取消
显示结果 
搜索替代 
您的意思是: 
cancel
5607
查看次数
0
有帮助
7
回复

小网管求助思科路由器基本上网配置问题!求老司机指点!

qpiori
Level 1
Level 1
之前网管离职了,账户密码全部没有了,本人恢复后重新按照教程配置后,本地电脑可以正确获取到IP参数,但是就是上不去网,ping不到网关,换到界面管理的一个路由器上同样的参数直接就上去了,IP参数绝对没问题的。求老司机帮忙看看配置哪里有问题,感激不尽!
*Mar 4 10:28:58.571: %SYS-5-CONFIG_I: Configured from console by console
Building configuration...
Current configuration : 1611 bytes
!
! Last configuration change at 10:28:58 UTC Sat Mar 4 2017
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ****
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$d.FM$U5zcdLWFfNMyjoBTU0Lgu1
enable password ****
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
ip dhcp excluded-address 192.168.15.1
!
ip dhcp pool ssjb15
network 192.168.15.0 255.255.255.0
default-router 192.168.15.1
dns-server 202.103.24.68 114.114.114.114
!
!
!
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
!
cts logging verbose
!
!
license udi pid CISCO2901/K9 sn FTX174283EE
!
!
!
redundancy
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
!
interface GigabitEthernet0/0
ip address 120.202.**.39 255.255.255.0
ip nat outside
ip virtual-reassembly in
duplex full
speed auto
!
interface GigabitEthernet0/1
ip address 192.168.15.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
duplex full
speed auto
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat pool nanpool 120.202.**.39 120.202.**.39 netmask 255.255.255.248
ip nat inside source list 1 pool nanpool overload
ip route 0.0.0.0 0.0.0.0 120.202.**.1
!
!
!
access-list 1 permit 192.168.0.0 0.0.0.255
!
control-plane
!
!
!
line con 0
password ****
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
exec-timeout 5 0
password ****
login
transport input none
!
scheduler allocate 20000 1000
!
end
7 条回复7

one-time
Level 13
Level 13
感谢您的提问!稍后会有小伙伴为您解答的!

Mansur
Spotlight
Spotlight
ping不通网关的话,检查下二层问题。交换机的vlan什么的.
路由器的nat的acl写错了,现在匹配的是192.168.0.0/24,改成下面的:
access-list 1 permit 192.168.15.0 0.0.0.255
还有公网地址注意掩码。你们公司应该不会直接给一个C类的IP段吧。

cco061800
Spotlight
Spotlight
ip nat inside source list 1 interface GigabitEthernet0/0 overload
access-list 1 permit 192.168.15.0 0.0.0.255
sho ip nat statistics
sho ip nat translations

qpiori
Level 1
Level 1
maguanghua2013 发表于 2017-3-7 13:43
ping不通网关的话,检查下二层问题。交换机的vlan什么的.
路由器的nat的acl写错了,现在匹配的是192.168 ...

感谢 ! 我电脑直接接在GigabitEthernet0/1上试的,公网地址就是移动公司给的,配置在普通路由器上立刻就可以上网。

qpiori
Level 1
Level 1
cco061800 发表于 2017-3-7 13:58
ip nat inside source list 1 interface GigabitEthernet0/0 overload
access-list 1 permit 192.168.15.0 ...

感谢!!!

qpiori
Level 1
Level 1
cco061800 发表于 2017-3-7 13:58
ip nat inside source list 1 interface GigabitEthernet0/0 overload
access-list 1 permit 192.168.15.0 ...

改成ip nat inside source list 1 interface GigabitEthernet0/0 overload后
这条还需要吗?
ip nat pool nanpool 120.202.**.39 120.202.**.39 netmask 255.255.255.248

qpiori
Level 1
Level 1
管理员 发表于 2017-3-7 13:11
感谢您的提问!稍后会有小伙伴为您解答的!

谢谢管理员:D
快捷链接