求助 思科3560 配置静态路由上外网
本人小白 ，现有一台思科的3560三层交换机，我做了简单配置分了几个Vlan 出来现在 就是不能上internat 外网 连接方式如下 把交换机1口（三层接口）接到了公司路由器（网段是 198.168.0.0/24 网关 192.168.0.1），配置了192.168.0.200 的地址
电脑连接到交换机的2口 或3口 都能获得对应VLAN的地址 但是就是上不去外网， 我做也做了 ip route 0.0.0.0 0.0.0.0 192.168.0.1 的静态路由
后来有做了其他模式的跳转，都不行，不知道那出问题了，麻烦老法师们 给指导下，不胜感激。。。。。
Switch#show run
Building configuration...
Current configuration : 3822 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Switch
!
boot-start-marker
boot-end-marker
!
enable password abcd1234
!
username admin password 0 abcd1234
!
!
no aaa new-model
system mtu routing 1500
ip routing
no ip domain-lookup
!
ip dhcp pool ap
network 192.168.10.0 255.255.255.0
default-router 192.168.10.1
dns-server 10.1.1.1
!
ip dhcp pool wifi
network 192.168.20.0 255.255.255.0
default-router 192.168.20.1
dns-server 10.1.1.1
!
ip dhcp pool host
network 192.168.30.0 255.255.255.0
default-router 192.168.30.1
dns-server 10.1.1.1
!
!
!
!
crypto pki trustpoint TP-self-signed-2727480192
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2727480192
revocation-check none
rsakeypair TP-self-signed-2727480192
!
!
crypto pki certificate chain TP-self-signed-2727480192
certificate self-signed 01
3082023F 308201A8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32373237 34383031 3932301E 170D3933 30333031 30303031
30345A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 37323734
38303139 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100DFE6 EB0A8BC2 714B96D6 7D825C0B 03570046 D18BE552 81BEB384 056ED47F
6C350A5C 2D0F3335 72824E2A F1CB7AF4 ABF53BA3 EF89C526 F648613E 39B94757
240F8925 97326233 7965E882 F9A10A2C 24A4FCEE 588EE950 9757C68C 597133B6
5FAF4B26 FAA15696 5D9D40ED 4AB108EC 1214E39B AA1800B4 1E26DD13 11CF2370
72F50203 010001A3 67306530 0F060355 1D130101 FF040530 030101FF 30120603
551D1104 0B300982 07537769 7463682E 301F0603 551D2304 18301680 1465922B
9C03045D E9C4F34C B0A8E846 D3B10543 62301D06 03551D0E 04160414 65922B9C
03045DE9 C4F34CB0 A8E846D3 B1054362 300D0609 2A864886 F70D0101 04050003
8181009A 3CD09750 1596A486 15E017FB B71EB857 51E7E7E4 29D75449 EBCEF82A
B0975902 E3AB6F1F 2B8D1234 C3BA191A 76F9308A 3E481842 DFD4AD63 43C54EC9
3AC85906 79135672 5CB504E0 65F7BD97 C2661923 F601041C F71C3D65 7BFCFE0A
D5D501A5 70CB00FA F25C281C 5F274116 80B9117B C8F5E59F 6B7585C7 DA2AE908 221ED1
quit
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
interface FastEthernet0/1
no switchport
ip address 192.168.0.200 255.255.255.0
!
interface FastEthernet0/2
switchport access vlan 100
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 200
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 300
!
interface FastEthernet0/5
switchport access vlan 300
!
interface FastEthernet0/6
switchport access vlan 300
!
interface FastEthernet0/7
switchport access vlan 300
!
interface FastEthernet0/8
switchport access vlan 300
!
interface FastEthernet0/9
switchport access vlan 300
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan100
ip address 192.168.10.1 255.255.255.0
!
interface Vlan200
ip address 192.168.20.1 255.255.255.0
!
interface Vlan300
ip address 192.168.30.1 255.255.255.0
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.0.1
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
ip route 192.168.20.0 255.255.255.0 192.168.0.1
ip http server
ip http secure-server
!
!
!
line con 0
line vty 0 4
login
line vty 5 15
login
!
end
路由器回指路由到交换机vlan网段 ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
ip route 192.168.20.0 255.255.255.0 192.168.0.1
这两条取消。另外上层是否接了路由或者防火墙设备做为网关，交换机直连外网，是无法上网的。 eason 发表于 2017-5-2 10:28
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
ip route 192.168.20.0 255.255.255.0 192.168.0.1
这两条取消 ...
你好谢谢你的回复 ，，3560的上层接入的是普通路由器，我去掉另外两条路由 下面客户端 也上不去外网。。。说明：在3560上做ping上层路由器的网关、192.168.20.1和baidu.com测试都是通的，下面客户端访问192.168.20.1 可以出现登陆3560的WEB 页所 面但是访问上层路由网管就不通了 所以也还是上不去外网， 你的3650和路由器的直连端口没有做互通地址，192.168.0.1是网关，那3650和路由互联的端口至少也要起个想192.168.0.2什么的地址才可以互联。
页:
[1]