经典排错总结.docVIP

client 1 is able to ping but not ,initial troublesshooting shows that R1 does not have any OSPF neighbors or any OSPF routes. ip ospf authentication: 一般是 R1和R2上的s0/0接口上的认证不匹配造成的，所以直接用show run看一下R1和R2上的接口 HSRP has been configurationured between DSW1 and DSW2. DSW1 is configurationured to be active router but is never becomes active even though the communication between DSW1 and DSW2 is working. HSRP ： Dsw1没有成为活动者，这个可以在dsw1上看他的hsrp的配置，在本实例中是由于路由跟踪错误。 Client 1 is able to ping 26 but not the Web Server at 41 ,Initial troubleshooting shows and R1 does not have any BGP routes.R1 also does not show any active BGP neighbor. BGP neighbor 这个主要是R1上的BGP的邻居指定有错误，所以，直接到R1上看关于BGP的邻居的地址以及AS号是否正确。 Client 1 and Client 2 are not able to reach the WebServer at 41, Initial troubleshooting shows that DSW1 , DSW2 and all the routers are able to reach the WebServer. NAT ACL 客户端不能PING通WEB server,但DSW1和DSW2以及其它的路由器都能PING通，这说明错误就在DSW1上，show run一下发觉是NAT的access-list的地范围弄错了。 Client 1 is not able to reach the WebServer at 41 ,Initail troubleshooting shows that R1 is also not able to reach the WebServer ,R1 also does not have any active BGP neighbor. R1 ACL 客户机不能PING通 web server R1也不能Ping 通，可以检查R1发觉是access-list 拒绝了内部的地址也拒绝了R1上的s0/0/1上的地址，所以我们应该添加一条允许R1上的s0/0/1上的地址，因为这个地址是用来转换内部地址到该地址的。 Client 1 is getting an ip address from the DHCP server but is not able to ping DSW1 or the FTP Server. VLAN-filter 客户机能够从DHCP获得地址但ping不通DSW1和FTP server这说明一定在DSW1上过滤掉了客户机的IP地址，因为能够获得地址则说明过滤列表没有拒绝55这个客户机请求DHCP服务器的广播地址以及DHCP服务器的地址。利用show run 看一下DWS1的配置即可。 Client 1 is getting a 169.x.x.x IP address and is not able to ping Client 2 or DSW1 ,Initial troubleshooting shows that port Fa1/0/1 on ASW1 is in errdisable state. Switchport security 客户机得到一个地址169.x.x.x的地址但不能ping能DWS1和client2我们可以先从asw1着手，先检查client1所连接的端口，发觉应用了switchport security并且设定了静态MAC地址，这是因为系统默认一个接口最多只能有一个mac地址（switchport security开启的情况下）于是我们去掉这个手动指定的静态MAC地址，然后再ping 一下即可。 Client 1 and Client 2 are getting a 169.x.x.x IP address and are not able to ping DSW1