如圖網關在FW插卡上麵

在FW插卡上寫了ACL

然後在VLAN IF裏麵調用

然後做完這些理論上806是無法和172.31.0.0段通的


補充dhcp網關信息,但是分配出去的是核心上做dhcp的,但是網關在核心上的FW插卡上
(0)
方向改一下再試試
(0)
改變不了方向
acl rule的源目地址改一下方向
acl advanced 3806 description ==Deny-NW-to-Wlan-in-valn806== rule 5 deny ip source 172.31.0.0 0.0.0.255 destination 172.31.232.0 0.0.3.255 Vlan806 UP UP 172.31.232.62 Vlan2000 UP UP 172.31.250.80 Brief information on interfaces in bridge mode: Link: ADM - administratively down; Stby - standby Speed: (a) - auto Duplex: (a)/A - auto; H - half; F - full Type: A - access; T - trunk; H - hybrid Interface Link Speed Duplex Type PVID Description GE1/0/1 UP 1G(a) F(a) A 804 GE1/0/2 UP 1G(a) F(a) A 804 GE1/0/3 UP 1G(a) F(a) A 804 GE1/0/4 UP 1G(a) F(a) A 804 GE1/0/5 UP 1G(a) F(a) A 804 GE1/0/6 UP 1G(a) F(a) A 804 GE1/0/7 UP 1G(a) F(a) A 804 <ZYB2_9F_W_S5130_24POE-1> <ZYB2_9F_W_S5130_24POE-1>ping -a 172.31.232.62 172.31.0.1 Ping 172.31.0.1 (172.31.0.1) from 172.31.232.62: 56 data bytes, press CTRL_C to break 56 bytes from 172.31.0.1: icmp_seq=0 ttl=255 time=8.333 ms 56 bytes from 172.31.0.1: icmp_seq=1 ttl=255 time=1.198 ms 56 bytes from 172.31.0.1: icmp_seq=2 ttl=255 time=4.282 ms 56 bytes from 172.31.0.1: icmp_seq=3 ttl=255 time=1.277 ms 56 bytes from 172.31.0.1: icmp_seq=4 ttl=255 time=5.767 ms
您好,請知:
從反饋的信息來看,不排除可能ACL有攔截,可嚐試把ACL去掉後是否能訪問,如果可以,那就是ACL的問題。
可嚐試調整ACL的方向或調用到其他接口比如上行接口看下是否能生效,但是ACL的調整可能會影響業務,建議窗口期操作。
(0)
親~登錄後才可以操作哦!
確定你的郵箱還未認證,請認證郵箱或綁定手機後進行當前操作
舉報
×
侵犯我的權益
×
侵犯了我企業的權益
×
抄襲了我的內容
×
原文鏈接或出處
誹謗我
×
對根叔社區有害的內容
×
不規範轉載
×
舉報說明
acl advanced 3806 description ==Deny-NW-to-Wlan-in-valn806== rule 5 deny ip source 172.31.0.0 0.0.0.255 destination 172.31.232.0 0.0.3.255 Vlan806 UP UP 172.31.232.62 Vlan2000 UP UP 172.31.250.80 Brief information on interfaces in bridge mode: Link: ADM - administratively down; Stby - standby Speed: (a) - auto Duplex: (a)/A - auto; H - half; F - full Type: A - access; T - trunk; H - hybrid Interface Link Speed Duplex Type PVID Description GE1/0/1 UP 1G(a) F(a) A 804 GE1/0/2 UP 1G(a) F(a) A 804 GE1/0/3 UP 1G(a) F(a) A 804 GE1/0/4 UP 1G(a) F(a) A 804 GE1/0/5 UP 1G(a) F(a) A 804 GE1/0/6 UP 1G(a) F(a) A 804 GE1/0/7 UP 1G(a) F(a) A 804 <ZYB2_9F_W_S5130_24POE-1> <ZYB2_9F_W_S5130_24POE-1>ping -a 172.31.232.62 172.31.0.1 Ping 172.31.0.1 (172.31.0.1) from 172.31.232.62: 56 data bytes, press CTRL_C to break 56 bytes from 172.31.0.1: icmp_seq=0 ttl=255 time=8.333 ms 56 bytes from 172.31.0.1: icmp_seq=1 ttl=255 time=1.198 ms 56 bytes from 172.31.0.1: icmp_seq=2 ttl=255 time=4.282 ms 56 bytes from 172.31.0.1: icmp_seq=3 ttl=255 time=1.277 ms 56 bytes from 172.31.0.1: icmp_seq=4 ttl=255 time=5.767 ms