找回密码
 立即注册
the交换机172.16防火墙 | 家庭/个人应用 2022-09-07 68 0star收藏 版权: . 保留作者信息 . 禁止商业使用 . 禁止修改作品
给客户做个方案首要拓扑如下,在核心交换3600上为每个vlan做网关,另在3600上建立vlan2900接口地址172.16.0.2/30用于和防火墙内网口互联,防火墙内网口地址为172.16.0.1/30,从交换机ping172.16.0.1丢包很严重,从交换机telnet防火墙ping172.16.0.2不丢包。交换机侧端口为10/100/1000设为自适应防火墙侧为10/100设为自适应。两头都强制成100全双工,仍是老样子,不过交换机提示端口也许损坏,不断的发送错误包。查看防火墙的连接数,流量,CPU均不高,交换机负载也不高。烦恼好久,还望高手点拨。

(To make a plan for the customer, the first topology is as follows. The core switch 3600 is used as a gateway for each vlan, and the vlan2900 interface address 172.16.0.2/30 is established on the 3600 for interconnection with the internal network port of the firewall. The internal network port address of the firewall is 172.16 .0.1/30, ping172.16.0.1 from the switch has serious packet loss, but ping172.16.0.2 from the switch telnet firewall does not lose packets. The port on the switch side is 10/100/1000 and it is set to be adaptive, and the firewall side is 10/100 and it is set to be adaptive. Both ends are forced to 100 full duplex, which is still the same, but the switch prompts that the port may be damaged and keeps sending wrong packets. Check that the number of connections, traffic, and CPU of the firewall are not high, and the load on the switch is not high. I have been troubled for a long time, and I hope that the experts will help.)

[下载]11373276279.rar




上一篇:SNMP培训教材
下一篇:硬件防火墙的配置过程讲解与思科PIX防火墙设置