S5700---S3700---S2700-PC 57作为核心,新开业务不通

发布时间:  2016-10-29 浏览次数:  275 下载次数:  0
问题描述
S5700---S3700---S2700-PC
S57作为核心(网关均在S57上),新开业务vlan 11不通,pc无法ping通网关,S27到S57之间为trunk透传了新开vlan
大致配置如下:
S57上配置:                                                                              
interface Vlanif11                                                             
 ip address 192.168.1.1 255.255.255.0                                          
#                                                                              
interface GigabitEthernet0/0/13                                                
 port link-type trunk                                                          
 port trunk allow-pass vlan 2 11   
S57与S37、S27互联接口配置相同:                                                                             
interface GigabitEthernet0/0/13                                                
 port link-type trunk                                                          
 port trunk allow-pass vlan 2 11                                               
S27接pc的端口:                                                                           
interface GigabitEthernet0/0/1                                                
 port link-type access                                                         
 port default vlan 11                                                          
处理过程
1、业务互通,需要S57上有PC的arp表项,查看S57的arp表项:
[S5700]display arp dynamic vlan 11                                             
IP ADDRESS      MAC ADDRESS     EXPIRE(M) TYPE        INTERFACE   VPN-INSTANCE 
                                          VLAN/CEVLAN                          
------------------------------------------------------------------------------ 
------------------------------------------------------------------------------ 
Total:0         Dynamic:0       Static:0     Interface:0    Remote:0  
无任何终端的arp表项,由于新开业务只有1个测试终端,无法学习到arp可能原因:
A、终端ip设置问题---查看确认pc的ip地址设置正确

B、中间经过设备配置问题---查看S57是否能学习到终端mac表项:
<S5700>dis mac-address  00FF-1233-18EB                                  
-------------------------------------------------------------------------------
MAC Address    VLAN/VSI                          Learned-From        Type      
-------------------------------------------------------------------------------
                                                                               
-------------------------------------------------------------------------------
Total items displayed = 0  
无任何表项,依次查看经过交换机表项:
<S3700>dis mac-address  00FF-1233-18EB                                  
-------------------------------------------------------------------------------
MAC Address    VLAN/VSI                          Learned-From        Type      
-------------------------------------------------------------------------------
                                                                               
-------------------------------------------------------------------------------
Total items displayed = 0  

<S2700> display mac-address 00FF-1233-18EB
-------------------------------------------------------------------------------
MAC Address          VLAN/VSI                    Learned-From          Type      
-------------------------------------------------------------------------------
00FF-1233-18EB          11/-                    GE0/0/1             dynamic
通过mac查询,初步判断问题很可能出在S37或者S27的互联接口上
2、再次排查S27/S37互联接口配置,均为trunk口透传vlan11,接口配置无问题,交换机要转发vlan数据需要全局有创建该vlan,查看S27/37的vlan配置:
[S2700]dis vlan 11                                                             
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;              
MP: Vlan-mapping;               ST: Vlan-stacking;                             
#: ProtocolTransparent-vlan;    *: Management-vlan;                            
--------------------------------------------------------------------------------
                                                                               
VID  Type    Ports                                                             
--------------------------------------------------------------------------------
11   common  UT:GE0/0/1(D)                                                    
             TG:GE0/0/13(D)                                                    
                                                                               
[S3700]display vlan 11                                                         
Error: The VLAN does not exist.
在S37上创建vlan11后,终端ping网关正常
根因

中间经过的二层交换机未创建对应vlan 11

解决方案
在S37上创建对应vlan,问题解决
建议与总结

交换机由于全局是否创建vlan与接口能否透传vlan没有强相关,配置时注意,新增某vlan的业务,务必先把经过的所有交换机上创建该vlan,然后配置互联接口的vlan透传

END