Hiện tại em có con sw 3750 làm core chia vlan, và các sw 2960 làm client.
Chả là thế này, hệ thống lâu nay vẫn chạy ok, khoảng 2 tuần trở lại đây tự nhiên hệ thống truy cập mạng internet cực chậm. Internet đang dùng con Drytek 3200 có 2 wan (50 và 55 mb) nối vào cổng 1 của 3750. Giờ em muốn nối cổng 12 của 3750 ra net của Viettel qua (drytek 3220 wan 100mb). Em có cấu hình của 3750 như dưới nhưng vẫn chưa ra net bằng cổng 12 của 3750 đươc. Mong các bác chỉ giúp cho, em cảm ơn nhiều
Building configuration...
Current configuration : 3850 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log datetime
service password-encryption
service sequence-numbers
!
hostname SWL3
!
enable password 7 08701E1D
!
no aaa new-model
clock timezone WAST 7
switch 1 provision ws-c3750g-12s
system mtu routing 1500
ip subnet-zero
ip routing
!
ip dhcp pool vlan10
network 192.168.1.0 255.255.255.0
default-router 192.
dns-server 8.8.8.8
lease 0 4
!
ip dhcp pool vlan20
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 8.8.8.8
lease 0 4
!
ip dhcp pool vlan30
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
dns-server 8.8.8.8
lease 0 4
!
ip dhcp pool vlan40
network 192.168.4.0 255.255.255.0
default-router 192.168.4.1
dns-server 8.8.8.8
lease 0 4
!
ip dhcp pool vlan50
network 192.168.5.0 255.255.255.0
default-router 192.168.5.1
dns-server 8.8.8.8
leas
!
ip dhcp pool HIS
host 192.168.3.10 255.255.255.0
client-identifier dia chi mac
client-name SERVER-IBM
!
ip dhcp pool vlan60
network 192.168.6.0 255.255.255.0
default-router 192.168.6.1
dns-server 8.8.8.8
lease 0 4
!
ip dhcp snooping vlan 10-60
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface GigabitEthernet1/0/1
description Conn DryTek
no switchport
ip address 10.0.0.1 255.0.0.0
!
interface GigabitEther
description Server PACS
switchport access vlan 30
switchport mode access
!
interface GigabitEthernet1/0/3
description Vlan30
switchport access vlan 30
switchport mode access
!
interface GigabitEthernet1/0/4
description Server Online
switchport access vlan 30
switchport mode access
macro description cisco-desktop | cisco-desktop
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/5
description 7Tang1
switchport access vlan 50
switchport mode access
!
interface GigabitEthe
description Unused
!
interface GigabitEthernet1/0/7
description SWL2 BGD-HC
switchport access vlan 10
!
interface GigabitEthernet1/0/8
description SWL2 CDHA
switchport access vlan 40
switchport mode access
!
interface GigabitEthernet1/0/9
description SWL2 ITBV
switchport access vlan 60
switchport mode access
!
interface GigabitEthernet1/0/10
description SWL2 TCKT1
switchport access vlan 20
switchport mode access
!
interface GigabitEthernet1/0/11
description Vlan30_Server
switchport access vlan 30
switchport mode access
!
interface GigabitEthernet1/0/12
description Drytek3220 Vietel
no switchport
ip address 172.16.0.1 255.255.0.0
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address 192.168.1.1 255.255.255.0
!
interface Vlan20
ip address 192.168.2.1 255.255.255.0
!
interface Vlan30
ip address 192.168.3.1 255.255.255.0
!
interface Vlan40
ip address 192.168.4.1 255.255.255.0
!
interface Vlan50
ip address 192.168.5.1 255.255.255.0
ip access-group vlan50 in
!
interface Vlan60
ip address 192.168.6.1 255.255.255.0
ip access-group vlan60 in
!
router rip
version 2
network 10.0.0.0
network 172.16.0.0
network 192.168.1.0
network 192.168.2.0
network 192.168.3.0
network 192.168.4.0
network 192.168.5.0
network 192.168.6.0
no auto-summary
!
ip default-gateway 172.16.0.1
ip classless
ip route profile
ip route 0.0.0.0 0.0.0.0 10.0.0.2
ip route 0.0.0.0 0.0.0.0 GigabitEthernet1/0/12
ip route 192.168.6.0 255.255.255.0 172.16.0.2
ip http server
!
ip access-list extended vlan
deny tcp any any eq 445
deny udp any any eq netbios-ns
deny udp any any eq netbios-dgm
permit ip any any
permit udp 192.168.3.0 0.0.0.255 any eq netbios-ns
!
!
control-plane
!
!
line con 0
line vty 0 4
password 7 091D1C5A
login
length 0
line vty 5 15
password 7 075E731F
login
!
end
Chả là thế này, hệ thống lâu nay vẫn chạy ok, khoảng 2 tuần trở lại đây tự nhiên hệ thống truy cập mạng internet cực chậm. Internet đang dùng con Drytek 3200 có 2 wan (50 và 55 mb) nối vào cổng 1 của 3750. Giờ em muốn nối cổng 12 của 3750 ra net của Viettel qua (drytek 3220 wan 100mb). Em có cấu hình của 3750 như dưới nhưng vẫn chưa ra net bằng cổng 12 của 3750 đươc. Mong các bác chỉ giúp cho, em cảm ơn nhiều
Building configuration...
Current configuration : 3850 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log datetime
service password-encryption
service sequence-numbers
!
hostname SWL3
!
enable password 7 08701E1D
!
no aaa new-model
clock timezone WAST 7
switch 1 provision ws-c3750g-12s
system mtu routing 1500
ip subnet-zero
ip routing
!
ip dhcp pool vlan10
network 192.168.1.0 255.255.255.0
default-router 192.
dns-server 8.8.8.8
lease 0 4
!
ip dhcp pool vlan20
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 8.8.8.8
lease 0 4
!
ip dhcp pool vlan30
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
dns-server 8.8.8.8
lease 0 4
!
ip dhcp pool vlan40
network 192.168.4.0 255.255.255.0
default-router 192.168.4.1
dns-server 8.8.8.8
lease 0 4
!
ip dhcp pool vlan50
network 192.168.5.0 255.255.255.0
default-router 192.168.5.1
dns-server 8.8.8.8
leas
!
ip dhcp pool HIS
host 192.168.3.10 255.255.255.0
client-identifier dia chi mac
client-name SERVER-IBM
!
ip dhcp pool vlan60
network 192.168.6.0 255.255.255.0
default-router 192.168.6.1
dns-server 8.8.8.8
lease 0 4
!
ip dhcp snooping vlan 10-60
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface GigabitEthernet1/0/1
description Conn DryTek
no switchport
ip address 10.0.0.1 255.0.0.0
!
interface GigabitEther
description Server PACS
switchport access vlan 30
switchport mode access
!
interface GigabitEthernet1/0/3
description Vlan30
switchport access vlan 30
switchport mode access
!
interface GigabitEthernet1/0/4
description Server Online
switchport access vlan 30
switchport mode access
macro description cisco-desktop | cisco-desktop
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/5
description 7Tang1
switchport access vlan 50
switchport mode access
!
interface GigabitEthe
description Unused
!
interface GigabitEthernet1/0/7
description SWL2 BGD-HC
switchport access vlan 10
!
interface GigabitEthernet1/0/8
description SWL2 CDHA
switchport access vlan 40
switchport mode access
!
interface GigabitEthernet1/0/9
description SWL2 ITBV
switchport access vlan 60
switchport mode access
!
interface GigabitEthernet1/0/10
description SWL2 TCKT1
switchport access vlan 20
switchport mode access
!
interface GigabitEthernet1/0/11
description Vlan30_Server
switchport access vlan 30
switchport mode access
!
interface GigabitEthernet1/0/12
description Drytek3220 Vietel
no switchport
ip address 172.16.0.1 255.255.0.0
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address 192.168.1.1 255.255.255.0
!
interface Vlan20
ip address 192.168.2.1 255.255.255.0
!
interface Vlan30
ip address 192.168.3.1 255.255.255.0
!
interface Vlan40
ip address 192.168.4.1 255.255.255.0
!
interface Vlan50
ip address 192.168.5.1 255.255.255.0
ip access-group vlan50 in
!
interface Vlan60
ip address 192.168.6.1 255.255.255.0
ip access-group vlan60 in
!
router rip
version 2
network 10.0.0.0
network 172.16.0.0
network 192.168.1.0
network 192.168.2.0
network 192.168.3.0
network 192.168.4.0
network 192.168.5.0
network 192.168.6.0
no auto-summary
!
ip default-gateway 172.16.0.1
ip classless
ip route profile
ip route 0.0.0.0 0.0.0.0 10.0.0.2
ip route 0.0.0.0 0.0.0.0 GigabitEthernet1/0/12
ip route 192.168.6.0 255.255.255.0 172.16.0.2
ip http server
!
ip access-list extended vlan
deny tcp any any eq 445
deny udp any any eq netbios-ns
deny udp any any eq netbios-dgm
permit ip any any
permit udp 192.168.3.0 0.0.0.255 any eq netbios-ns
!
!
control-plane
!
!
line con 0
line vty 0 4
password 7 091D1C5A
login
length 0
line vty 5 15
password 7 075E731F
login
!
end
Comment