Q&A
こんにちは、GNS3を使って構築したネットワークについて質問です。
現在勉強のため、以下のようなネットワークを構築しました。
ESW1とECW2はCisco3725にNM-16ESWを入れてL3スイッチ化したものです。
ESW1とESW2はEtherChannelで二つの物理ポートを束ねたtrunkポートで繋いでいます。
trunkポートではVLAN10とVLAN20の通信を許可しています。
CentOSマシン間でのping疎通はすべて成功しています。
しかし、CentOS7-1からCentOS7-3にPingを送信すると、
Duplicate Replyになってしまいます。
通信内容を確認すると、Pingリクエストが
・CentOS7-1 → ESW1 → CentOS7-3
の経路で届いているものと、
・CentOS7-1 → ESW1 → ESW2 → ESW1 → CentOS7-3
という経路で届いているものの二つがあり、
結果としてPingが二つReplyされている状況のようです。
このとき、ESW1かESW2で通信の重複を抑える方法が知りたいのですが、
調べてもいまいちやり方がわかりません。
ご存知の方おられましたらご回答お願いいたします。
＝＝＝＝＝＝＝＝＝
ご回答に対して
少し長くなりますが、、ESW1とESW2のshow run結果について添付します、
#############ESW1############### ! ! ! ! ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption no service dhcp ! hostname ESW1 ! boot-start-marker boot-end-marker ! ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! ! ! ! no ip domain lookup ! multilink bundle-name authenticated ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! macro name add_vlan end vlan database vlan $v exit @ macro name del_vlan end vlan database no vlan $v exit @ ! vtp file nvram:vlan.dat archive log config hidekeys ! ! ! ! ip tcp synwait-time 5 ! ! ! ! interface Port-channel1 switchport trunk allowed vlan 1,10,20,1002-1005 switchport mode trunk ! interface FastEthernet0/0 description *** Unused for Layer2 EtherSwitch *** no ip address shutdown duplex auto speed auto ! interface FastEthernet0/1 description *** Unused for Layer2 EtherSwitch *** no ip address shutdown duplex auto speed auto ! interface FastEthernet1/0 switchport access vlan 10 duplex full speed 100 ! interface FastEthernet1/1 switchport access vlan 20 duplex full speed 100 ! interface FastEthernet1/2 duplex full speed 100 ! interface FastEthernet1/3 duplex full speed 100 ! interface FastEthernet1/4 duplex full speed 100 ! interface FastEthernet1/5 duplex full speed 100 ! interface FastEthernet1/6 duplex full speed 100 ! interface FastEthernet1/7 duplex full speed 100 ! interface FastEthernet1/8 duplex full speed 100 ! interface FastEthernet1/9 duplex full speed 100 ! interface FastEthernet1/10 duplex full speed 100 ! interface FastEthernet1/11 duplex full speed 100 ! interface FastEthernet1/12 duplex full speed 100 ! interface FastEthernet1/13 switchport trunk allowed vlan 1,10,20,1002-1005 switchport mode trunk channel-group 1 mode on ! interface FastEthernet1/14 switchport trunk allowed vlan 1,10,20,1002-1005 switchport mode trunk channel-group 1 mode on ! interface FastEthernet1/15 description ### administration ### switchport access vlan 2 duplex full speed 100 ! interface Vlan1 no ip address shutdown ! interface Vlan2 description ### administration ### ip address 192.168.11.51 255.255.255.0 ! interface Vlan10 description ### test vlan #1 ### ip address 192.168.100.1 255.255.255.0 ! interface Vlan20 description ### test vlan #2 ### ip address 192.168.101.1 255.255.255.0 ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 192.168.51.1 ip route 0.0.0.0 0.0.0.0 192.168.11.1 ip route 0.0.0.0 0.0.0.0 192.168.11.2 ! ! no ip http server no ip http secure-server ! no cdp log mismatch duplex ! ! ! ! ! ! control-plane ! ! ! ! ! ! ! ! ! banner exec *************************************************************** This is a normal Router with a Switch module inside (NM-16ESW) It has been pre-configured with hard-coded speed and duplex To create vlans use the command "vlan database" in exec mode After creating all desired vlans use "exit" to apply the config To view existing vlans use the command "show vlan-switch brief" Alias(exec) : vl - "show vlan-switch brief" command Alias(configure): va X - macro to add vlan X Alias(configure): vd X - macro to delete vlan X *************************************************************** alias configure va macro global trace add_vlan $v alias configure vd macro global trace del_vlan $v alias exec vl show vlan-switch brief ! line con 0 exec-timeout 0 0 privilege level 15 password ***** logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 password ****** login ! ! end
###########ESW2############## ! ! ! ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption no service dhcp ! hostname ESW2 ! boot-start-marker boot-end-marker ! ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! ! ! ! no ip domain lookup ! multilink bundle-name authenticated ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! macro name add_vlan end vlan database vlan $v exit @ macro name del_vlan end vlan database no vlan $v exit @ ! vtp file nvram:vlan.dat archive log config hidekeys ! ! ! ! ip tcp synwait-time 5 ! ! ! ! interface Port-channel1 switchport trunk allowed vlan 1,10,20,1002-1005 switchport mode trunk ! interface FastEthernet0/0 description *** Unused for Layer2 EtherSwitch *** no ip address shutdown duplex auto speed auto ! interface FastEthernet0/1 description *** Unused for Layer2 EtherSwitch *** no ip address shutdown duplex auto speed auto ! interface FastEthernet1/0 switchport access vlan 10 duplex full speed 100 ! interface FastEthernet1/1 duplex full speed 100 ! interface FastEthernet1/2 duplex full speed 100 ! interface FastEthernet1/3 duplex full speed 100 ! interface FastEthernet1/4 duplex full speed 100 ! interface FastEthernet1/5 duplex full speed 100 ! interface FastEthernet1/6 duplex full speed 100 ! interface FastEthernet1/7 duplex full speed 100 ! interface FastEthernet1/8 duplex full speed 100 ! interface FastEthernet1/9 duplex full speed 100 ! interface FastEthernet1/10 duplex full speed 100 ! interface FastEthernet1/11 duplex full speed 100 ! interface FastEthernet1/12 duplex full speed 100 ! interface FastEthernet1/13 switchport trunk allowed vlan 1,10,20,1002-1005 switchport mode trunk channel-group 1 mode on ! interface FastEthernet1/14 switchport trunk allowed vlan 1,10,20,1002-1005 switchport mode trunk channel-group 1 mode on ! interface FastEthernet1/15 description ### administration ### switchport access vlan 2 duplex full speed 100 ! interface Vlan1 no ip address shutdown ! interface Vlan2 description ### administration ### ip address 192.168.11.52 255.255.255.0 ! interface Vlan10 description ### test vlan #1 ### ip address 192.168.100.11 255.255.255.0 ! interface Vlan20 description ### test vlan #2 ### ip address 192.168.101.11 255.255.255.0 ! ip forward-protocol nd ! ! no ip http server no ip http secure-server ! no cdp log mismatch duplex ! ! ! ! ! ! control-plane ! ! ! ! ! ! ! ! ! banner exec *************************************************************** This is a normal Router with a Switch module inside (NM-16ESW) It has been pre-configured with hard-coded speed and duplex To create vlans use the command "vlan database" in exec mode After creating all desired vlans use "exit" to apply the config To view existing vlans use the command "show vlan-switch brief" Alias(exec) : vl - "show vlan-switch brief" command Alias(configure): va X - macro to add vlan X Alias(configure): vd X - macro to delete vlan X *************************************************************** alias configure va macro global trace add_vlan $v alias configure vd macro global trace del_vlan $v alias exec vl show vlan-switch brief ! line con 0 exec-timeout 0 0 privilege level 15 password ****** logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 password ******* login ! ! end
回答1件
0
ベストアンサー
まず、ESW１とESW２（とサーバ１とサーバ２）が192.168.100.*のLANに属しているというのが気になります。
とりあえずshow ip routeとかshow runでルーティングテーブルやインタフェースのIPアドレスを詳しく知りたいです。（主にESW１と２）
投稿2017/08/20 14:16
総合スコア4830
あなたの回答
tips
プレビュー
バッドをするには、ログインかつ
こちらの条件を満たす必要があります。
2017/08/20 14:38
2017/08/20 15:39
2017/08/21 03:34
2017/08/23 13:39