请教交换机间ping不通的问题

[jialingwang4038]

交换机间出厂配置，2个端口仅配置sw mode trunk.
100.1可以ping100.2和100.3，但100.2和100.3不能互ping,导致下挂的服务器间不能通行，请指导下啥问题？
谢谢

[木木丶 · Accepted solution]

no sh CISco的设备默认都是关闭的，请打开端口

[l_enough]

不贴配置都是算流氓。同一子网，你当傻瓜交换机去用都可以通了，不需要trunk什么的。
至于你说的单向通，哎，贴配置吧，估计native vlan问题。

[jialingwang4038]

172.16.100.2：
!
version 12.2
no service pad
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname DMZ-PRI
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$3M34$HVKZMcMjmtD/P4XatfPzJ1
enable password 7 12090404011C03162E
aaa session-id common
clock timezone GMT 8
system mtu routing 1500
ip subnet-zero
!
!
ip domain-name chinasee.com
login block-for 60 attempts 3 within 600
!
!
crypto pki trustpoint TP-self-signed-2309478400
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2309478400
revocation-check none
rsakeypair TP-self-signed-2309478400
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
ip ssh authentication-retries 5
ip ssh version 2
!
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface GigabitEthernet0/3
!
interface GigabitEthernet0/4
!
interface GigabitEthernet0/5
!
interface GigabitEthernet0/6
!
interface GigabitEthernet0/7
!
interface GigabitEthernet0/8
!
interface GigabitEthernet0/9
!
interface GigabitEthernet0/10
!
interface GigabitEthernet0/11
!
interface GigabitEthernet0/12
!
interface GigabitEthernet0/13
!
interface GigabitEthernet0/14
!
interface GigabitEthernet0/15
!
interface GigabitEthernet0/16
!
interface GigabitEthernet0/17
!
interface GigabitEthernet0/18
!
interface GigabitEthernet0/19
!
interface GigabitEthernet0/20
!
interface GigabitEthernet0/21
!
interface GigabitEthernet0/22
!
interface GigabitEthernet0/23
switchport mode trunk
!
interface GigabitEthernet0/24
switchport mode trunk
!
interface Vlan1
ip address 172.16.100.2 255.255.255.0
no ip route-cache
!
ip default-gateway 172.16.100.1
ip http server
ip http secure-server
!
control-plane
!
!
line con 0
exec-timeout 20 0
password 7 04680C0C1C2449440113554743
line vty 0 4
exec-timeout 20 0
password 7 1336101818090120232E786364
transport input ssh
line vty 5 15
exec-timeout 20 0
password 7 0120010E480E030529461E5948
transport input ssh
!
end

[jialingwang4038]

l_enough1 发表于 2019-8-19 22:52
不贴配置都是算流氓。同一子网，你当傻瓜交换机去用都可以通了，不需要trunk什么的。
至于你说的单向通， ...

是啊 是不是要把配置删了

[jialingwang4038]

172.16.100.3 ：
version 12.2
no service pad
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname DMZ-SEC
!
boot-start-marker
boot-end-marker
!
!
aaa session-id common
clock timezone GMT 8
system mtu routing 1500
ip subnet-zero
!
!
ip domain-name chinasee.com
login block-for 60 attempts 3 within 600
!
!
crypto pki trustpoint TP-self-signed-2309482624
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2309482624
revocation-check none
rsakeypair TP-self-signed-2309482624
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
ip ssh authentication-retries 5
ip ssh version 2
!
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface GigabitEthernet0/3
!
interface GigabitEthernet0/4
!
interface GigabitEthernet0/5
!
interface GigabitEthernet0/6
!
interface GigabitEthernet0/7
!
interface GigabitEthernet0/8
!
interface GigabitEthernet0/9
!
interface GigabitEthernet0/10
!
interface GigabitEthernet0/11
!
interface GigabitEthernet0/12
!
interface GigabitEthernet0/13
!
interface GigabitEthernet0/14
!
interface GigabitEthernet0/15
!
interface GigabitEthernet0/16
!
interface GigabitEthernet0/17
!
interface GigabitEthernet0/18
!
interface GigabitEthernet0/19
!
interface GigabitEthernet0/20
!
interface GigabitEthernet0/21
!
interface GigabitEthernet0/22
!
interface GigabitEthernet0/23
switchport mode trunk
!
interface GigabitEthernet0/24
switchport mode trunk
!
interface Vlan1
ip address 172.16.100.3 255.255.255.0
no ip route-cache
!
ip default-gateway 172.16.100.1
ip http server
ip http secure-server
!
!
control-plane
!
!
line con 0
exec-timeout 20 0
password 7 097F49030A0012180306547A7A
line vty 0 4
access-class 110 in
exec-timeout 20 0
password 7 03375C01150A24464603495546
transport input ssh
line vty 5 15
access-class 110 in
exec-timeout 20 0
password 7 097F49030A0012180306547A7A
transport input ssh
!

[l_enough]

下面两台中间的链路不是802.3ad吗，你这样做即使生成树Block也会走上没关系的，是不是有什么其他配置没贴。不会不通的。

[jialingwang4038]

l_enough1 发表于 2019-8-20 15:05
下面两台中间的链路不是802.3ad吗，你这样做即使生成树Block也会走上没关系的，是不是有什么其他配置没贴。 ...

其他一点无关紧要的配置，找不到问题，我准备删了config再试试

[Steven2016]

100.1的配置有吗？

[kongchao2013]

172.16.100.1是什么设备

[fortune]

100.1是ASA ？ ASA 默认禁ping哦

[jialingwang4038]

解决了，是stp禁了端口