我注意到,问题是,当我尝试访问(ping)远程子网时,具有IOS 12.2的交换机可以“选择”正确的VLAN接口。所有交换机的数据都有
192.168.X.0/24
,语音有10.10.X.0 /24
,因此,如果我尝试ping 192.168.1.2
,则该交换机使用VLAN接口(192.168.20.2
)作为其源ping的接口,如果我尝试ping我的呼叫管理器(10.10.254.1
),则该交换机将使用VLAN接口10.10.248.2
作为其源。 使用IOS 15(新的)的交换机,具有相同的配置并连接到相同类型的路由器(如具有IOS 12.2的交换机),请不要使用正确的VLAN接口。他们始终使用语音VLAN接口(在我的情况下为200),因此,如果我希望从远程设备(当然,取决于远程目标子网)进行回复,则必须选择源接口。由于我使用的是基本相同的配置,但在不同的地方,所以行为异常。新交换机使用“ dual-ipv4-and-ipv6”模板,而旧交换机(12.2)使用“ desktop default”模板。交换机后面的计算机没有任何连接问题,因为路由器将数据包路由到正确的目的地,但是为什么交换机没有?有任何想法吗?
我不确定我的交换机是否支持路由,低于命令“ sh sdm preferred”的结果:
default Default bias
dual-ipv4-and-ipv6 Support both IPv4 and IPv6
lanbase-routing Supports both IPv4 and IPv6 Static Routing
qos QoS bias
这是交换机配置:
Current configuration : 9403 bytes
!
! Last configuration change at 00:09:28 UTC Mon Jun 27 2011 by admin
! NVRAM config last updated at 23:32:34 UTC Sun Jun 26 2011 by admin
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
!
boot-start-marker
boot-end-marker
!
enable secret 5 *Removed*
!
username admin privilege 15 secret 5 *Removed*
no aaa new-model
system mtu routing 1500
!
!
ip domain-name lvdomain.local
ip name-server 192.168.0.43
ip name-server 192.168.0.45
!
mls qos map cos-dscp 0 8 16 24 32 46 48 56
mls qos srr-queue input bandwidth 70 30
mls qos srr-queue input threshold 1 80 90
mls qos srr-queue input priority-queue 2 bandwidth 30
mls qos srr-queue input cos-map queue 1 threshold 2 3
mls qos srr-queue input cos-map queue 1 threshold 3 6 7
mls qos srr-queue input cos-map queue 2 threshold 1 4
mls qos srr-queue input dscp-map queue 1 threshold 2 24
mls qos srr-queue input dscp-map queue 1 threshold 3 48 49 50 51 52 53 54 55
mls qos srr-queue input dscp-map queue 1 threshold 3 56 57 58 59 60 61 62 63
mls qos srr-queue input dscp-map queue 2 threshold 3 32 33 40 41 42 43 44 45
mls qos srr-queue input dscp-map queue 2 threshold 3 46 47
mls qos srr-queue output cos-map queue 1 threshold 3 4 5
mls qos srr-queue output cos-map queue 2 threshold 1 2
mls qos srr-queue output cos-map queue 2 threshold 2 3
mls qos srr-queue output cos-map queue 2 threshold 3 6 7
mls qos srr-queue output cos-map queue 3 threshold 3 0
mls qos srr-queue output cos-map queue 4 threshold 3 1
mls qos srr-queue output dscp-map queue 1 threshold 3 32 33 40 41 42 43 44 45
mls qos srr-queue output dscp-map queue 1 threshold 3 46 47
mls qos srr-queue output dscp-map queue 2 threshold 1 16 17 18 19 20 21 22 23
mls qos srr-queue output dscp-map queue 2 threshold 1 26 27 28 29 30 31 34 35
mls qos srr-queue output dscp-map queue 2 threshold 1 36 37 38 39
mls qos srr-queue output dscp-map queue 2 threshold 2 24
mls qos srr-queue output dscp-map queue 2 threshold 3 48 49 50 51 52 53 54 55
mls qos srr-queue output dscp-map queue 2 threshold 3 56 57 58 59 60 61 62 63
mls qos srr-queue output dscp-map queue 3 threshold 3 0 1 2 3 4 5 6 7
mls qos srr-queue output dscp-map queue 4 threshold 1 8 9 11 13 15
mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14
mls qos queue-set output 1 threshold 1 100 100 50 200
mls qos queue-set output 1 threshold 2 125 125 100 400
mls qos queue-set output 1 threshold 3 100 100 100 400
mls qos queue-set output 1 threshold 4 60 150 50 200
mls qos queue-set output 1 buffers 15 25 40 20
mls qos
!
crypto pki trustpoint TP-self-signed-3287232768
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3287232768
revocation-check none
rsakeypair TP-self-signed-3287232768
!
!
crypto pki certificate chain TP-self-signed-3287232768
certificate self-signed 01
*Removed*
quit
spanning-tree mode pvst
spanning-tree extend system-id
!
!
!
!
!
!
!
!
!
vlan internal allocation policy ascending
!
!
class-map match-all AutoQoS-VoIP-RTP-Trust
match ip dscp ef
class-map match-all AutoQoS-VoIP-Control-Trust
match ip dscp cs3 af31
!
policy-map AutoQoS-Police-CiscoPhone
class AutoQoS-VoIP-RTP-Trust
set dscp ef
police 1000000 8000 exceed-action policed-dscp-transmit
class AutoQoS-VoIP-Control-Trust
set dscp cs3
police 1000000 8000 exceed-action policed-dscp-transmit
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0/1
description *****IP PHONES and PC*****
switchport voice vlan 200
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust device cisco-phone
mls qos trust cos
auto qos trust
spanning-tree portfast
service-policy input AutoQoS-Police-CiscoPhone
!
interface FastEthernet0/2
description *****IP PHONES and PC*****
switchport voice vlan 200
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust device cisco-phone
mls qos trust cos
auto qos trust
spanning-tree portfast
service-policy input AutoQoS-Police-CiscoPhone
!
interface FastEthernet0/3
description *****IP PHONES and PC*****
switchport voice vlan 200
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust device cisco-phone
mls qos trust cos
auto qos trust
spanning-tree portfast
service-policy input AutoQoS-Police-CiscoPhone
!
interface FastEthernet0/4
description *****IP PHONES and PC*****
switchport voice vlan 200
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust device cisco-phone
mls qos trust cos
auto qos trust
spanning-tree portfast
service-policy input AutoQoS-Police-CiscoPhone
!
interface FastEthernet0/5
description *****IP PHONES and PC*****
switchport voice vlan 200
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust device cisco-phone
mls qos trust cos
auto qos trust
spanning-tree portfast
service-policy input AutoQoS-Police-CiscoPhone
!
interface FastEthernet0/6
description *****IP PHONES and PC*****
switchport voice vlan 200
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust device cisco-phone
mls qos trust cos
auto qos trust
spanning-tree portfast
service-policy input AutoQoS-Police-CiscoPhone
!
interface FastEthernet0/7
description *****IP PHONES and PC*****
switchport voice vlan 200
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust device cisco-phone
mls qos trust cos
auto qos trust
spanning-tree portfast
service-policy input AutoQoS-Police-CiscoPhone
!
interface FastEthernet0/8
description *****IP PHONES and PC*****
switchport voice vlan 200
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust device cisco-phone
mls qos trust cos
auto qos trust
spanning-tree portfast
service-policy input AutoQoS-Police-CiscoPhone
!
interface FastEthernet0/9
description *****IP PHONES and PC*****
switchport voice vlan 200
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust device cisco-phone
mls qos trust cos
auto qos trust
spanning-tree portfast
service-policy input AutoQoS-Police-CiscoPhone
!
interface FastEthernet0/10
description *****IP PHONES and PC*****
switchport voice vlan 200
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust device cisco-phone
mls qos trust cos
auto qos trust
spanning-tree portfast
service-policy input AutoQoS-Police-CiscoPhone
!
interface FastEthernet0/11
description *****IP PHONES and PC*****
switchport voice vlan 200
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust device cisco-phone
mls qos trust cos
auto qos trust
spanning-tree portfast
service-policy input AutoQoS-Police-CiscoPhone
!
interface FastEthernet0/12
description *****IP PHONES and PC*****
switchport voice vlan 200
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust device cisco-phone
mls qos trust cos
auto qos trust
spanning-tree portfast
service-policy input AutoQoS-Police-CiscoPhone
!
interface GigabitEthernet0/1
description *****Trunk to FRIAS.3580.1941*****
switchport mode trunk
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust cos
auto qos trust
!
interface GigabitEthernet0/2
description *****Trunk to FRIAS.3580.1941*****
switchport mode trunk
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust cos
auto qos trust
!
interface Vlan1
description *****3580 Data VLAN 1*****
ip address 192.168.26.2 255.255.255.0
no ip route-cache
!
interface Vlan200
description *****3580 Voice VLAN 200*****
ip address 10.10.253.2 255.255.255.0
no ip route-cache
!
ip http server
ip http authentication local
ip http secure-server
!
!
snmp-server community public RO
!
ipv6 access-list IPv6_In_Traffic_Shutdown
deny ipv6 any any
!
!
line con 0
line vty 0 4
logging synchronous
login local
length 0
line vty 5 15
login
!
end
#1 楼
Cisco 2960交换机是支持L3的交换机。如今,交换机通常不再局限于L2,并且路由器/交换机的描述与传统定义不符。您在配置中缺少
ip routing
命令。如果添加此命令,您会发现VLAN SVI可以直接在交换机之间相互路由。可在此处找到有关此功能的更多信息:在第3层交换机上配置VLAN间路由
但是我在交换机上看不到任何路由配置或默认网关,因此我怀疑交换机本身可以到达任何远程网络帮助。我怀疑这里使用的是proxy-arp,而主要的类是“选择” VLAN的东西。
Proxy ARP
评论
您至少需要IP Base许可证才能将其用作第3层交换机。如果获得LAN Base,则它是仅第2层的交换机。
–罗恩·莫潘♦
16年8月19日在0:12
#2 楼
我的猜测是本地网络不会自动添加到路由表中。检查show ip route
是否显示,并在必要时添加本地路由。#3 楼
默认情况下,交换机或路由器使用传出接口,如果您有两个具有相同掩码的传出接口,我认为交换机使用最低的IP地址。我从个人经验中知道,如果您在回送上具有32位掩码ip地址,则如果您未定义源,则交换机将对所有ping使用该ip。在您的情况下,当您对除10.xxx网络之外的另一个子网中的设备执行ping操作时,您不会收到答复,因为该网关不知道其他子网,因为该网关是一个voip网络,因此网关仅知道voip ip地址。 br />#4 楼
您已为语音VLAN配置了接口,请尝试对接口使用以下命令switchport mode dynamic desirable
switchport voice vlan 200
duplex auto
speed auto
mls qos trust device cisco-phone
mls qos trust cos
spanning-tree portfast
no shutdown
并放入
ip default-gateway <ip of router interface>
。
评论
您可以从一种可行的配置发布吗?除了配置外,也许还有一个工作和不工作的show ip路由?
开关为L2
@Abdel您的带有IOS 15.x的2960交换机完全有可能支持路由,这也许可以解释您所看到的内容。请参阅Cisco提供的有关使用IOS 15.0(1)在2960上配置IP路由的此文档:cisco.com/c/en/us/td/docs/switches/lan/catalyst2960/software/…
我在此配置中没有看到ip default-gateway或ip route 0.0.0.0 0.0.0.0命令。如果要从交换机本身ping通,则可能是问题所在。