Shulou(Shulou.com)06/01 Report--

One day, a customer called and said that an IP address could not be accessed by HTTP in the external network, and the PING was not accessible. I logged in to the network and accessed the IP address directly through HTTP. I found that the address could be opened normally. So log in to FWSM, FWSM uses virtual firewall technology, virtual out of two firewalls, one is telecommunications, the other is education.

The user's IP address belongs to the educational network IP. There is no problem with routing and ACL on the firewall, but when the PING is outside the network, it is found that the host cannot be found, and the PING internal network can be PING connected. Use sh int vl 401 to view the outside interface and find that it is in the down state. I went back to 7609 and looked again at the configuration of FWSM and the division of VLAN, and found that there was no problem.

I really want to shout MD at this time!

I checked it again from beginning to end, but no problem was found.

.

A long time later, in fact, not that long. I set my sights on sh run | in firewall, trying to force me to do it. As soon as I was cruel, I deleted the two VLAN associated with education from the list of FWSM associations, and then associated them again.

When I went into FWSM and used sh int vlan 401, I couldn't help shouting MD, and this interface was up! From the external network to find a machine PING, through, using HTTP access, also through!

At this point, this strange fault has finally been solved! It's just that the cause of the failure is not known yet. In suspense...

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.