两台S6720做了VRRP,并且作为客户端的网关,客户端出现多重网络
问题描述
两台S6720做了VRRP主备,作为底下客户端的网关设备,在两台S6720上都配置了dhcp用来分配地址,客户端采用自动获取地址,在网络和共享中心那边看到有多重网络的字样,并且存在多重网络字样的主机都上不了网,可以ping通网关,但是ping不通公网。
如图:
主S6720的部分关键配置如下:
interface Vlanif2
description manage
ip address 10.1.2.2 255.255.255.0
vrrp vrid 2 virtual-ip 10.1.2.1
vrrp vrid 2 priority 200
vrrp vrid 2 preempt-mode timer delay 5
traffic-policy 2 inbound
#
interface Vlanif3
description 6Lou
ip address 10.1.3.2 255.255.255.0
vrrp vrid 3 virtual-ip 10.1.3.1
vrrp vrid 3 priority 200
vrrp vrid 3 preempt-mode timer delay 5
dhcp select interface
dhcp server dns-list 192.168.0.7 192.168.0.8 223.5.5.5
#
interface Vlanif4
description 7Lou
ip address 10.1.4.2 255.255.255.0
vrrp vrid 4 virtual-ip 10.1.4.1
vrrp vrid 4 priority 200
vrrp vrid 4 preempt-mode timer delay 5
dhcp select interface
dhcp server dns-list 192.168.0.7 192.168.0.8 223.5.5.5
#
interface Vlanif5
description 8Lou
ip address 10.1.5.2 255.255.255.0
vrrp vrid 5 virtual-ip 10.1.5.1
vrrp vrid 5 priority 200
vrrp vrid 5 preempt-mode timer delay 5
dhcp select interface
dhcp server dns-list 192.168.0.7 192.168.0.8 223.5.5.5
#
interface Vlanif6
description wifi_office
ip address 10.1.6.2 255.255.254.0
vrrp vrid 6 virtual-ip 10.1.6.1
vrrp vrid 6 priority 200
vrrp vrid 6 preempt-mode timer delay 5
dhcp select interface
dhcp server dns-list 192.168.0.7 192.168.0.8 223.5.5.5
#
interface Vlanif8
description guest-wifi
ip address 10.1.8.2 255.255.255.0
vrrp vrid 8 virtual-ip 10.1.8.1
vrrp vrid 8 priority 200
vrrp vrid 8 preempt-mode timer delay 5
traffic-policy 1 inbound
dhcp select interface
dhcp server dns-list 61.139.2.69 114.114.114.114
#
interface Vlanif30
description JianKong
ip address 10.1.30.2 255.255.255.0
vrrp vrid 30 virtual-ip 10.1.30.1
vrrp vrid 30 priority 200
vrrp vrid 30 preempt-mode timer delay 5
traffic-policy 2 inbound
#
interface Vlanif40
description MenJin
ip address 10.1.40.2 255.255.255.0
vrrp vrid 40 virtual-ip 10.1.40.1
vrrp vrid 40 priority 200
vrrp vrid 40 preempt-mode timer delay 5
#
interface Vlanif100
description GaoLaoShi
ip address 192.168.100.2 255.255.255.0
vrrp vrid 100 virtual-ip 192.168.100.1
vrrp vrid 100 priority 200
vrrp vrid 100 preempt-mode timer delay 5
dhcp select interface
dhcp server dns-list 192.168.0.7 192.168.0.8 223.5.5.5
#
interface Vlanif101
description GaoGuan
ip address 192.168.101.2 255.255.255.0
vrrp vrid 101 virtual-ip 192.168.101.1
vrrp vrid 101 priority 200
vrrp vrid 101 preempt-mode timer delay 5
dhcp select interface
dhcp server dns-list 192.168.0.7 192.168.0.8 223.5.5.5
#
interface Vlanif172
description IT
ip address 172.16.0.2 255.255.255.0
vrrp vrid 172 virtual-ip 172.16.0.1
vrrp vrid 172 priority 200
vrrp vrid 172 preempt-mode timer delay 5
dhcp select interface
dhcp server dns-list 192.168.0.7 192.168.0.8 223.5.5.5
#
interface Vlanif200
description Server
ip address 192.168.0.2 255.255.255.0
vrrp vrid 200 virtual-ip 192.168.0.1
vrrp vrid 200 priority 200
vrrp vrid 200 preempt-mode timer delay 5
#
interface Vlanif201
description Server
ip address 10.1.201.2 255.255.255.0
vrrp vrid 201 virtual-ip 10.1.201.1
vrrp vrid 201 priority 200
vrrp vrid 201 preempt-mode timer delay 5
告警信息
无
处理过程
1:让客户尝试ping网关,发现可以通,但是ping不通出口路由器,在S6720上可以直接ping通出口设备。
2:检查PC的配置,网关必须为VRRP组的虚地址。
3:设备上的arp trace显示arp在两个设备之间漂,所以让客户在主备S6720分配地址的范围调整了一下,各占一半,发现故障现象依旧存在。
M 10.1.7.112 a80c-ca03-8b1e
6 XGE0/0/22
XGE0/0/4 11-07 15:44:39
M 10.1.7.112 446d-57e7-783e
6 XGE0/0/4
XGE0/0/22 11-07 15:44:41
根因
微软技术支持网站介绍是Adobe软件的Bonjour服务导致该问题。
解决方案
在任务管理器禁用Bonjour服务,并删除C:\Program Files\Bonjour\mDNSResponder.exe,问题解决。
建议与总结
在客户端的网络和共享中心有碰到多重网络的字样时,可以在任务管理器禁用Bonjour服务,并删除C:\Program Files\Bonjour\mDNSResponder.exe。
版权声明:
作者:SE_Gao
链接:https://www.cnesa.cn/2050.html
来源:CNESA
文章版权归作者所有,未经允许请勿转载。
共有 0 条评论