|

楼主 |
发表于 2019-11-25 19:30:47
|
显示全部楼层
本帖最后由 Lapot16 于 2019-11-25 20:17 编辑
. u9 ?' P0 M$ qjustin215 发表于 2019-11-25 11:57
* b5 T& I4 p. m: }6 B' \* N/ o+ I) |Thanks!!+ n9 K) \1 E# q! a/ Q
The next thing is to download a lab before Exam. 4 P4 D9 U g% C1 o. Q
By the way:
6 [9 H) ?2 M3 ?8 c# i4 b& n; AIf not ping 209.65.200.225 it`s problem in ACL security
9 b, |3 ^ y; P8 B; R' DPings in second column is debug info for me , if I stuck in any TT
) `/ E" r" w' o) ]5 Y3 O* dI recommended do the ping too for better understanding how labs work.3 _# X4 k! T/ |: G4 t) _+ z
It`s help me in TT portchannel .
3 G; b4 N. k. e% ]7 g3 i* SI liitle confused, when in TT portchannel don`t work command show port-channel.; S, G8 V* u* w
Then ping from DSW2 => DSW1(10.2.1.1) not pass.
) ~' E, d3 C$ v y8 Y4 wShow interface trunk=> NONE.
- w6 q' |0 q2 U6 Qshow run$ F, t$ w0 }. t, [% N
I recommended do the ping too for better understanding how lab operates.) u( b" t8 H! A, T0 ?8 @
" L& P3 D6 T) Y" m, U) [; T
I try explain tickets NAT
% O" y `! \! I1 j2 Oping 209.65.200.241 -no pass
" q' {+ ]: `( j; a( Jping 10.1.1.10 - pass0 y) w' O9 Q M
ping 10.1.1.1 -pass
' K- ?, _( `4 L4 I! RSo problem is on R1( f/ v" J/ J+ a% E5 B$ N9 J4 j
3 a, }' R/ {' z
+ ~- } t9 [5 m( P6 T7 o
R1>show ip route( d, H& Z* {% B' M# i8 H) E) p
Gateway of last resort is 209.65.200.226 to network 0.0.0.0$ W3 P$ s, I( P% Y* a( B' r5 P1 x9 v
0 T" t9 x8 m5 F8 P
$ ^( T9 _' p9 E C- U( i
B* 0.0.0.0/0 [20/0] via 209.65.200.226, 00:00:01
, r; _, ^0 @( z' A 1.0.0.0/32 is subnetted, 1 subnets; ~/ C# ?% L' i2 v
C 1.1.1.1 is directly connected, Loopback07 @4 d8 `8 Q3 S% B$ s8 `# M
2.0.0.0/32 is subnetted, 1 subnets/ S) D4 ?0 _3 Z+ S/ a: C
O IA 2.2.2.2 [110/65] via 10.1.1.2, 00:00:34, Serial1/0.12
% J; D, C: n* V' o If BGP route consist in route table -problem not BGP or ACL security& a q) B7 g- x4 f9 Q9 B& |- n! e
4 `( V6 c5 h( B9 Z" \& S4 f3 x problem probably NAT' V: n5 n" s8 S, r
- p0 J) q( V0 M2 E* v; b5 TR1>sh ip nat stat5 U7 V" W, c. j, u$ M
Total active translations: 0 (0 static, 0 dynamic; 0 extended)
; C1 Y" i" D: x7 _/ N3 j& l8 r3 YPeak translations: 0
) F- \! z, g2 ~Outside interfaces:
$ q* b5 X0 J2 kInside interfaces:" g2 B, R" v* x( h, z% N. P
Serial1/0.12, Serial1/1
' d1 v( |; T- \Hits: 0 Misses: 0
8 n. n/ y0 M* q* a. x s
6 p2 v2 i- V+ N, y. w7 CIf TT is NAT-ACL contunue our trip
2 n( x' n9 O3 e% IUnfortunately, commands show access-list is absent.
* y/ X! @, F; R1 ?/ U% D! E% O: Q9 M F4 f F' Q
going to config
$ i9 T! K+ g' \& v$ U, _ip access-list extended acl.nat
/ @7 Y7 u" c0 ~permit ip 10.1.0.0 0.0.255.255 any
+ N" V6 L% k6 f6 jpermit ip 192.168.0.0 0.0.255.255 any
8 A' u+ E+ {, i5 W- g8 ` |
18#
2019-11-25 19:30:47
回复(0)
收起回复
|