发布时间：2013-09-24
点击量：2132拓扑：
PC----g5/2 S86（FW）
用户网段：192.168.100.0/24
用户网关：192.168.100.254/24
用户vlan：109
FW配置：
ip session acl-filter-default-permit
!
firewall transparent
!
interface Vlan 109
ip address 192.168.100.253 255.255.255.0
bridge-group 1
!
interface Vlan 1109
bridge-group 1
!
ip route 0.0.0.0 0.0.0.0 192.168.100.254
!
S86配置：
vlan 109
!
vlan 1109
!
no service password-encryption
service dhcp
!
ip dhcp pool vlan1109
network 192.168.100.0 255.255.255.0
dns-server 218.85.157.99 192.168.58.110
default-router 192.168.100.254
!
interface GigabitEthernet 5/1
switchport access vlan 109
!
interface GigabitEthernet 5/2
switchport access vlan 109
!
interface TenGigabitEthernet 3/1
port-group 1
!
interface TenGigabitEthernet 3/2
port-group 1
!
interface AggregatePort 1
switchport mode trunk
!
interface VLAN 1109
no ip proxy-arp
ip address 192.168.100.254 255.255.255.0
查看S86 DHCP用户绑定信息：
Ruijie#show ip dhcp binding
IP address Client-Identifier/ Lease expiration Type
Hardware address
192.168.100.3 0100.235a.bd19.75 000 days 23 hours 59 mins Automatic
查看FW流信息：
Ruijie#show ip fpm flows
src_ip dst_ip protocol s&d_port/type&code flow_state runtime(s) lefttime(s) SRC_BYTES DST_BYTES
192.168.100.3 218.85.157.99 UDP S:65386 D:53 UDP_STARTED 17 49 198 0
192.168.100.254 192.168.100.3 ICMP type:8 code:0 ICMP_STARTED 2 7 36 0
0.0.0.0 255.255.255.255 UDP S:68 D:67 UDP_STARTED 2 58 678 0
192.168.100.3 239.255.255.250 UDP S:61856 D:1900 UDP_STARTED 0 59 161 0
192.168.100.254 192.168.100.3 UDP S:67 D:68 UDP_ESTABLISHED 688 598 4520 1312
192.168.100.254 192.168.100.3 ICMP type:8 code:0 ICMP_STARTED 2 7 36 0
文档评价
