近日又在整vlan,這次有些新進展,但還遇到些問題,想各位能指點指點~
先來一幅簡單的架構圖吧,看招:請移玉步,大了些請認內

解說:
-10.117.144.68是server(Vlan3),10.117.145.45(Vlan4) and 10.117.145.53(Vlan6)是3個不同的vlan.
-10.117.144.68<--->10.117.145.45 Vlan3可連接Vlan4
-10.117.144.68<--->10.117.145.53 Vlan3可連接Vlan6
-10.117.145.52<-X->10.117.145.53 Vlan4不可連接Vlan6
Switch上的設定:
#member of vlan3:(10.117.144.68)
Unit1 Port18 PVid
#member of vlan4:(10.117.145.45)
Unit1 poer20 Port
Unit1 Port18 802.1q
#member of vlan6:(10.117.145.53)
Unit1 poer17 Port
Unit1 Port18 802.1q
#10.117.144.68的設定:
#modprobe 8021q
#ifconfig eth0 0.0.0.0 up
#vconfig add eth0 4
#vconfig add eth0 6
#ifconfig eth0.4 10.117.144.68 broadcast 10.117.145.255 netmask 255.255.254.0 up
#ifconfig eth0.6 10.117.144.69 broadcast 10.117.145.255 netmask 255.255.254.0 up
#兩部workstation不用設定.
測試:
[root@10.117.145.45]#ping 10.117.144.68
echo-request,echo-reply正常.
[root@10.117.145.53]#ping 10.117.144.69
沒有任信息....
[root@10.117.144.68]#tcpdump -i eth0.6
10.117.145.53 > 10.117.144.68 icmp:echo request
10.117.145.53 > 10.117.144.68 icmp:echo request
10.117.145.53 > 10.117.144.68 icmp:echo request
[root@10.117.144.68]#tcpdump -i eth0.4
arp who has 10.117.145.53 tell 10.117.144.69
arp who has 10.117.145.53 tell 10.117.144.69
arp who has 10.117.145.53 tell 10.117.144.69
[root@10.117.144.68]#route -n
Destination Gateway Genmask Iface
10.117.144.0 0.0.0.0 255.255.254.0 eth0.4
10.117.144.0 0.0.0.0 255.255.254.0 eth0.6
127.0.0.0 0.0.0.0 255.0.0.0 lo
依tcpdump的結果看來:
10.117.145.53 ping 10.117.144.69 由eth0.6這vlan interface進來,但卻試由eth0.4回覆,由於不同vlan,所以得不到回應,以至client機一直在等待,連host unreachable的回音也沒有.
問題:
所以想請問應該在那裡下刀?我個人估計可能是那linux server的routing問題,但卻想不出如何作.
註:
-沒有router or L3 switch,只有linux做gateway,希望能以linux無限的創造力去完成~~
-switch是3com super stack 3300 lv2 switch
-測試NIC是eepro100
參考:
802.1Q VLAN implementation for Linux
http://www.candelatech.com/~greear/vlan.htmlLINUX VLAN + Cisco HOWTO(請問這篇是介紹把linux接上原有的vlan,還是拿linux來做router去連接其他vlan?看了幾次還不太明...)
http://www.candelatech.com/~greear/vlan/cisco_howto.html3com network administrator gulid
Thanks.有勞各位了.