博客首页 注册 建议与交流 排行榜 加入友情链接         宝宝相册的专门空间
推荐 投诉 搜索: 帮助

大萝卜的博客

   bu.cublog.cn
关于作者  
姓名:      大萝卜
职业:      听人说,技术支持是IT业最鸡肋的职业,于是我便开始郁闷起来!
个性签名:   我以为我们同属于/30,Ping出Timed out才明白处于不同的Vlan。我尝试着用爱做为Route,并用Traceroute来验证,可是Netstat的Syn_received结果让我无比伤心。于是我选择了deny any和deny ip any any,但是我心里一直期待着Vpn那天的到来,请将我放在你的Acl之内。
Mailto:bxz1981#gmail.com

我的分类  




CISCO 3550 mac acesss-list
r3>ping 12.1.1.4

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 12.1.1.4, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms
r3>sh int e0/0
Ethernet0/0 is up, line protocol is up
Hardware is AmdP2, address is 0002.4b65.7de0 (bia 0002.4b65.7de0)
Internet address is 12.1.1.3/24
MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:26, output 00:00:06, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
2406 packets input, 397270 bytes, 0 no buffer
Received 2365 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 input packets with dribble condition detected
5610 packets output, 582114 bytes, 0 underruns
6 output errors, 0 collisions, 2 interface resets
0 babbles, 0 late collision, 0 deferred
6 lost carrier, 0 no carrier

r3>ping 12.1.1.4

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 12.1.1.4, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
r3>sh clock
*17:29:53.286 UTC Mon Mar 1 1993
r3>
AccSrv-Rack01#2
[Resuming connection 2 to sw1 ... ]

sw1(config-if)#do wr t
Building configuration...

Current configuration : 2566 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname sw1
!
!
ip subnet-zero
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
mac access-list extended test
!
!
!
!
!
interface FastEthernet0/1
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 7
switchport mode dynamic desirable
mac access-group test in
spanning-tree portfast
!
interface FastEthernet0/4
switchport access vlan 7
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/5
switchport access vlan 20
switchport mode access

sw1(config-if)#exit
sw1(config)#mac access-list ext test
sw1(config-ext-macl)#deny any any
sw1(config-ext-macl)#^Z
sw1#
01:04:56: %SYS-5-CONFIG_I: Configured from console by console
sw1#do wr t
^
% Invalid input detected at '^' marker.

sw1#wr t
Building configuration...

Current configuration : 2582 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname sw1
!
!
ip subnet-zero
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
mac access-list extended test
deny any any
!
!
!
!
!
interface FastEthernet0/1
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 7
switchport mode dynamic desirable
mac access-group test in
spanning-tree portfast
!
interface FastEthernet0/4
switchport access vlan 7
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/5
switchport access vlan 20

sw1#
AccSrv-Rack01#1
[Resuming connection 1 to r3 ... ]

r3>sh clock
*17:31:59.870 UTC Mon Mar 1 1993
r3>ping 12.1.1.4

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 12.1.1.4, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms
r3>
AccSrv-Rack01#2
[Resuming connection 2 to sw1 ... ]

sw1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
sw1(config)#mac addr ag
sw1(config)#mac addr aging-time ?
<0-0> Enter 0 to disable aging
<10-1000000> Aging time in seconds

sw1(config)#mac addr aging-time 10
sw1(config)#exit
sw1#
01:07:20: %SYS-5-CONFIG_I: Configured from console by console
sw1#
AccSrv-Rack01#1
[Resuming connection 1 to r3 ... ]

r3>sh clock
*17:33:58.861 UTC Mon Mar 1 1993
r3>ping 12.1.1.4

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 12.1.1.4, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms
r3>sh clock
*17:35:10.053 UTC Mon Mar 1 1993
r3>ping 12.1.1.4

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 12.1.1.4, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
r3>sh clock
*17:36:41.255 UTC Mon Mar 1 1993
r3>ping 12.1.1.4

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 12.1.1.4, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms
r3>ping 12.1.1.4

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 12.1.1.4, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
r3>en
r3#sh arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 12.1.1.4 15 0002.16f3.5160 ARPA Ethernet0/0
Internet 12.1.1.3 - 0002.4b65.7de0 ARPA Ethernet0/0
r3#cle arp
r3#sh arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 12.1.1.3 - 0002.4b65.7de0 ARPA Ethernet0/0
r3#sh clock
*17:43:53.596 UTC Mon Mar 1 1993
r3#ping 12.1.1.4

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 12.1.1.4, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)

 发表于: 2006-12-14,修改于: 2007-03-07 09:37 已浏览2252次,有评论2条 推荐 投诉

  网友评论
  本站网友 时间:2007-05-15 17:30:57 IP地址:218.83.152.★
大哥 能搞点文字说明吗;

  水鬼 时间:2008-02-02 00:26:15 IP地址:125.31.207.★
博主的3550 IOS是增强版的吗?我的标准版不支持mac access-list,郁闷···


  发表评论



Copyright © 2001-2006 ChinaUnix.net All Rights Reserved

感谢所有关心和支持过ChinaUnix的朋友们
页面生成时间:0.73654

京ICP证041476号