Shulou(Shulou.com)06/01 Report--

The network topology diagram is as follows, in order to achieve network equipment and redundancy and link-level redundancy

Because there was no stacking before, and a lot of homework was done before the formal operation, Party B finally came to install and implement the equipment. After the equipment was put on the shelves, Party B was debugging, and I stood at the door to watch, but it always failed, and it was the same with cleaning and reconfiguration. Every time I entered the switch, I could not find the second device. I entered two devices respectively, and all of them showed that they were master.

Seeing that they didn't get it done for more than an hour, I also participated in it (although I was very good at it myself). I checked the configuration and found that it was the same as the operation documentation. All kinds of check commands, the two devices just did not communicate. We were all thinking that it may be the version problem, but the version is actually the same, but the patches are different, and it is not possible to upgrade to the same in the end.

It was not ready from work until 09:30 in the evening, everyone estimated that it was the line problem, so they could not restore the configuration of one and went home.

I've been thinking about it all night, MMP. I've been thinking about it when I sleep.

The next morning, I went to the computer room to fully check the lines and configuration. Nima, I found that the stacking line was probably not plugged in by 2mm. Ten thousand grass mud horses in my heart were plugged in. I quickly checked and had data, but they were all main, rebooting the standby machine, and everything OK.

Do the firewall master and standby the next night, upgrade the same version, guide the configuration, set up the virtual interface, everything goes smoothly, test the Internet, security policy, active and standby, normal, and finally check the external access to the company server and find a problem. External telecommunications can only be accessed through telecom IP, and external mobile can only be accessed through mobile IP.

I didn't struggle much this night. Anyway, I could use it, so I went home early.

In the end, it took three days to solve the problem. I went to Huawei after sale and didn't solve it. Finally, I tried to set it up one by one.

This is the hook that has been entangled for three days.

The principle is that the device performs a routing table reverse check on the source IP address of the message. If the reverse check scares the best exit and the incoming interface of the message is not equal, it will be regarded as IP spoofing and discarding the packet.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.