千家论坛_智能建筑与智能家居技术交流社区
标题: [求助]一个棘手的小问题 [打印本页]
作者: liuguanga 时间: 2005-4-12 09:56
标题: [求助]一个棘手的小问题
分公司用cisco3662与总部cisco7609用串口相连,另有一台2610与3662通过快速以太网相连，几年前有几个分支机构通过isdn和2610相连，现增加一分支机构通过帧中继用串口和2610连接，该分支结构用的cisco1700路由器。3662配置ospf, 在2610配置好静态路由、在1700配置缺省路由后，1700网段的分支机构不能访问总部，请高手指点,应如何配置
具体配置如下
cisco 1700:
interface FastEthernet0
ip address 10.28.150.161 255.255.255.224
speed auto
!
interface Serial0
no ip address
encapsulation frame-relay IETF
frame-relay lmi-type ansi
!
interface Serial0.1 point-to-point
ip address 10.28.157.21 255.255.255.252
frame-relay interface-dlci 16
!
router odr
passive-interface Serial0
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.28.157.22
ip route 10.28.136.0 255.255.255.0 10.28.157.22
no ip http server
cisco 2610
interface Ethernet0/0
ip address 10.28.136.253 255.255.255.0
half-duplex
!
interface Serial0/0
no ip address
encapsulation frame-relay IETF
frame-relay lmi-type ansi
!
interface Serial0/0.1 point-to-point
ip address 10.28.157.22 255.255.255.252
frame-relay interface-dlci 16
!
interface BRI1/0
no ip address
encapsulation ppp
dialer rotary-group 0
dialer-group 1
isdn switch-type basic-net3
no cdp enable
!
interface BRI1/1
no ip address
encapsulation ppp
dialer rotary-group 1
dialer-group 1
isdn switch-type basic-net3
no cdp enable
!
interface BRI1/2
no ip address
encapsulation ppp
dialer rotary-group 2
dialer-group 1
isdn switch-type basic-net3
no cdp enable
!
interface BRI1/3
no ip address
shutdown
isdn switch-type basic-net3
!
interface Dialer0
ip unnumbered Ethernet0/0
encapsulation ppp
dialer in-band
dialer idle-timeout 600
dialer map ip 11.1.1.1 name ls803
dialer hold-queue 10
dialer load-threshold 100 either
dialer-group 1
peer default ip address pool lcpool
no cdp enable
ppp authentication pap chap
ppp multilink
!
interface Dialer1
ip unnumbered Ethernet0/0
encapsulation ppp
dialer in-band
dialer idle-timeout 600
dialer map ip 12.1.1.1 name ck803
dialer hold-queue 10
dialer load-threshold 100 either
dialer-group 1
peer default ip address pool lcpool
no cdp enable
ppp authentication pap chap
ppp multilink
!
interface Dialer2
ip unnumbered Ethernet0/0
encapsulation ppp
dialer in-band
dialer idle-timeout 600
dialer map ip 13.1.1.1 name lc803
dialer hold-queue 10
dialer load-threshold 100 either
dialer-group 1
peer default ip address pool lcpool
no cdp enable
ppp authentication pap chap
ppp multilink
!
router odr
!
ip local pool lcpool 10.28.136.247 10.28.136.250
ip classless
ip route 0.0.0.0 0.0.0.0 10.28.136.254
ip route 10.28.150.160 255.255.255.224 10.28.157.21
ip route 11.0.0.0 255.0.0.0 11.1.1.1
ip route 11.1.1.1 255.255.255.255 Dialer0
ip route 12.0.0.0 255.0.0.0 12.1.1.1
ip route 12.1.1.1 255.255.255.255 Dialer1
ip route 13.0.0.0 255.0.0.0 13.1.1.1
ip route 13.1.1.1 255.255.255.255 Dialer2
ip http server
ip pim bidir-enable
3662:
interface Loopback0
ip address 10.28.35.71 255.255.255.255
h323-gateway voip interface
h323-gateway voip id gk-qd.sd.fy ipaddr 10.28.159.66 1718
h323-gateway voip h323-id gw-lc-qd.sd.fy
h323-gateway voip tech-prefix 1#
h323-gateway voip bind srcaddr 10.28.35.71
!
interface FastEthernet0/0
ip address 10.28.136.254 255.255.255.0
ip access-group 115 in
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
no ip mroute-cache
shutdown
duplex auto
speed auto
no cdp enable
!
interface Serial1/0
ip address 10.28.128.18 255.255.255.252
no fair-queue
!
interface BRI1/0
no ip address
encapsulation ppp
no ip route-cache
no ip mroute-cache
dialer rotary-group 1
dialer-group 1
isdn switch-type basic-net3
isdn tei-negotiation first-call
no cdp enable
ppp multilink
!
interface Dialer1
ip unnumbered FastEthernet0/0
encapsulation ppp
dialer-group 1
peer default ip address pool isdn
no cdp enable
ppp authentication chap callin
!
router ospf 66
log-adjacency-changes
area 5 stub
network 10.28.35.71 0.0.0.0 area 5
network 10.28.128.18 0.0.0.0 area 5
network 10.28.136.0 0.0.0.255 area 5
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial1/0
ip route 0.0.0.0 0.0.0.0 10.28.34.24 150
ip route 10.28.150.160 255.255.255.224 10.28.136.253
ip route 10.28.157.20 255.255.255.252 10.28.136.253
no ip http server
我个人认为问题在3662上,但是一直找不到具体原因,请高手指点,
我查看路由表没什么问题,
作者: liuguanga 时间: 2005-4-12 15:00
不好意思，一个访问列表，不应该是它的问题
access-list 115 deny tcp any any eq 4444
access-list 115 deny udp any any eq tftp
access-list 115 deny tcp any any eq 135
access-list 115 deny udp any any eq 135
access-list 115 deny tcp any any eq 139
access-list 115 deny udp any any eq netbios-ss
access-list 115 deny tcp any any eq 445
access-list 115 deny udp any any eq 445
access-list 115 deny tcp any any eq 593
access-list 115 deny udp any any eq 593
access-list 115 deny tcp any any eq echo
access-list 115 deny tcp any any eq chargen
access-list 115 deny tcp any any eq 136
access-list 115 deny tcp any any eq 137
access-list 115 deny tcp any any eq 138
access-list 115 deny tcp any any eq 389
access-list 115 deny udp any any eq 136
access-list 115 deny udp any any eq netbios-ns
access-list 115 deny udp any any eq 389
access-list 115 deny udp any any eq 1434
access-list 115 deny udp any any eq 1433
access-list 115 deny tcp any any eq 9996
access-list 115 deny tcp any any eq 5554
access-list 115 deny tcp any any eq 1068
access-list 115 permit ip any any
dialer-list 1 protocol ip permit
作者: liuguanga 时间: 2005-4-12 16:20
找不到3662的下一跳，就是7609的串口地址
| 欢迎光临 千家论坛_智能建筑与智能家居技术交流社区 (http://bbs.qianjia.com:8020/) |
Powered by Discuz! X3.2 |