|

楼主 |
发表于 2019-11-25 19:30:47
|
显示全部楼层
本帖最后由 Lapot16 于 2019-11-25 20:17 编辑
8 X9 o. B" i+ k, g! p7 X0 I+ k# Ojustin215 发表于 2019-11-25 11:57$ i6 Z2 `5 Z8 B/ ?. F" I/ F' i) t
Thanks!!$ K1 h' f2 S- O: x; |/ k' y6 Y& t
The next thing is to download a lab before Exam.
1 N6 d0 u; H' P3 L/ S" E2 tBy the way: $ z. \- k. S1 H1 A5 D9 S3 m
If not ping 209.65.200.225 it`s problem in ACL security + b, u, Z9 j) d2 W
Pings in second column is debug info for me , if I stuck in any TT& K9 ?% t$ i3 A1 J; U& ]
I recommended do the ping too for better understanding how labs work.7 E" W$ o1 o+ J3 h& l& O& v! s% Y$ m
It`s help me in TT portchannel .
& W$ @; Z+ u1 C9 W9 v; `8 {I liitle confused, when in TT portchannel don`t work command show port-channel.; [) V- z# K4 z: t7 \& K
Then ping from DSW2 => DSW1(10.2.1.1) not pass. 7 ~+ l* Q# ~3 a4 y5 k
Show interface trunk=> NONE.3 _ ^" T; ` j v
show run+ o& G* O$ b- _. l
I recommended do the ping too for better understanding how lab operates.: |& K9 u( [& ~3 s$ K' l
% @1 w+ N7 N2 v
I try explain tickets NAT
, E d' r. n) e* qping 209.65.200.241 -no pass( n8 _' m/ N; U3 M) n' n- F# j/ n
ping 10.1.1.10 - pass
1 L, m5 c) Q; z2 t0 S3 v' I' uping 10.1.1.1 -pass1 f: B, U4 B8 n- a
So problem is on R1
! |! K! g/ g/ ~$ e' A
4 M( H j& t4 W" t( c3 J" g5 w- K& |+ {, g7 M3 z, m" _
R1>show ip route
- ^& Q8 c& H; B! _6 v" c! vGateway of last resort is 209.65.200.226 to network 0.0.0.0
. b; {" A5 g+ H% X5 r1 {+ |' m2 C9 V% {) G: }$ G% H5 G$ }
9 w- u: w! T2 s e" _( mB* 0.0.0.0/0 [20/0] via 209.65.200.226, 00:00:01
$ s% _. R- Y" \- i. X: i. N1 f 1.0.0.0/32 is subnetted, 1 subnets' S8 n" e# F5 @+ A* G' N5 }
C 1.1.1.1 is directly connected, Loopback0
& d: O, A+ _- C4 o1 R6 u- o8 |+ d/ h) Q 2.0.0.0/32 is subnetted, 1 subnets
0 H; m% G4 ~: P2 fO IA 2.2.2.2 [110/65] via 10.1.1.2, 00:00:34, Serial1/0.12
" s7 Z: K* d! h0 P; D If BGP route consist in route table -problem not BGP or ACL security
" \* F2 o1 ]0 l, g
7 `3 `1 S2 y* D; w; m problem probably NAT$ K; u v; n) L: ^ A+ M& ?7 p* Y
* F' u- S1 n m# t' _5 O- c5 OR1>sh ip nat stat
+ `" k) I) b% Z! JTotal active translations: 0 (0 static, 0 dynamic; 0 extended)5 Z) C2 @" R8 b9 x- V
Peak translations: 09 _% W# ~0 n- _$ ]+ V3 v
Outside interfaces:3 H. @! ^- k5 c+ d, T; J5 [
Inside interfaces:1 a* x3 H6 `' b/ [, L* K) W
Serial1/0.12, Serial1/1( u9 `: ]) s! F8 T+ R! m
Hits: 0 Misses: 0* H1 B1 V: m$ G* _0 g( E
$ v$ }6 |. C/ r6 V8 R9 W! pIf TT is NAT-ACL contunue our trip
' `3 ~) p" i7 J1 p, I; h$ m( H$ d/ a& _; uUnfortunately, commands show access-list is absent.
& Y7 z6 O9 ]' F# |4 }
: O& P$ D, Q- v8 u: tgoing to config) \. B1 ]2 g, a
ip access-list extended acl.nat
* [! P/ Q9 Z8 ]7 Mpermit ip 10.1.0.0 0.0.255.255 any# _# G- o+ E: R) T6 W
permit ip 192.168.0.0 0.0.255.255 any
, P$ Q/ a6 F0 `2 Z( L7 y" {9 ], F- { |
|