GrDEV Posted April 15, 2017 Posted April 15, 2017 Добрый день. Есть такая схема. Сервер, который выступает в роли шлюза и на котором работает DHCP сервер и DNS сервер. К нему подключен L3 свич К L3 свичу подключен OLT К OLT подключена ONU На сервере две сетевые одна смотрит в сторону провайдера, вторая смотрит в сторону L3 IP на сервере 10.0.0.2 IP на L3 свиче 10.0.0.1 В качестве L3 используется cisco 3550-12G Маршрутизация настроена. Из сервера пингуется L3 и OLT Из OLT пингуется L3 и сервер. Конфигурация L3 Building configuration... Current configuration : 3726 bytes ! version 12.2 no service pad service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname L3 ! ! ! no aaa new-model ip routing ip dhcp relay information option ! ! ip dhcp snooping vlan 1,20 ip dhcp snooping ! ! spanning-tree mode pvst spanning-tree extend system-id ! vlan internal allocation policy ascending ! ! ! ! ! ! interface GigabitEthernet0/1 switchport mode dynamic desirable ! interface GigabitEthernet0/2 switchport mode dynamic desirable ! interface GigabitEthernet0/3 switchport mode dynamic desirable ! interface GigabitEthernet0/4 switchport mode dynamic desirable ! interface GigabitEthernet0/5 switchport mode dynamic desirable ! interface GigabitEthernet0/6 switchport mode dynamic desirable ! interface GigabitEthernet0/7 switchport mode dynamic desirable ! interface GigabitEthernet0/8 switchport mode dynamic desirable ! interface GigabitEthernet0/9 switchport mode dynamic desirable ! interface GigabitEthernet0/10 switchport mode dynamic desirable ! interface GigabitEthernet0/11 description To_NAS no switchport ip address 10.0.0.1 255.255.255.0 ! interface GigabitEthernet0/12 description To_OLT1 switchport trunk encapsulation dot1q switchport trunk allowed vlan 2,20 switchport mode trunk ! interface Vlan1 no ip address shutdown ! interface Vlan2 description Management ip address 172.16.0.1 255.255.255.0 ! interface Vlan20 description PON ip address 172.20.0.1 255.255.255.0 ip helper-address 10.0.0.2 ! ip classless ip route 0.0.0.0 0.0.0.0 10.0.0.2 ip http server ip http secure-server ! ! control-plane ! ! end Конфигурация OLT Building configuration... Current configuration: ! !version 10.1.0E build 36957 service timestamps log date service timestamps debug date logging buffered 4096 ! hostname OLT port-protected 1 ! ! ! ! ip default-gateway 172.16.0.1 ! ! spanning-tree mode rstp ! ! ! ! ! ! ! ! ! ! ! aaa authentication login default local aaa authentication enable default none aaa authorization exec default local ! username admin password 0 admin ! ! epon oam-version 1 0x21 epon oam-version 2 0x20 ! epon onu-config-template T1 cmd-sequence 1 epon onu all-port ctc vlan mode tag 20 cmd-sequence 2 epon onu all-port ctc loopback detect ! ! !!slot 0 89 interface GigaEthernet0/1 description To_L3 switchport trunk vlan-allowed 2,20 switchport mode trunk dhcp snooping trust arp inspection trust ip-source trust ! interface GigaEthernet0/2 ! interface GigaEthernet0/3 ! interface GigaEthernet0/4 ! interface GigaEthernet0/5 ! interface GigaEthernet0/6 ! interface EPON0/1 epon pre-config-template T1 binded-onu-llid 1-64 epon bind-onu mac 8014.a84a.e5d8 1 switchport trunk vlan-allowed 20 switchport mode trunk switchport protected 1 ! interface EPON0/1:1 epon onu port 1 ctc vlan mode tag 20 priority 0 epon onu port 1 loopback detect ! interface EPON0/2 switchport protected 1 ! interface EPON0/3 switchport protected 1 ! interface EPON0/4 switchport protected 1 ! !!slot end ! interface VLAN2 description Management ip address 172.16.0.3 255.255.255.0 ! interface VLAN20 ip address 172.20.0.100 255.255.255.0 ! ! ! vlan 1-2,20 ! ! ! ! ip dhcp-relay snooping ip dhcp-relay snooping vlan 1,20 ip arp inspection vlan 20 ip verify source vlan 20 ip dhcp-relay snooping information option format hn-type ip dhcp-relay agent ip dhcp-relay helper-address 10.0.0.2 vlan 1 ! ! ip http server ! ! ! snmp-server community 0 public RO ! line console 0 length 0 width 256 ! ! ! time-zone Kyiv 2 0 ntp server 10.0.0.2 ! !Pending configurations for absent linecards: ! !No configurations pending global В снифере пусто. Не получается получить IP Если убрать L3 и прописать VLAN на сервере то все работает. Как заставить такую связку работать?
l1ght Posted April 15, 2017 Posted April 15, 2017 (edited) Маршрут на сервере есть? Показывайте таблицу маршрутизации на сервере. Белые ипишки и сети можете не показывать. На сервере фря? route add -net 172.20.0.0/24 10.0.0.1 В логи смотрите, оно ж полюбому кричит что не знает маршрута (если фря то будет в dmesg -a) Ну и выключить релей на олте. Как и dhcp snooping. Оставить снупинг и релей на циско. Edited April 15, 2017 by l1ght
GrDEV Posted May 16, 2017 Author Posted May 16, 2017 Появилось время для дальнейшего ковыряния.... 1) Маршрут на сервере есть. Из сервера видно и Л3 и ОЛТ. 2) Routing tables Internet: Destination Gateway Flags Netif Expire default 192.168.0.1 UGS bge0 10.0.0.0/24 link#2 U bge1 10.0.0.2 link#2 UHS lo0 127.0.0.1 link#3 UH lo0 172.16.0.0/24 10.0.0.1 UGS bge1 172.17.0.0/24 10.0.0.1 UGS bge1 172.18.0.0/24 10.0.0.1 UGS bge1 172.20.0.0/24 10.0.0.1 UGS bge1 192.168.0.0/24 link#1 U bge0 192.168.0.106 link#1 UHS lo0 3) Да, на сервере фря. Маршруты прописаны. 4) Кричит. May 16 14:15:10 GTBilling dhcpd: DHCPDISCOVER from 90:f6:52:77:4f:f9 via 172.20.0.1: network 172.20.0.0: no free leases May 16 14:15:41 GTBilling dhcpd: DHCPDISCOVER from 90:f6:52:77:4f:f9 via 172.20.0.1: network 172.20.0.0: no free leases Хотя в конфиге ДХЦП прописано class "m172x20x0x2" { match if binary-to-ascii(16,8,":",substring(option agent.remote-id,0,6)) = "80:14:a8:4a:e5:d8"; }pool {range 172.20.0.2;allow members of "m172x20x0x2";} 80:14:a8:4a:e5:d8 - это мак ОНУ. 90:f6:52:77:4f:f9 - это мак клиента. Настройки ДХЦП shared-network 172.20.0.0 {subnet 172.20.0.0 netmask 255.255.255.0 { default-lease-time 3600; option domain-name "ISP"; option domain-name-servers 172.20.0.1;option subnet-mask 255.255.255.0; option routers 172.20.0.1; include "/usr/local/etc/multinet/pon.conf"; } } В итоге ИП не присваивается. Текущая конфигурация ЛЗ Building configuration... Current configuration : 4614 bytes ! version 12.2 no service pad service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname L3 ! ! ! no aaa new-model ip routing ip dhcp relay information option no ip dhcp relay information check ip dhcp relay information trust-all ! ! no ip dhcp snooping information option ! ! spanning-tree mode pvst spanning-tree extend system-id ! vlan internal allocation policy ascending ! ! ! ! ! ! interface GigabitEthernet0/1 switchport mode dynamic desirable ! interface GigabitEthernet0/2 switchport mode dynamic desirable ! interface GigabitEthernet0/3 switchport mode dynamic desirable ! interface GigabitEthernet0/4 switchport mode dynamic desirable ! interface GigabitEthernet0/5 switchport mode dynamic desirable ! interface GigabitEthernet0/6 switchport mode dynamic desirable ! interface GigabitEthernet0/7 switchport mode dynamic desirable ! interface GigabitEthernet0/8 switchport mode dynamic desirable ! interface GigabitEthernet0/9 switchport mode dynamic desirable ! interface GigabitEthernet0/10 switchport mode dynamic desirable ! interface GigabitEthernet0/11 description To_NAS no switchport ip address 10.0.0.1 255.255.255.0 ! interface GigabitEthernet0/12 description To_OLT1 switchport trunk encapsulation dot1q switchport trunk allowed vlan 2,20 switchport mode trunk ! interface Vlan1 no ip address shutdown ! interface Vlan2 description Management ip address 172.16.0.1 255.255.255.0 ! interface Vlan20 description GPON ip address 172.20.0.1 255.255.255.0 ip helper-address 10.0.0.2 ! ip classless ip route 0.0.0.0 0.0.0.0 10.0.0.2 ip http server ip http secure-server ! ! snmp-server community public RO ! control-plane ! ! end Настройки ОЛТ Building configuration... Current configuration: ! !version 10.1.0E build 36957 service timestamps log date service timestamps debug date logging buffered 4096 ! hostname OLT port-protected 1 ! ! ! ! ip default-gateway 172.16.0.1 ! ! spanning-tree mode rstp ! ! ! ! ! ! ! ! ! ! ! aaa authentication login default local aaa authentication enable default none aaa authorization exec default local ! username admin password 0 admin ! ! epon oam-version 1 0x21 epon oam-version 2 0x20 ! epon onu-config-template T1 cmd-sequence 1 epon onu all-port ctc vlan mode tag 20 cmd-sequence 2 epon onu all-port ctc loopback detect ! ! !!slot 0 89 interface GigaEthernet0/1 description UpLINK switchport trunk vlan-allowed 2,20 switchport mode trunk ! interface GigaEthernet0/2 switchport pvid 20 ! interface GigaEthernet0/3 ! interface GigaEthernet0/4 ! interface GigaEthernet0/5 ! interface GigaEthernet0/6 ! interface EPON0/1 epon pre-config-template T1 binded-onu-llid 1-64 epon bind-onu mac 8014.a84a.e5d8 1 switchport trunk vlan-allowed 20 switchport mode trunk switchport protected 1 ! interface EPON0/1:1 epon onu port 1 ctc vlan mode tag 20 priority 0 epon onu port 1 loopback detect ! interface EPON0/2 switchport protected 1 ! interface EPON0/3 switchport protected 1 ! interface EPON0/4 switchport protected 1 ! !!slot end ! interface VLAN2 description Management ip address 172.16.0.3 255.255.255.0 ! interface VLAN20 ip address 172.20.0.100 255.255.255.0 ! ! ! vlan 1-2,20 ! ! ! ! ! ! ip http server ! ! ! snmp-server community 0 public RO ! line console 0 length 0 width 256 ! ! ! time-zone Kyiv 2 0 ntp server 10.0.0.2 ! !Pending configurations for absent linecards: ! !No configurations pending global
GrDEV Posted May 17, 2017 Author Posted May 17, 2017 Конфиг ДХЦП сгенерирован UBilling'ом. Там range вроди не нужен.
GrDEV Posted May 18, 2017 Author Posted May 18, 2017 Если напрямую к серверу подключать - все работает. Через CISCO 3550 упорно не хочет. В логах DHCP пишет DHCPDISCOVER from 90:f6:52:77:4f:f9 via 172.20.0.1: network 172.20.0.0: no free leases
GrDEV Posted May 18, 2017 Author Posted May 18, 2017 Такс... Вот к чему пришел. DHCP сервер получает запрос от клиента, но вот ответ от сервера до клиента не доходит. Где может быть проблема?
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now