|
/
первая страница
/
форум
/
Вернуться в раздел архива "Техническая поддержка: Cisco"
/
|
|
SVK ![[more]](/i/icons/more.gif) | 2005-10-19 17:10:06 |

Привет, Народ!
Вот такая проблема: есть циска 6500 и модуль в ней IDSM-2. Пингуется все так: с сервера - свич, со свича - сервер, а с модуля и на модуль пинги никуда не проходят. Сам модуль себя пингует.
Возможно пинги просто запрещены - как их разрешить?

|
Николай Дудник ![[more]](/i/icons/more.gif) | 2005-10-22 14:41:52 |

покажите setup и пинги с сенсора.

|
SVK ![[more]](/i/icons/more.gif) | 2005-10-24 11:21:36 |

<i>Setup с IDSM-2:</i>
--- System Configuration Dialog ---
At any point you may enter a question mark '?' for help.
User ctrl-c to abort configuration dialog at any prompt.
Default settings are in square brackets '[]'.
Current Configuration:
networkParams
ipAddress 169.254.213.224
defaultGateway 169.254.213.222
hostname idsm-2
telnetOption enabled
accessList ipAddress 169.254.213.223 netmask 255.255.255.0
accessList ipAddress 169.254.213.222 netmask 255.255.255.0
exit
timeParams
summerTimeParams
active-selection none
exit
exit
service webServer
general
ports 443
exit
exit
Current time: Mon Oct 24 07:12:29 2005
Setup Configuration last modified: Mon Oct 24 06:58:05 2005
<i>Пинги с IDSM-2 (169.254.213.224/24)</i>
idsm-2# ping 169.254.213.222 //ftp-сервер
PING 169.254.213.222 (169.254.213.222) from 169.254.213.224 : 56(84) bytes of data.
From 169.254.213.224 icmp_seq=1 Destination Host Unreachable
From 169.254.213.224 icmp_seq=2 Destination Host Unreachable
From 169.254.213.224 icmp_seq=3 Destination Host Unreachable
--- 169.254.213.222 ping statistics ---
3 packets transmitted, 0 received, +3 errors, 100% loss, time 2011ms
, pipe 3
idsm-2# ping 169.254.213.223 //gig5/2 свич
PING 169.254.213.223 (169.254.213.223) from 169.254.213.224 : 56(84) bytes of data.
From 169.254.213.224 icmp_seq=1 Destination Host Unreachable
From 169.254.213.224 icmp_seq=2 Destination Host Unreachable
From 169.254.213.224 icmp_seq=3 Destination Host Unreachable
--- 169.254.213.223 ping statistics ---
3 packets transmitted, 0 received, +3 errors, 100% loss, time 2015ms
, pipe 3
idsm-2# ping 169.254.213.224 //IDSM-2
PING 169.254.213.224 (169.254.213.224) from 169.254.213.224 : 56(84) bytes of data.
64 bytes from 169.254.213.224: icmp_seq=1 ttl=64 time=0.043 ms
64 bytes from 169.254.213.224: icmp_seq=2 ttl=64 time=0.022 ms
64 bytes from 169.254.213.224: icmp_seq=3 ttl=64 time=0.020 ms
64 bytes from 169.254.213.224: icmp_seq=4 ttl=64 time=0.022 ms
--- 169.254.213.224 ping statistics ---
4 packets transmitted, 4 received, 0% loss, time 2998ms
rtt min/avg/max/mdev = 0.020/0.026/0.043/0.011 ms

|
Николай Дудник ![[more]](/i/icons/more.gif) | 2005-10-24 11:57:29 |

где-то маску потеряли. в диалоге ее не было?
Enter sensor IP address[x.x.x.x]:
Enter sensor netmask [255.255.255.0]:

|
SVK ![[more]](/i/icons/more.gif) | 2005-10-24 18:13:05 |

Была - именно так:
Enter IP address[169.254.213.224]:
Enter netmask[255.255.255.0]:
Enter default gateway[169.254.213.222]:
Она почему-то в sh conf не показывается.

|
Николай Дудник ![[more]](/i/icons/more.gif) | 2005-10-25 14:58:43 |

router#
sh run | i intrusion-detection module
sh vl br
sh ip int brie | i Vlan
ping 169.254.213.224
sh arp | i 169.254.213.224

|
SVK ![[more]](/i/icons/more.gif) | 2005-10-26 13:57:44 |

6506#sh run | i intrusion-detection module
6506#sh vl br
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Gi2/2, Gi2/3, Gi2/4, Gi2/5
Gi2/6
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
6506#sh ip int brie | i Vlan
Vlan1 unassigned YES NVRAM administratively down down
6506#ping 169.254.213.224
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 169.254.213.224, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
6506#sh arp | i 169.254.213.224
Internet 169.254.213.224 0 Incomplete ARPA GigabitEthernet5/2

|
Николай Дудник ![[more]](/i/icons/more.gif) | 2005-10-26 14:15:34 |

ээ...
а откуда вы сервер пингуете? (в смысле когда пинги проходят).
intrusion-detection module x management-port access-vlan 1
int vl 1
ip add 169.254.213.65 255.255.255.0
no shut
do p 169.254.213.222
do p 169.254.213.223
do p 169.254.213.224

|
SVK ![[more]](/i/icons/more.gif) | 2005-10-26 15:14:11 |

Все, спасибо.... забыла про vlan :)

|
|
|
|
|
|