网络中出现的一个问题不明白， 求解答

yuiyui

如图所示，上边的模拟是外网，下边的两个交换机连的两台电脑为内网，现在路由器配置了DHCP，NAT，两台交换机什么都没配，两台电脑能连接外网进行上网，但是互相ping不通，为什么？

小乔

看看主机的IP 网关有没有配置正确
看看路由器有没有直连路由

young_bug

拿分走人呵呵，楼下继续！

liprose

首先，要问下两台PC是否有开启防火墙；然后问下，里面的路由器上面是否两台PC所在的网络之间是否有路由，没有自然就不通，因为路由器的接口是三层的，默认是隔离的。

yuiyui

小乔 发表于 2014-10-28 15:04
看看主机的IP 网关有没有配置正确
看看路由器有没有直连路由

网关跟IP都是正确的，你说的是PC2到PC1的直连路由吗？

yuiyui

liprose 发表于 2014-10-28 15:43
首先，要问下两台PC是否有开启防火墙；然后问下，里面的路由器上面是否两台PC所在的网络之间是否有路由，没 ...

这个路由怎么做？

yuiyui

yuiyui 发表于 2014-10-28 15:51
这个路由怎么做？

这是真机做的配置，你看一下需要加上什么，两台交换机下的PC才能通，谢谢
<Huawei>dis curr
[V200R003C00]
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone Indian Standard Time minus 05:13:20
clock daylight-saving-time Day Light Saving Time repeating 12:32 9-1 12:32 11-23
00:00 2005 2005
#
portal local-server load flash:/portalpage.zip
#
drop illegal-mac alarm
#
wlan ac-global carrier id other ac id 0
#
set cpu-usage threshold 80 restore 75
#
dhcp enable
#
dhcp snooping enable
dhcp server detect
#
acl number 2000  
rule 0 deny
rule 1 permit source 192.168.1.0 0.0.0.255
rule 2 permit source 192.168.2.0 0.0.0.255
#
ip pool 1
gateway-list 192.168.1.1
network 192.168.1.0 mask 255.255.255.0
dns-list 202.102.224.68 202.102.227.68
#
ip pool 2
gateway-list 192.168.2.1
network 192.168.2.0 mask 255.255.255.0
dns-list 202.102.224.68 202.102.227.68
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ip address 192.168.1.1 255.255.255.0
dhcp select global
#
interface GigabitEthernet0/0/1
ip address 192.168.2.1 255.255.255.0
dhcp select global
#
interface GigabitEthernet0/0/2
ip address 61.163.90.170 255.255.255.252
nat outbound 2000
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 61.163.90.169
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
<Huawei>

yuiyui

yuiyui 发表于 2014-10-28 15:45
网关跟IP都是正确的，你说的是PC2到PC1的直连路由吗？

这是真机做的配置，你看一下需要加上什么，两台交换机下的PC才能通，谢谢
<Huawei>dis curr
[V200R003C00]
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone Indian Standard Time minus 05:13:20
clock daylight-saving-time Day Light Saving Time repeating 12:32 9-1 12:32 11-23
00:00 2005 2005
#
portal local-server load flash:/portalpage.zip
#
drop illegal-mac alarm
#
wlan ac-global carrier id other ac id 0
#
set cpu-usage threshold 80 restore 75
#
dhcp enable
#
dhcp snooping enable
dhcp server detect
#
acl number 2000  
rule 0 deny
rule 1 permit source 192.168.1.0 0.0.0.255
rule 2 permit source 192.168.2.0 0.0.0.255
#
ip pool 1
gateway-list 192.168.1.1
network 192.168.1.0 mask 255.255.255.0
dns-list 202.102.224.68 202.102.227.68
#
ip pool 2
gateway-list 192.168.2.1
network 192.168.2.0 mask 255.255.255.0
dns-list 202.102.224.68 202.102.227.68
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ip address 192.168.1.1 255.255.255.0
dhcp select global
#
interface GigabitEthernet0/0/1
ip address 192.168.2.1 255.255.255.0
dhcp select global
#
interface GigabitEthernet0/0/2
ip address 61.163.90.170 255.255.255.252
nat outbound 2000
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 61.163.90.169
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
<Huawei>

liprose

呵呵，交换机上应该有*.*.1.0 到×。×。2.0的路由，然后还要有×。×。2.0到×。×。1.0的路由  哈哈

liprose

错了  应该是路由器上哈