ROS IPIP本地虚接口实接口配置好后不通
发布网友
发布时间:2022-05-02 21:51
我来回答
共1个回答
热心网友
时间:2022-06-27 14:57
1,先排除两边防火墙规则是否有放行。
2,如果防火墙无问题,检查mss值有无做重分片规则。
3,以下是我网做的一个ipip tunnel,并能ping通的规则,(路由a*ip xxx.xxx.xxx.xxx ,ipiptunnel地址10.6.60.2;;;; 路由b*ip yyy.yyy.yyy.yyy,ipiptunnel地址10.6.60.1)
路由a:
[admin@8] /ip address> /in ip ex
/interface ipip
add comment="" disabled=no local-address=xxx.xxx.xxx.xxx mtu=1480 name=ipip1 \
remote-address=yyy.yyy.yyy.yyy
[admin@8] /ip address> print where interface=ipip1
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
60 10.6.60.2/30 10.6.60.0 10.6.60.3 ipip1
[admin@8] /ip address> /ping 10.6.60.1
10.6.60.1 64 byte ping: ttl=64 time=28 ms
10.6.60.1 64 byte ping: ttl=64 time=48 ms
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max = 28/38.0/48 ms
路由b
[administrators@MikroTik] > in ip ex
/interface ipip
add comment="" disabled=no local-address=yyy.yyy.yyy.yyy mtu=1480 name=ipip1 \
remote-address=xxx.xxx.xxx.xxx
[administrators@MikroTik] > /ip ad print where interfa=ipip1
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
[administrators@MikroTik] > /ip ad print where interface=ipip1
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
0 10.6.60.1/30 10.6.60.0 10.6.60.3 ipip1
[administrators@MikroTik] > ping 10.6.60.2
10.6.60.2 64 byte ping: ttl=64 time=69 ms
10.6.60.2 64 byte ping: ttl=64 time=87 ms
10.6.60.2 64 byte ping: ttl=64 time=58 ms
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max = 58/71.3/87 ms追问回来逛一圈,关于MMS分片那个具体体现故障是怎么样的啊,咋那个地方?貌似我没动过