Добрый день.
Решили попробовать сабж, не получается отправить/обновить прошивку/log на TFTP сервер подключенный по VPN.
Упрощенная схема выглядит так: 1100-18/ме-1100-06/ме-бордер(он же VPN сервер)-инет-VPN клиент(он же TFTP сервер).
По телнет свич с VPN клиента доступен.
Файлы не скачиваются/передаются, такое впечатление что вообще ничего не происходит, в логе TFTP сервера пусто.
При этом с вышестоящего 1100-06/ME все действия с этим TFTP сервером проходят успешно, в логах отображается все действия работы со свичем.
В этом же порту куда подключен 18/ME настраиваются/обновляются 06/ME без каких либо описанных выше проблем.
Куда копать ?
Конфиг:
Код:
Trying 10.90.90.90...
Connected to 10.90.90.90.
Escape character is '^]'.
PassWord:
DGS-1100-18/ME:admin#
DGS-1100-18/ME:admin#sh conf cur
Command : show config current_config
# DGS-1100-18/ME Gigabit Ethernet Switch
# Configuration
#
# Firmware: Build 1.00.010
# Copyright(C) 2014 D-Link Corporation. All rights reserved.
#EEE#
config eee portlist 1-18 state disable
#MIRROR#
disable mirror
#MULTICAST FILTER#
config multicast filter forward
#VOICE VLAN#
disable voice_vlan
config voice_vlan ports list 1-18 state disable
config voice_vlan ports list 1-18 mode autountagged
config voice_vlan priority 5
config voice_vlan aging_time 720
#SURVEILLANCE_VLAN VLAN#
disable surveillance_vlan
config surveillance_vlan priority 5
config surveillance_vlan aging_time 720
#SAFEGUARD ENGINE#
config safeguard_engine state disable
#LBD#
disable loopdetect
config loopdetect lbd_recover_time 60
config loopdetect interval_time 10
config loopdetect ports port_list 1-18 state enable
config loopdetect trap none
#IPIF#
config ipif System dhcp retry_time 7
config ipif System ipaddress 10.90.90.90/24
config ipif System ipv6 state disable
create iproute default 10.90.90.250
#ASYMMETRIC VLAN#
disable asymmetric_vlan
#TELNET#
#DOS_PREVENTION#
config dos_prevention dos_type land_attack state disable
config dos_prevention dos_type blat_attack state disable
config dos_prevention dos_type tcp_null_scan state disable
config dos_prevention dos_type tcp_xmasscan state disable
config dos_prevention dos_type tcp_synfin state disable
config dos_prevention dos_type tcp_syn_srcport_less_1024 state disable
config dos_prevention dos_type ping_death_attack state disable
#QOS#
config 802.1p default_priority ports 1-18 Medium
config scheduling_mechanism ports 1-18 sp
config bandwidth_control 1-18 rx_rate no_limit
config bandwidth_control 1-18 tx_rate no_limit
#STP#
disable stp
config stp ports 1-18 edge true
config stp trap new_root disable
config stp trap topo_change disable
config stp version rstp
#SNTP#
disable sntp
config sntp ipaddress 0.0.0.0
config sntp poll_interval 720
#DST#
config dst disable
#TIME_RANGE#
#TIME_ZONE#
config time_zone operator + hour 0 minute 0
#SNMP#
create snmp community public read_only
create snmp community private read_write
disable snmp authenticate_traps
disable snmp traps
disable snmp
config snmp linkup_traps disable
config snmp linkdown_traps disable
config snmp coldstart_traps disable
config snmp warmstart_traps disable
config snmp system_contact
config snmp system_location
config snmp system_name SWITCH
#ZONE_DEFENSE#
disable zone_defense
#DDP#
disable ddp
config ddp report_time never
#JUMBO_FRAME#
config jumbo_frame ports 1-18 state disable
#LINK_AGGREGATION#
#LACP#
#LLDP#
disable lldp
config lldp notification disable
#SYSLOG#
enable syslog
config syslog host severity all
config syslog host state disable
config syslog host facility local7
config syslog host ipaddress 0.0.0.0
config syslog host udp_port 514
#IGMPSNOOP#
disable igmp_snooping multicast_vlan
disable igmp_snooping
config igmp_snooping vlanid 1,7 fast_leave disable
config igmp_snooping vlanid 1,7 state disable
config igmp_snooping querier vlanid 1,7 state disable
#MLDSNOOP#
disable mld_snooping multicast_vlan
disable mld_snooping
config mld_snooping vlanid 1,7 fast_leave disable
config mld_snooping vlanid 1,7 state disable
config mld_snooping querier vlanid 1,7 state disable
#VLAN#
create vlan vlanid 1,7
disable pvid auto_assign
enable management_vlan
config management_vlan 1
config vlan vlanid 1 add untagged 1-18
#FDB#
config fdb aging_time 300
#PORTS#
config ports 1-18 description clear_description
config ports 1-18 flow_control disable
config ports 1-18 learning enable
config ports 1-18 mdix auto
config ports 1-18 speed auto
config ports 1-18 state enable
#POWER SAVING#
config power_saving global link_detection_scheduled disable
config power_saving global port_shutdown_scheduled disable
config power_saving global hibernation_scheduled disable
config power_saving global dim-led_scheduled disable
config power_saving global administrative_dim_led disable
#POE#
#TRAFFIC_SEGMENTATION#
config traffic_segmentation 1-18 forward_list all
#STORM_CONTROL#
config traffic control ports 1-18 no_limit
DGS-1100-18/ME:admin#
Код:
DGS-1100-18/ME:admin#ping 192.168.58.22
Command : ping 192.168.58.22
Reply from 192.168.58.22, time=28ms
Reply from 192.168.58.22, time=18ms
Reply from 192.168.58.22, time=14ms
Reply from 192.168.58.22, time=15ms
Reply from 192.168.58.22, time=14ms
Reply from 192.168.58.22, time=14ms
Reply from 192.168.58.22, time=16ms
Reply from 192.168.58.22, time=15ms
Reply from 192.168.58.22, time=14ms
Reply from 192.168.58.22, time=15ms
Reply from 192.168.58.22, time=15ms
Reply from 192.168.58.22, time=15ms
Reply from 192.168.58.22, time=15ms
Reply from 192.168.58.22, time=17ms
Reply from 192.168.58.22, time=16ms
Reply from 192.168.58.22, time=26ms
Reply from 192.168.58.22, time=16ms
Reply from 192.168.58.22, time=14ms
Ping Statistics for 192.168.58.22
Packets: Sent =18, Received =18, Lost =0
DGS-1100-18/ME:admin#upload firmware_toTFTP 192.168.58.22 159.38 image_id 1
Command : upload firmware_toTFTP 192.168.58.22 159.38 image_id 1
TFTP is in process
DGS-1100-18/ME:admin#upload firmware_toTFTP 192.168.58.22 159.38 image_id 1
Command : upload firmware_toTFTP 192.168.58.22 159.38 image_id 1
TFTP is in process
DGS-1100-18/ME:admin#download firmware_fromTFTP 192.168.58.22 im image_id 2
Command : download firmware_fromTFTP 192.168.58.22 im image_id 2
TFTP is in process
DGS-1100-18/ME:admin#sh fir in
Command : show firmware information
Image ID : 1 (Current) (Next boot up)
Version : 1.00.010
Size : 1752904 Bytes
Update Time : 2015-06-01 10:54:46
Image ID : 2
Version : 1.00.010
Size : 1752904 Bytes
Update Time : 2015-06-01 10:55:35
DGS-1100-18/ME:
Вход
Регистрация
FAQ
Поиск
