为什么通过交换机再走路由器无法上网？PC直接插路由器是可以上网的，是不是交换机里面可能有设置所导致的？

[Vin]

之前老路由器的设置：
ZXR10#show run
Building configuration...
!
!
ip dhcp-client disable
!
urpf log off
!
mac-filter permit all
!
blacklist disable
!
!
interface loopback1
ip address 10.10.10.10 255.255.255.0
out_index 9
ip nat outside
!
interface null1
out_index 1
!
interface cellular1
out_index 2
!
interface cellular2
out_index 3
!
interface fei_0/1
ip address 192.168.0.1 255.255.255.252
out_index 4
negotiation auto
interface-attribute lan
ip policy route-map zte
ip nat inside
!
interface fei_0/2
out_index 5
negotiation auto
interface-attribute lan
!
interface gei_0/3
ip address 192.168.0.5 255.255.255.252
out_index 6
hybrid-attribute fiber
negotiation auto
ip policy route-map zte
ip nat inside
!
interface gei_0/4
ip address 59.51.27.78 255.255.255.0
out_index 7
hybrid-attribute copper
negotiation auto
interface-attribute wan
ip nat outside
!
interface gei_0/5
out_index 8
hybrid-attribute copper
no negotiation auto
!
!
reference clock local
!
ip nat max-entry-number 64
ip nat start
ip nat pool natpool 59.51.27.78 59.51.27.78 prefix-length 24
ip nat inside source list 1 pool natpool overload
ip nat inside source static tcp 192.168.255.4 8088 222.241.161.190 8088
ip nat inside source static tcp 192.168.255.10 8888 222.241.161.190 8888
ip nat inside source static tcp 192.168.255.4 9000 222.241.161.190 9000
ip nat inside source static tcp 192.168.1.123 3389 59.51.27.78 3389
ip nat translation timeout class a 20
ip nat translation timeout class b 60
ip nat translation timeout class c 150
ip nat translation timeout class d 300
ip nat translation timeout class e 1200
ip nat translation timeout protocol icmp a
ip nat translation timeout protocol ip d
ip nat translation timeout protocol tcp port 80 a
ip nat translation timeout protocol tcp d
ip nat translation timeout protocol udp port 4000 d
ip nat translation timeout protocol udp port 4001 d
ip nat translation timeout protocol udp port 4002 d
ip nat translation timeout protocol udp port 4003 d
ip nat translation timeout protocol udp port 8000 d
ip nat translation timeout protocol udp port 8001 d
ip nat translation timeout protocol udp c
ip nat translation maximal default 65535
!
ip route 0.0.0.0 0.0.0.0 59.51.27.1
ip route 192.168.1.0 255.255.255.0 192.168.0.2
ip route 192.168.255.0 255.255.255.0 192.168.0.6
!
voice class service
!
!
no ipv6 nat enable
!
!
time-range disable
!
acl standard number 1
rule 1 permit 192.168.1.0 0.0.0.255
rule 2 permit 192.168.255.0 0.0.0.255
!
acl extended number 100
rule 1 permit ip 192.168.1.0 0.0.0.255 59.51.27.78 0.0.0.0
rule 3 permit ip 192.168.255.0 0.0.0.255 59.51.27.78 0.0.0.0
!
!
!
ip tcp intercept mode intercept
ip tcp intercept drop-mode oldest
ip tcp intercept watch-timeout 30
ip tcp intercept finrst-timeout 5
ip tcp intercept connection-timeout 86400
ip tcp intercept max-incomplete high 1100
ip tcp intercept max-incomplete low 900
ip tcp intercept one-minute high 1100
ip tcp intercept one-minute low 900
!
route-map zte permit 10
match ip address 100
set interface loopback1
!
!
nas
!
version V4.8.01.B.01
!
nvram mng-ip-address 10.40.88.12 255.255.0.0
!
nvram boot-username target
!
nvram boot-password target
!
nvram boot-server 10.40.88.171
!
nvram imgfile-location local
!
hostname ZXR10
!
forward re-fragment time 6
!
enable secret level 15 5 WEUqjcQKZuos+Ff62SjBdA==
!
service password-encryption
!
username zte password encrypted a0a91a7b27f17078b48506f6f76a69a5347dfa1d94f30082
89d8a25d1a179a1d privilege 15
username liuxuwen password encrypted 6cf28ef2d203c91bfdc9077293ce0d8dd48e3accec7
aed1a491f3b95c2c32a6f privilege 15
username weishengju password encrypted 4cd3ecb08176c3850cc660b4ac0d83308de168e97
29517404227f97f5cf1c89d
!
user-authentication-type local
user-authorization-type local
!
line console 0
login authentication
!
banner incoming @
*****************************************************
Welcome to ZXR10 ZSR Serial Router of ZTE Corporation
*****************************************************
@
!
!
lfap disable
lfap max-send-fun-size 100
lfap update-interval 60
lfap server-retry-interval 60
lfap message-response-interval 60
lfap ka-interval 60
lfap flow-expired-time 600
!
!
!
snmp-server location No.68 Zijinghua Rd. Yuhuatai District, Nanjing, China
snmp-server contact [phone]
snmp-server packetsize 1400
snmp-server engine-id 830900020300010289d64401
snmp-server view AllView internet included
snmp-server view DefaultView system included
!
!
web enable
!
logging on
logging buffer 200
logging mode fullcycle
logging console notifications
logging level notifications
logging cmdlog-interval 2880
logging timestamps datetime localtime
alarm cpuload-on
alarm cpuload-interval 30
alarm cpuload-threshold high-grade 95 middle-grade 85 low-grade 75
syslog-server facility local0
!
line console idle-timeout 120
line console absolute-timeout 1440
line telnet idle-timeout 120
line telnet absolute-timeout 1440
!
ssh server enable
ssh server authentication ispgroup 1
ssh server authentication mode local
ssh server authentication type chap
no ssh server only
ssh server version 2
!
!
radius auto-change off
!
!
!
radius server-port-check off
!
!
tacacs disable
tacacs-server timeout 60
tacacs-server packet 1024
!
!
amat disable
system monitor on
!
ip stream disable
!
end


Route tract
C:\Documents and Settings\Administrator>tracert 222.241.161.18

Tracing route to 222.241.161.18 over a maximum of 30 hops

1 3 ms 3 ms 3 ms 192.168.1.1
2 <1 ms <1 ms <1 ms 192.168.0.1
3 4 ms 1 ms 1 ms 59.51.27.1
4 3 ms 1 ms <1 ms 222.241.161.18

Trace complete.

[qiantao]

中兴的路由器?貌似没看到dhcp,交换机是什么型号的?插哪个口?电脑上设手动IP试试?

[Weakdancer]

没听说过交换机可以设置

[Weakdancer]

发现有些交换机可以限制的设置，但是一般是较为大型的，不知道你的具体情况（网络情况）是什么。

[raptium]

@Weakdancer switch 也可以设置的 而且 show run 跑出来不见得比 router 的短……

switch 的设置也贴一下呗

debug 的话 从 switch 上 ping router 看什么情况