Порт 0 Кинетика подключен в порт коммутатора провайдера. Порт коммутатора работает в режиме trunk, разрешены следующие VLAN: 300, 390, 400. VLAN 300 — отдельная закрытая подсеть с приватной адресацией (10.102.2xx/24). VLAN 390 — отдельный изолированный L2VPN, без IP-адресации, должен быть сбриджеван с портами 3 и 4. VLAN 400 — VLAN, в котором должно быть установлено PPPoE-подключение для доступа в интернет. То есть коротко: 0.400 - интернет PPPoE, 0.300 - закрытая подсеть, 0.390+3+4 - бридж, 1+2 - локальная сеть.
Через веб-интерфейс я такое настроить не могу, он глючит и не дает выбрать нужные параметры.
Составил такую текстовую конфигурацию (которую буду загружать вместо startup-config), просьба ее проверить и посоветовать изменения:
Скрытый текст
! $$$ Model: ZyXEL Keenetic II
! $$$ Version: 2.06.1
! $$$ Agent: http/ci
! $$$ Last change: Fri, 7 Apr 2017 09:32:51 GMT
! $$$ Md5 checksum: 00e991046865532fb544976593d90416
system
set net.ipv4.ip_forward 1
set net.ipv4.tcp_fin_timeout 30
set net.ipv4.tcp_keepalive_time 120
set net.ipv4.netfilter.ip_conntrack_tcp_timeout_established 1200
set net.ipv4.netfilter.ip_conntrack_max 10240
set vm.swappiness 100
no button WLAN on click
no button WLAN on hold
no button FN on click
clock timezone Europe/Moscow
clock date 7 Apr 2017 12:33:52
domainname LIVE
hostname GATEWAY
!
ntp server ntp.live.local
ntp server ntp.domain.ru
ntp server ru.pool.ntp.org
isolate-private
dyndns profile _WEBADMIN
!
interface FastEthernet0
up
!
interface FastEthernet0/0
name 0
switchport mode trunk
switchport trunk vlan 300,400,390
up
!
interface FastEthernet0/1
name 1
switchport mode access
switchport access vlan 1
up
!
interface FastEthernet0/2
name 2
switchport mode access
switchport access vlan 1
up
!
interface FastEthernet0/3
name 3
switchport mode access
up
!
interface FastEthernet0/4
name 4
switchport mode access
up
!
interface FastEthernet0/Vlan1
description "Home VLAN"
security-level private
ip dhcp client dns-routes
ip dhcp client name-servers
up
!
interface FastEthernet0/Vlan300
description IPCAMS
security-level public
ip address 10.102.200.254 255.255.255.0
ip dhcp client hostname GATEWAY
ip dhcp client dns-routes
ip dhcp client name-servers
ip mtu 1500
up
!
interface FastEthernet0/Vlan400
description PPPOE
security-level public
ip mtu 1500
up
!
interface FastEthernet0/Vlan390
description VPN
security-level public
ip mtu 1500
up
!
interface PPPoE0
description INET
no ipv6cp
lcp echo 30 3
ipcp default-route
ipcp name-servers
ipcp dns-routes
no ccp
security-level public
authentication identity test
authentication password ns3 pwd
ip dhcp client dns-routes
ip dhcp client name-servers
ip mtu 1492
ip global 1000
ip tcp adjust-mss pmtu
up
!
interface WifiMaster0
country-code RU
compatibility BGN
channel width 40-below
power 100
up
!
interface WifiMaster0/AccessPoint0
name AccessPoint
description "Wi-Fi access point"
mac access-list type none
security-level private
encryption disable
ip dhcp client dns-routes
ip dhcp client name-servers
ssid PRIVATE
wmm
down
!
interface WifiMaster0/AccessPoint1
name GuestWiFi
description GUEST
mac access-list type none
security-level protected
encryption disable
ip address 192.168.255.250 255.255.255.0
ip dhcp client dns-routes
ip dhcp client name-servers
ssid PUBLIC
wmm
down
!
interface WifiMaster0/AccessPoint2
mac access-list type none
security-level private
ip dhcp client dns-routes
ip dhcp client name-servers
down
!
interface WifiMaster0/AccessPoint3
mac access-list type none
security-level private
ip dhcp client dns-routes
ip dhcp client name-servers
down
!
interface WifiMaster0/WifiStation0
security-level public
encryption disable
ip address dhcp
ip dhcp client dns-routes
ip dhcp client name-servers
down
!
interface Bridge0
name Local
description LAN
inherit FastEthernet0/Vlan1
include AccessPoint
security-level private
ip address 10.102.254.250 255.255.255.0
ip dhcp client dns-routes
ip dhcp client name-servers
up
!
interface Bridge1
name VPN
description LAN
inherit FastEthernet0/Vlan390
include 3
include 4
security-level private
up
!
ip route 10.102.0.0 255.255.0.0 10.102.200.250 FastEthernet0/Vlan300 auto
ip dhcp pool _WEBADMIN
range 10.102.254.1 10.102.254.99
lease 25200
bind Home
enable
!
ip dhcp pool _WEBADMIN_GUEST_AP
range 192.168.255.1 192.168.255.99
lease 7200
bind GuestWiFi
enable
!
ip name-server 10.102.0.40 "" on FastEthernet0/Vlan300
ip nat GuestWiFi
ppe software
ppe hardware
!
user admin
password md5 pwd
password nt pwd
tag cli
tag http
tag ftp
tag cifs
tag printers
tag torrent
!
user user
password md5 pwd
password nt pwd
tag readonly
!
service dhcp
service dns-proxy
service cifs
service http
service telnet
service ntp-client
service upnp
cifs
automount
permissive
!
Но такое не работает. Как правильно создать бридж?
You can post now and register later.
If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.
Question
support@cyber.com.ru
Помогите настроить Кинетик под следующую задачу.
Порт 0 Кинетика подключен в порт коммутатора провайдера. Порт коммутатора работает в режиме trunk, разрешены следующие VLAN: 300, 390, 400. VLAN 300 — отдельная закрытая подсеть с приватной адресацией (10.102.2xx/24). VLAN 390 — отдельный изолированный L2VPN, без IP-адресации, должен быть сбриджеван с портами 3 и 4. VLAN 400 — VLAN, в котором должно быть установлено PPPoE-подключение для доступа в интернет. То есть коротко: 0.400 - интернет PPPoE, 0.300 - закрытая подсеть, 0.390+3+4 - бридж, 1+2 - локальная сеть.
Через веб-интерфейс я такое настроить не могу, он глючит и не дает выбрать нужные параметры.
Составил такую текстовую конфигурацию (которую буду загружать вместо startup-config), просьба ее проверить и посоветовать изменения:
! $$$ Model: ZyXEL Keenetic II ! $$$ Version: 2.06.1 ! $$$ Agent: http/ci ! $$$ Last change: Fri, 7 Apr 2017 09:32:51 GMT ! $$$ Md5 checksum: 00e991046865532fb544976593d90416 system set net.ipv4.ip_forward 1 set net.ipv4.tcp_fin_timeout 30 set net.ipv4.tcp_keepalive_time 120 set net.ipv4.netfilter.ip_conntrack_tcp_timeout_established 1200 set net.ipv4.netfilter.ip_conntrack_max 10240 set vm.swappiness 100 no button WLAN on click no button WLAN on hold no button FN on click clock timezone Europe/Moscow clock date 7 Apr 2017 12:33:52 domainname LIVE hostname GATEWAY ! ntp server ntp.live.local ntp server ntp.domain.ru ntp server ru.pool.ntp.org isolate-private dyndns profile _WEBADMIN ! interface FastEthernet0 up ! interface FastEthernet0/0 name 0 switchport mode trunk switchport trunk vlan 300,400,390 up ! interface FastEthernet0/1 name 1 switchport mode access switchport access vlan 1 up ! interface FastEthernet0/2 name 2 switchport mode access switchport access vlan 1 up ! interface FastEthernet0/3 name 3 switchport mode access up ! interface FastEthernet0/4 name 4 switchport mode access up ! interface FastEthernet0/Vlan1 description "Home VLAN" security-level private ip dhcp client dns-routes ip dhcp client name-servers up ! interface FastEthernet0/Vlan300 description IPCAMS security-level public ip address 10.102.200.254 255.255.255.0 ip dhcp client hostname GATEWAY ip dhcp client dns-routes ip dhcp client name-servers ip mtu 1500 up ! interface FastEthernet0/Vlan400 description PPPOE security-level public ip mtu 1500 up ! interface FastEthernet0/Vlan390 description VPN security-level public ip mtu 1500 up ! interface PPPoE0 description INET no ipv6cp lcp echo 30 3 ipcp default-route ipcp name-servers ipcp dns-routes no ccp security-level public authentication identity test authentication password ns3 pwd ip dhcp client dns-routes ip dhcp client name-servers ip mtu 1492 ip global 1000 ip tcp adjust-mss pmtu up ! interface WifiMaster0 country-code RU compatibility BGN channel width 40-below power 100 up ! interface WifiMaster0/AccessPoint0 name AccessPoint description "Wi-Fi access point" mac access-list type none security-level private encryption disable ip dhcp client dns-routes ip dhcp client name-servers ssid PRIVATE wmm down ! interface WifiMaster0/AccessPoint1 name GuestWiFi description GUEST mac access-list type none security-level protected encryption disable ip address 192.168.255.250 255.255.255.0 ip dhcp client dns-routes ip dhcp client name-servers ssid PUBLIC wmm down ! interface WifiMaster0/AccessPoint2 mac access-list type none security-level private ip dhcp client dns-routes ip dhcp client name-servers down ! interface WifiMaster0/AccessPoint3 mac access-list type none security-level private ip dhcp client dns-routes ip dhcp client name-servers down ! interface WifiMaster0/WifiStation0 security-level public encryption disable ip address dhcp ip dhcp client dns-routes ip dhcp client name-servers down ! interface Bridge0 name Local description LAN inherit FastEthernet0/Vlan1 include AccessPoint security-level private ip address 10.102.254.250 255.255.255.0 ip dhcp client dns-routes ip dhcp client name-servers up ! interface Bridge1 name VPN description LAN inherit FastEthernet0/Vlan390 include 3 include 4 security-level private up ! ip route 10.102.0.0 255.255.0.0 10.102.200.250 FastEthernet0/Vlan300 auto ip dhcp pool _WEBADMIN range 10.102.254.1 10.102.254.99 lease 25200 bind Home enable ! ip dhcp pool _WEBADMIN_GUEST_AP range 192.168.255.1 192.168.255.99 lease 7200 bind GuestWiFi enable ! ip name-server 10.102.0.40 "" on FastEthernet0/Vlan300 ip nat GuestWiFi ppe software ppe hardware ! user admin password md5 pwd password nt pwd tag cli tag http tag ftp tag cifs tag printers tag torrent ! user user password md5 pwd password nt pwd tag readonly ! service dhcp service dns-proxy service cifs service http service telnet service ntp-client service upnp cifs automount permissive !Но такое не работает. Как правильно создать бридж?
Link to comment
Share on other sites
11 answers to this question
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.