The OpenNET Project / Index page

[ новости /+++ | форум | теги | ]




Версия для распечатки Пред. тема | След. тема
Новые ответы [ Отслеживать ]
Trunk между Cisco 2960 и H3C S5500, !*! Vova, 17-Июл-14, 12:23  [смотреть все]
Добрый день.
Есть два здания соединенные оптикой. В основном ЦОД, во втором офис.
Задача нарезать в локалке несколько VLAN'ов. В офисе сеть постоена на свичах H3C S5500, в ЦОД - Cisco 2960. Настроил транки между всем H3C - все работает, а транк между ни и циской не работает. Пока что я сделал один VLAN для менеджмента свичей. В офисе свичи друг друга по этому vlan пингуют, а ЦОД не пингуется.
Вот настройки:

Cisco:

!
interface GigabitEthernet0/36
description Verh Office
switchport mode trunk
!

!
interface Vlan2
ip address 192.168.250.2 255.255.255.0
!

H3C:

#
interface Vlan-interface2
ip address 192.168.250.5 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
#

2-й VLAN создан на обоих коммутаторах. Судя по доке все сделано верно, но свичи друг друга по 2 vlan'у не видят. Может кто сталкивался с подобным ?

  • Trunk между Cisco 2960 и H3C S5500, !*! elk_killa, 13:00 , 17-Июл-14 (1)
    сталкивался
    sh vtp status

    > 2-й VLAN создан на обоих коммутаторах. Судя по доке все сделано верно,
    > но свичи друг друга по 2 vlan'у не видят. Может кто
    > сталкивался с подобным ?

  • Trunk между Cisco 2960 и H3C S5500, !*! Andrey, 15:10 , 17-Июл-14 (7)
    >[оверквотинг удален]
    > interface Vlan-interface2
    >  ip address 192.168.250.5 255.255.255.0
    > #
    > interface GigabitEthernet1/0/1
    >  port link-type trunk
    >  port trunk permit vlan all
    > #
    > 2-й VLAN создан на обоих коммутаторах. Судя по доке все сделано верно,
    > но свичи друг друга по 2 vlan'у не видят. Может кто
    > сталкивался с подобным ?

    покажите на Cisco show vlan и show vlan id 2
    А в самом ЦОД между VLAN трафик ходит?
    А лучше покажите полный конфиг с обоих сторон. Сдается мне что вы только interface vlan создали, а собственно VLAN как таковые отсутствуют.
    Да и show version с 2960 тоже не помешает для диагностики.

    • Trunk между Cisco 2960 и H3C S5500, !*! Vova, 15:27 , 17-Июл-14 (8)
      > покажите на Cisco show vlan и show vlan id 2
      > А в самом ЦОД между VLAN трафик ходит?
      > А лучше покажите полный конфиг с обоих сторон. Сдается мне что вы
      > только interface vlan создали, а собственно VLAN как таковые отсутствуют.
      > Да и show version с 2960 тоже не помешает для диагностики.

      в ЦОД по 2 VLAN траффик есть.
      Вот полные конфиги.
      Циска:
      sw1#sh run
      Building configuration...

      Current configuration : 5239 bytes
      !
      version 12.2
      no service pad
      service timestamps debug uptime
      service timestamps log datetime msec localtime
      service password-encryption
      !
      hostname sw1
      !
      boot-start-marker
      boot-end-marker
      !
      enable secret 5 $1$H7q9$9jyVcPGR/3GsxlwMrAMr21
      enable password 7 045802150C2E
      !
      username admin privilege 15 password 7 0101090B4F3B312B
      !
      !
      macro global description cisco-global
      aaa new-model
      !
      !
      aaa authentication login default local
      aaa authentication enable default enable
      aaa authorization exec default local none
      !
      !
      !
      aaa session-id common
      clock timezone GMT 6
      system mtu routing 1500
      udld aggressive

      !
      !
      !
      mls qos map cos-dscp 0 8 16 26 32 46 46 56
      !
      crypto pki trustpoint TP-self-signed-2721177728
      enrollment selfsigned
      subject-name cn=IOS-Self-Signed-Certificate-2721177728
      revocation-check none
      rsakeypair TP-self-signed-2721177728
      !
      !
      crypto pki certificate chain TP-self-signed-2721177728
      certificate self-signed 01
        3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
        31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
        69666963 6174652D 32373231 31373737 3238301E 170D3933 30333031 30303033
        30395A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
        4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 37323131
        37373732 3830819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
        8100C88E 2FAF57A0 40C01799 EC4100E7 992BB9A2 2B4D5CA6 F10B8C21 1E413FA1
        99D76EC1 0918365A 07F1F3D0 43BC48B7 EB0BD061 386C1B1E 389BE05F ACE1767F
        18672B60 B336140D 06CEB145 3F023D58 A2E067F2 F77A98D6 D9C2FC9D 00E53E65
        FF42FE8D 5FA4242B 206C96ED 5E8106C1 FFA076F3 6F1A5522 10398D79 100A9936
        8D8B0203 010001A3 64306230 0F060355 1D130101 FF040530 030101FF 300F0603
        551D1104 08300682 04737731 2E301F06 03551D23 04183016 8014543C 803C550D
        6D9BB271 D5731F78 C1A98ADB 125C301D 0603551D 0E041604 14543C80 3C550D6D
        9BB271D5 731F78C1 A98ADB12 5C300D06 092A8648 86F70D01 01040500 03818100
        411CF94B 2BF8D55D 4C41AAFB D87B74BE 2EB26C06 B9FE67BB D48689C5 66936955
        FAF92812 F16CA293 3AAEB1F7 00720DDA 13EE575D F2035B53 67EBD485 5AEAC80F
        819140CE A5B5BAF7 24096C48 64053A21 222FBF87 FA25DF86 4E5C8A4D 42BE799F
        0CEC0A0D 3721AF1C 9FC3E434 6FFE316E AF8EFA2F E0FF24D5 D412B05C FFB0E2D8
        quit    
      !
      !
      !
      no errdisable detect cause small-frame
      no errdisable detect cause loopback
      no errdisable detect cause gbic-invalid
      no errdisable detect cause sfp-config-mismatch
      no errdisable detect cause pagp-flap
      no errdisable detect cause dtp-flap
      no errdisable detect cause link-flap
      no errdisable detect cause pppoe-ia-rate-limit
      no errdisable detect cause dhcp-rate-limit
      no errdisable detect cause arp-inspection
      errdisable recovery cause link-flap
      errdisable recovery interval 60
      !
      spanning-tree mode rapid-pvst
      spanning-tree extend system-id
      !
      vlan internal allocation policy ascending
      !
      !
      !
      interface GigabitEthernet0/1
      description Radiobailanys
      switchport mode trunk
      shutdown
      !
      interface GigabitEthernet0/2
      !
      interface GigabitEthernet0/3
      !
      interface GigabitEthernet0/4
      !
      interface GigabitEthernet0/5
      !
      interface GigabitEthernet0/6
      !
      interface GigabitEthernet0/7
      !
      interface GigabitEthernet0/8
      !
      interface GigabitEthernet0/9
      description Supermicro Blade Uplink
      !
      interface GigabitEthernet0/10
      description Supermicro Blade Uplink
      !
      interface GigabitEthernet0/11
      !
      interface GigabitEthernet0/12
      description ProxMox2
      !
      interface GigabitEthernet0/13
      !
      interface GigabitEthernet0/14
      !
      interface GigabitEthernet0/15
      !
      interface GigabitEthernet0/16
      !
      interface GigabitEthernet0/17
      !
      interface GigabitEthernet0/18
      !
      interface GigabitEthernet0/19
      !        
      interface GigabitEthernet0/20
      !
      interface GigabitEthernet0/21
      !
      interface GigabitEthernet0/22
      !
      interface GigabitEthernet0/23
      !
      interface GigabitEthernet0/24
      !
      interface GigabitEthernet0/25
      !
      interface GigabitEthernet0/26
      !
      interface GigabitEthernet0/27
      !
      interface GigabitEthernet0/28
      !
      interface GigabitEthernet0/29
      !
      interface GigabitEthernet0/30
      !
      interface GigabitEthernet0/31
      !
      interface GigabitEthernet0/32
      !
      interface GigabitEthernet0/33
      !
      interface GigabitEthernet0/34
      !
      interface GigabitEthernet0/35
      description Cisco ASA
      switchport mode trunk
      !
      interface GigabitEthernet0/36
      description Verh Office
      switchport mode trunk
      !
      interface GigabitEthernet0/37
      spanning-tree bpdufilter enable
      spanning-tree bpduguard enable
      !
      interface GigabitEthernet0/38
      !
      interface GigabitEthernet0/39
      !
      interface GigabitEthernet0/40
      switchport mode access
      !
      interface GigabitEthernet0/41
      !
      interface GigabitEthernet0/42
      !
      interface GigabitEthernet0/43
      !
      interface GigabitEthernet0/44
      !
      interface GigabitEthernet0/45
      !
      interface GigabitEthernet0/46
      !
      interface GigabitEthernet0/47
      !
      interface GigabitEthernet0/48
      !
      interface Vlan1
      no ip address
      no ip route-cache
      !
      interface Vlan2
      ip address 192.168.250.2 255.255.255.0
      !
      ip default-gateway 192.168.250.1
      ip http server
      ip http secure-server
      ip sla enable reaction-alerts
      snmp-server community public RW
      snmp-server community public777 RO
      snmp-server community private777 RW
      !
      line con 0
      line vty 0 4
      password 7 0614002E587E3E3D
      line vty 5 15
      password 7 095E41060D352036
      !
      ntp allow mode private
      ntp clock-period 36028827
      ntp server 192.168.111.199 prefer
      end

      sw1#
      sw1#show vlan id 2

      VLAN Name                             Status    Ports
      ---- -------------------------------- --------- -------------------------------
      2    Management                       active    Gi0/35, Gi0/36

      VLAN Type  SAID       MTU   Parent RingNo BridgeNo Stp  BrdgMode Trans1 Trans2
      ---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
      2    enet  100002     1500  -      -      -        -    -        0      0  

      Remote SPAN VLAN
      ----------------
      Disabled

      Primary Secondary Type              Ports
      ------- --------- ----------------- ------------------------------------------

      sw1#

      H3C:

      [H3C]display current-configuration
      #
      version 5.20, Release 2202P19
      #
      sysname H3C
      #
      domain default enable system
      #
      telnet server enable
      #
      undo ip ttl-expires
      #
      management-vlan 2
      #
      vlan 1
      #
      vlan 2
      description Management_4_2
      name Management
      #
      radius scheme system
      server-type extended
      primary authentication 127.0.0.1 1645
      primary accounting 127.0.0.1 1646
      user-name-format without-domain
      #
      domain system
      access-limit disable
      state active
      idle-cut disable
      self-service-url disable
      #
      user-group system
      #
      interface NULL0
      #
      interface Vlan-interface2
      ip address 192.168.250.5 255.255.255.0
      #
      interface GigabitEthernet1/0/1
      port link-type trunk
      port trunk permit vlan all
      #
      interface GigabitEthernet1/0/2
      description Radio_Baylanis_RBK
      port link-type trunk
      port trunk permit vlan all
      #              
      interface GigabitEthernet1/0/3
      #
      interface GigabitEthernet1/0/4
      description Uplink SW1
      port link-type trunk
      port trunk permit vlan all
      #
      interface GigabitEthernet1/0/5
      #
      interface GigabitEthernet1/0/6
      #
      interface GigabitEthernet1/0/7
      #
      interface GigabitEthernet1/0/8
      #
      interface GigabitEthernet1/0/9
      #
      interface GigabitEthernet1/0/10
      shutdown
      dot1x
      #
      interface GigabitEthernet1/0/11
      #              
      interface GigabitEthernet1/0/12
      #
      interface GigabitEthernet1/0/13
      #
      interface GigabitEthernet1/0/14
      #
      interface GigabitEthernet1/0/15
      #
      interface GigabitEthernet1/0/16
      #
      interface GigabitEthernet1/0/17
      #
      interface GigabitEthernet1/0/18
      description Uplink 5 flow
      port link-type trunk
      port trunk permit vlan all
      #
      interface GigabitEthernet1/0/19
      #
      interface GigabitEthernet1/0/20
      description Uplink 6 flow
      port link-type trunk
      port trunk permit vlan all
      #
      interface GigabitEthernet1/0/21
      description Uplink 6 flow
      port link-type trunk
      port trunk permit vlan all
      #
      interface GigabitEthernet1/0/22
      #
      interface GigabitEthernet1/0/23
      description Uplink 7 flow
      port link-type trunk
      port trunk permit vlan all
      #
      interface GigabitEthernet1/0/24
      description Uplink 7 flow
      port link-type trunk
      port trunk permit vlan all
      #
      interface GigabitEthernet1/0/25
      #
      interface GigabitEthernet1/0/26
      description Uplink 8 flow
      port link-type trunk
      port trunk permit vlan all
      #
      interface GigabitEthernet1/0/27
      #
      interface GigabitEthernet1/0/28
      #
      interface GigabitEthernet1/0/29
      #
      interface GigabitEthernet1/0/30
      #
      interface GigabitEthernet1/0/31
      #
      interface GigabitEthernet1/0/32
      #
      interface GigabitEthernet1/0/33
      #
      interface GigabitEthernet1/0/34
      #
      interface GigabitEthernet1/0/35
      #
      interface GigabitEthernet1/0/36
      #
      interface GigabitEthernet1/0/37
      #
      interface GigabitEthernet1/0/38
      #
      interface GigabitEthernet1/0/39
      #
      interface GigabitEthernet1/0/40
      #
      interface GigabitEthernet1/0/41
      #
      interface GigabitEthernet1/0/42
      #
      interface GigabitEthernet1/0/43
      #
      interface GigabitEthernet1/0/44
      #
      interface GigabitEthernet1/0/45
      #
      interface GigabitEthernet1/0/46
      #
      interface GigabitEthernet1/0/47
      #
      interface GigabitEthernet1/0/48
      #              
      interface GigabitEthernet1/0/49
      shutdown
      #
      interface GigabitEthernet1/0/50
      shutdown
      #
      interface GigabitEthernet1/0/51
      shutdown
      #
      interface GigabitEthernet1/0/52
      shutdown
      #
      interface Ten-GigabitEthernet1/2/1
      #
      interface Ten-GigabitEthernet1/2/2
      #
      ip route-static 0.0.0.0 0.0.0.0 192.168.250.1
      #
      telnet client source interface Vlan-interface2
      #
      user-interface aux 0
      user-interface vty 0 4
      authentication-mode none
      user privilege level 2
      history-command max-size 40
      idle-timeout 6 0
      screen-length 30
      protocol inbound telnet
      #
      return
      [H3C]

      [H3C]display vlan 2
      VLAN ID: 2
      VLAN Type: static
      Route Interface: configured
      IP Address: 192.168.250.5
      Subnet Mask: 255.255.255.0
      Description: Management_4_2
      Name: Management
      Tagged   Ports:
          GigabitEthernet1/0/1     GigabitEthernet1/0/2     GigabitEthernet1/0/4    
          GigabitEthernet1/0/18    GigabitEthernet1/0/20    GigabitEthernet1/0/21    
          GigabitEthernet1/0/23    GigabitEthernet1/0/24    GigabitEthernet1/0/26    
      Untagged Ports: none

      [H3C]

      со стороны циски транковый порт - g0/36
      со строны H3C - GigabitEthernet1/0/1

      • Trunk между Cisco 2960 и H3C S5500, !*! Vova, 15:28 , 17-Июл-14 (9)
        sw1#sh ver
        Cisco IOS Software, C2960 Software (C2960-LANBASEK9-M), Version 12.2(55)SE, RELEASE SOFTWARE (fc2)
        Technical Support: http://www.cisco.com/techsupport
        Copyright (c) 1986-2010 by Cisco Systems, Inc.
        Compiled Sat 07-Aug-10 23:04 by prod_rel_team
        Image text-base: 0x00003000, data-base: 0x01800000

        ROM: Bootstrap program is C2960 boot loader
        BOOTLDR: C2960 Boot Loader (C2960-HBOOT-M) Version 12.2(44)SE5, RELEASE SOFTWARE (fc1)

        sw1 uptime is 8 hours, 34 minutes
        System returned to ROM by power-on
        System image file is "flash:c2960-lanbasek9-mz.122-55.SE/c2960-lanbasek9-mz.122-55.SE.bin"


        This product contains cryptographic features and is subject to United
        States and local country laws governing import, export, transfer and
        use. Delivery of Cisco cryptographic products does not imply
        third-party authority to import, export, distribute or use encryption.
        Importers, exporters, distributors and users are responsible for
        compliance with U.S. and local country laws. By using this product you
        agree to comply with applicable laws and regulations. If you are unable
        to comply with U.S. and local laws, return this product immediately.

        A summary of U.S. laws governing Cisco cryptographic products may be found at:
        http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

        If you require further assistance please contact us by sending email to
        export@cisco.com.

        cisco WS-C2960G-48TC-L (PowerPC405) processor (revision A0) with 65536K bytes of memory.
        Processor board ID FOC1052X2UE
        Last reset from power-on
        2 Virtual Ethernet interfaces
        48 Gigabit Ethernet interfaces
        The password-recovery mechanism is enabled.

        64K bytes of flash-simulated non-volatile configuration memory.
        Base ethernet MAC Address       : 00:1A:A2:31:E0:80
        Motherboard assembly number     : 73-10300-06
        Power supply part number        : 341-0098-02
        Motherboard serial number       : FOC10511W2D
        Power supply serial number      : AZS105008H3
        Model revision number           : A0
        Motherboard revision number     : B0
        Model number                    : WS-C2960G-48TC-L
        System serial number            : FOC1052X2UE
        Top Assembly Part Number        : 800-27071-01
        Top Assembly Revision Number    : C0
        Version ID                      : V01
        CLEI Code Number                : COM4A10BRA
        Hardware Board Revision Number  : 0x01


        Switch Ports Model              SW Version            SW Image                
        ------ ----- -----              ----------            ----------              
        *    1 48    WS-C2960G-48TC-L   12.2(55)SE            C2960-LANBASEK9-M        


        Configuration register is 0xF

        sw1#

        • Trunk между Cisco 2960 и H3C S5500, !*! Andrey, 17:02 , 17-Июл-14 (10)
          >[оверквотинг удален]
          >     SW Version      
          >       SW Image
          > ------ ----- -----          
          >     ----------      
          >      ----------
          > *    1 48    WS-C2960G-48TC-L  
          > 12.2(55)SE          
          >  C2960-LANBASEK9-M
          > Configuration register is 0xF
          > sw1#

          sh int vlan 2

          • Trunk между Cisco 2960 и H3C S5500, !*! Vova, 06:42 , 18-Июл-14 (11)
            > sh int vlan 2

            sw1#sh int vlan 2
            Vlan2 is up, line protocol is up
              Hardware is EtherSVI, address is 001a.a231.e0c1 (bia 001a.a231.e0c1)
              Internet address is 192.168.250.2/24
              MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
                 reliability 255/255, txload 1/255, rxload 1/255
              Encapsulation ARPA, loopback not set
              Keepalive not supported
              ARP type: ARPA, ARP Timeout 04:00:00
              Last input 00:00:00, output 00:00:00, output hang never
              Last clearing of "show interface" counters never
              Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
              Queueing strategy: fifo
              Output queue: 0/40 (size/max)
              5 minute input rate 1000 bits/sec, 1 packets/sec
              5 minute output rate 2000 bits/sec, 1 packets/sec
                 20208 packets input, 1421793 bytes, 0 no buffer
                 Received 0 broadcasts (0 IP multicasts)
                 0 runts, 0 giants, 0 throttles
                 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
                 7970 packets output, 1020799 bytes, 0 underruns
                 0 output errors, 2 interface resets
                 0 output buffer failures, 0 output buffers swapped out
            sw1#

            • Trunk между Cisco 2960 и H3C S5500, !*! Andrey, 13:30 , 18-Июл-14 (12)
              >[оверквотинг удален]
              > buffer
              >      Received 0 broadcasts (0 IP multicasts)
              >      0 runts, 0 giants, 0 throttles
              >      0 input errors, 0 CRC, 0 frame,
              > 0 overrun, 0 ignored
              >      7970 packets output, 1020799 bytes, 0 underruns
              >      0 output errors, 2 interface resets
              >      0 output buffer failures, 0 output buffers
              > swapped out
              > sw1#

              ping до 192.168.250.1 проходит с обоих устройств?
              В выводе sh arp на Cisco виден MAC адрес H3C? В обратную сторону так-же проверить что MAC адрес Cisco виден на H3C.

              • Trunk между Cisco 2960 и H3C S5500, !*! Vova, 13:43 , 18-Июл-14 (13)
                > ping до 192.168.250.1 проходит с обоих устройств?
                > В выводе sh arp на Cisco виден MAC адрес H3C? В обратную
                > сторону так-же проверить что MAC адрес Cisco виден на H3C.

                192.168.250.1 это ASA. 192.168.250.2 - каталист
                H3C - 192.168.250.4

                между ASA и каталистом пинги ходят, маки на каталисте вижу по 2 влану только от АСЫ, с H3C маков нет. Ну и соответственно на H3C нет маков по 2 влану с каталиста.

                • Trunk между Cisco 2960 и H3C S5500, !*! Andrey, 00:05 , 19-Июл-14 (14)
                  >> ping до 192.168.250.1 проходит с обоих устройств?
                  >> В выводе sh arp на Cisco виден MAC адрес H3C? В обратную
                  >> сторону так-же проверить что MAC адрес Cisco виден на H3C.
                  > 192.168.250.1 это ASA. 192.168.250.2 - каталист
                  > H3C - 192.168.250.4
                  > между ASA и каталистом пинги ходят, маки на каталисте вижу по 2
                  > влану только от АСЫ, с H3C маков нет. Ну и соответственно
                  > на H3C нет маков по 2 влану с каталиста.

                  C2960:
                  sh spanning-tree

                  S5500:
                  display spanning-tree ...

                  И до кучи не мешает проверить топологию по LLDP:
                  С2960:
                  lldp run
                  int gi 0/36
                  lldp enable

                  S5500:
                  lldp enable
                  int gi 1/0/1
                  lldp enable

                  С2960:
                  sh lldp neigh

                  S5500:
                  display lldp neighbor-information




Партнёры:
PostgresPro
Inferno Solutions
Hosting by Hoster.ru
Хостинг:

Закладки на сайте
Проследить за страницей
Created 1996-2025 by Maxim Chirkov
Добавить, Поддержать, Вебмастеру