以访问1 但是彼此不能访问我配置以后 1跟2 3 4 只能ping通,但是不能访问PC1在VLAN1里,IP

1个回答
admin
网友回答2021-12-31
交换机的配置如下dis cu# sysname XW#radius scheme system#domain system#acl number 3100 rule 0 deny ip rule 1 permit ip destination 192.168.1.0 0.0.0.255 rule 2 permit ip destination 192.168.2.0 0.0.0.255 rule 3 permit ip destination 192.168.3.0 0.0.0.255 rule 4 permit ip destination 192.168.4.0 0.0.0.255acl number 3200 rule 0 deny ip rule 1 permit ip destination 192.168.1.0 0.0.0.255 rule 2 permit ip destination 192.168.2.0 0.0.0.255acl number 3300 rule 0 deny ip rule 1 permit ip destination 192.168.1.0 0.0.0.255 rule 3 permit ip destination 192.168.3.0 0.0.0.255acl number 3400 rule 0 deny ip rule 1 permit ip destination 192.168.1.0 0.0.0.255 rule 4 permit ip destination 192.168.4.0 0.0.0.255#vlan 1 description shangwang#vlan 2 to 4#interface Vlan-interface1 ip address 192.168.1.2 255.255.255.0#interface Vlan-interface2 description yewu ip address 192.168.2.1 255.255.255.0#interface Vlan-interface3 description shengguan+cangguan ip address 192.168.3.1 255.255.255.0#interface Vlan-interface4 description renshi+jihe ip address 192.168.4.1 255.255.255.0#interface Aux1/0/0#interface Ethernet1/0/1 packet-filter inbound ip-group 3100 rule 0 packet-filter inbound ip-group 3100 rule 1 packet-filter inbound ip-group 3100 rule 2 packet-filter inbound ip-group 3100 rule 3 packet-filter inbound ip-group 3100 rule 4#interface Ethernet1/0/5 port access vlan 2 packet-filter inbound ip-group 3200 rule 0 packet-filter inbound ip-group 3200 rule 1 packet-filter inbound ip-group 3200 rule 2#interface Ethernet1/0/9 port access vlan 3 packet-filter inbound ip-group 3300 rule 0 packet-filter inbound ip-group 3300 rule 1 packet-filter inbound ip-group 3300 rule 3#interface Ethernet1/0/13 port access vlan 4 packet-filter inbound ip-group 3400 rule 0 packet-filter inbound ip-group 3400 rule 1 packet-filter inbound ip-group 3400 rule 4#return谁能帮我找找错误出在哪里,或者缺少什么设置。

回到
顶部