пытаюсь пробросить влан на front-port и спустя 3-5 мин маршрутизатор намертво зависает
цель - снять влан 10 с 6 eth порта olt и получить по dhcp ип настройки от роутера
конфиг роутера
Код: Выделить всё
al-lev5-r1# sh run
hostname al-lev5-r1
ntp enable
ntp broadcast-client enable
syslog max-files 3
syslog file-size 512
syslog file esr info
username admin
password encrypted xxxxxxxxxxxxxxxxx
exit
username xxxxxxxxxxxx
password encrypted xxxxxxxxxxxxxxxxx
privilege 15
exit
vlan 10
name "it"
exit
vlan 20
name "office_lan"
exit
vlan 200
name "--managment"
exit
security zone trusted
exit
security zone untrusted
exit
object-group service ssh
port-range 22
exit
object-group service dhcp_server
port-range 67
exit
object-group service dhcp_client
port-range 68
exit
bridge 1
description "managment bridge"
vlan 200
security-zone trusted
ip address 172.16.0.1/24
enable
exit
bridge 2
description "office lan bridge"
vlan 20
security-zone untrusted
ip address 192.168.20.1/24
enable
exit
bridge 3
description "IT lan bridge"
vlan 10
security-zone trusted
ip address 192.168.10.1/24
enable
exit
interface gigabitethernet 1/0/1
description "WAN dhcp"
ip address dhcp
switchport forbidden default-vlan
exit
interface gigabitethernet 1/0/2
description "IT lan"
switchport forbidden default-vlan
switchport access vlan 10
exit
interface gigabitethernet 1/0/3
description "office lan"
switchport forbidden default-vlan
switchport access vlan 20
exit
interface gigabitethernet 1/0/4
description "link_to_al_lev5_olt8x_1"
switchport forbidden default-vlan
switchport mode trunk
switchport trunk allowed vlan add 10,200
exit
security zone-pair trusted untrusted
rule 1
action permit
match protocol any
match source-address any
match destination-address any
enable
exit
exit
security zone-pair trusted trusted
rule 1
action permit
match protocol any
match source-address any
match destination-address any
enable
exit
exit
security zone-pair trusted self
rule 10
action permit
match protocol tcp
match source-address any
match destination-address any
match source-port any
match destination-port ssh
enable
exit
rule 20
action permit
match protocol icmp
match source-address any
match destination-address any
enable
exit
rule 30
action permit
match protocol udp
match source-address any
match destination-address any
match source-port dhcp_client
match destination-port dhcp_server
enable
exit
exit
ip dhcp-server
ip dhcp-server pool office-lan
network 192.168.20.0/24
address-range 192.168.20.10-192.168.20.100
default-router 192.168.20.1
dns-server 8.8.8.8
exit
ip dhcp-server pool IT-lan
network 192.168.10.0/24
address-range 192.168.10.10-192.168.10.100
default-router 192.168.10.1
dns-server 8.8.8.8
exit
ip telnet server
ip ssh server
al-lev5-r1#
конфигурация OLT
Код: Выделить всё
al_lev5_olt8x_1(switch)# sh running-config
management ip 172.16.0.2 255.255.255.0
management gateway 172.16.0.1
management vlan 200
mac-address-table aging-time 588
port-channel load-balance mac
qos type 1
qos map 0 0 to 0
qos map 0 1 to 1
qos map 0 2 to 2
qos map 0 3 to 3
qos map 0 4 to 4
qos map 0 5 to 5
qos map 0 6 to 6
qos map 0 7 to 7
interface pon-port 0
shutdown
exit
interface pon-port 1
shutdown
exit
interface pon-port 2
shutdown
exit
interface pon-port 3
shutdown
exit
interface front-port 0
bridging to front-port 6
exit
interface front-port 1
shutdown
exit
interface front-port 2
shutdown
exit
interface front-port 3
shutdown
exit
interface pon-port 4
shutdown
exit
interface pon-port 5
shutdown
exit
interface pon-port 6
shutdown
exit
interface pon-port 7
shutdown
exit
interface front-port 4
shutdown
exit
interface front-port 5
shutdown
exit
interface front-port 6
bridging to front-port 0
exit
interface front-port 7
shutdown
exit
interface 10G-front-port 0
shutdown
exit
interface 10G-front-port 1
shutdown
exit
vlan 1
name VLAN
tagged front-port 0
forbidden pon-port 0 , pon-port 1 , pon-port 2 , pon-port 3 , front-port 1 , front-port 2 , front-port 3 , pon-port 4 , pon-port 5 , pon-port 6 , pon-port 7 , front-port 4 , front-port 5 , front-port 7 , 10G-front-port 0 , 10G-front-port 1
exit
vlan 10
name it
tagged front-port 0
untagged front-port 6
exit
vlan 200
name --managment
tagged front-port 0
untagged mgmt-pon-port 0 , mgmt-pon-port 1
exit
al_lev5_olt8x_1(switch)#вроде все по инструкции с сайта делаю.
причем если подключить ноутбук к роутеру то с ОЛТ ноут прекрасно доступен, как и олт с ноутбука через роутер, а вот если подключить ноут к олт то его не видно ни откуда