【文本版|topic】 高级搜索
   名人堂 帮助 论坛制度 意见反馈 | 首页 博客 周新贴 招聘 专题 新闻
 RSS 底部
 
社区导航: 专家门诊   网络技术   操作系统   数据库   程序设计   系统应用   考试认证   CIO及信息化   站长交流   综合交流   下载基地  51CTO产品服务 【设为首页 | 收藏本站】
51CTO技术论坛» 思科技术 » vpn不能连接>(在线等)       [ 打印]  [ 订阅]  [ 收藏]  [ 推荐给朋友]   [ 本帖文本页]
 

论坛跳转:
     
标题: vpn不能连接>(在线等)  ( 查看:431  回复:15 )   
 
rock1019
新新人类  点击可查看详细



帖子 31
精华 0
无忧币 94
积分 105
阅读权限 20
注册日期 2007-1-2
最后登录 2008-1-1 离线

[查看资料]  [发短消息]  [Blog] 
  QQ       
发表于:2007-9-28 17:04　 　标题：vpn不能连接>(在线等)
＜上一帖 |
R1的配置:
Interface                  IP-Address      OK? Method Status                Prot
ocol
FastEthernet0/0            172.16.10.1     YES NVRAM  up                    up
Serial1/0                  192.168.10.1    YES NVRAM  up                    up
Serial1/1                  unassigned      YES NVRAM  administratively down down
Serial1/2                  unassigned      YES NVRAM  administratively down down
Serial1/3                  unassigned      YES NVRAM  administratively down down
Tunnel0                    10.10.10.1      YES manual up                    up
vpn配置:
crypto isakmp policy 1
authentication pre-share
lifetime 14400
crypto isakmp key 123456 address 192.168.10.2
crypto isakmp key 123456 address 10.10.10.2
!
!
crypto ipsec transform-set test1 ah-md5-hmac esp-des esp-md5-hmac
!
crypto map cmap1 local-address Serial1/0
crypto map cmap1 1 ipsec-isakmp
set peer 192.168.10.2
set peer 10.10.10.2
set transform-set test1
match address 101
!
!
!
!
interface Tunnel0
ip address 10.10.10.1 255.255.255.0
tunnel source 192.168.10.1
tunnel destination 192.168.10.2
crypto map cmap1
!
interface FastEthernet0/0
ip address 172.16.10.1 255.255.255.0
duplex auto
speed auto
!
interface Serial1/0
ip address 192.168.10.1 255.255.255.0
no ip route-cache cef
no ip route-cache
serial restart-delay 0
no fair-queue
crypto map cmap1
!
interface Serial1/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 192.168.10.2
!
!
!
access-list 101 permit ip host 192.168.10.1 host 192.168.10.2
access-list 101 permit ip host 192.168.10.2 host 192.168.10.1
access-list 101 permit ip 172.16.10.0 0.0.0.255 192.168.10.0 0.0.0.255
access-list 101 permit ip 172.16.11.0 0.0.0.255 192.168.10.0 0.0.0.255
access-list 101 permit ip 172.16.10.0 0.0.0.255 172.16.11.0 0.0.0.255
access-list 101 permit ip 172.16.11.0 0.0.0.255 172.16.10.0 0.0.0.255
!
!
!
control-plane

R2的配置:
FastEthernet0/0            172.16.11.1     YES NVRAM  up                    up
Serial1/0                  192.168.10.2    YES NVRAM  up                    up
Serial1/1                  unassigned      YES NVRAM  administratively down down
Serial1/2                  unassigned      YES NVRAM  administratively down down
Serial1/3                  unassigned      YES NVRAM  administratively down down
Tunnel0                    10.10.10.2      YES NVRAM  up                    up
vpn配置:
crypto isakmp policy 1
authentication pre-share
lifetime 14400
crypto isakmp key 123456 address 192.168.10.1
crypto isakmp key 123456 address 10.10.10.1
!
!
crypto ipsec transform-set test1 ah-md5-hmac esp-des esp-md5-hmac
!
crypto map cmap1 local-address Serial1/0
crypto map cmap1 1 ipsec-isakmp
set peer 192.168.10.1
set peer 10.10.10.1
set transform-set test1
match address 101
!
!
!
!
interface Tunnel0
ip address 10.10.10.2 255.255.255.0
tunnel source 192.168.10.2
tunnel destination 192.168.10.1
crypto map cmap1
!
interface FastEthernet0/0
ip address 172.16.11.1 255.255.255.0
duplex auto
speed auto
!
interface Serial1/0
ip address 192.168.10.2 255.255.255.0
no ip route-cache cef
no ip route-cache
serial restart-delay 0
no fair-queue
crypto map cmap1
!
interface Serial1/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 192.168.10.1
!
!
!
access-list 101 permit ip host 192.168.10.2 host 192.168.10.1
access-list 101 permit ip host 192.168.10.1 host 192.168.10.2
access-list 101 permit ip 172.16.11.0 0.0.0.255 172.16.10.0 0.0.0.255
access-list 101 permit ip 172.16.10.0 0.0.0.255 172.16.11.0 0.0.0.255
access-list 101 permit ip 172.16.11.0 0.0.0.255 192.168.10.0 0.0.0.255
access-list 101 permit ip 172.16.10.0 0.0.0.255 192.168.10.0 0.0.0.255
!
!
!
control-plane

为什么在R1上去拼172.16.11.0拼不通呢?在R2上拼172.16.10.0是一样的?

千里之外，传递你对震灾人民的关怀
2007-9-28 17:041楼
[ 顶部 ]
 
loveme23
副版主  点击可查看详细


天秤座  
帖子 6606
精华 0
无忧币 18853
积分 7884
阅读权限 140
来自 (保密)
注册日期 2006-3-13
最后登录 2008-5-17 在线

[查看资料]  [发短消息]  [Blog] 
[个人主页]         
发表于:2007-9-28 17:06　
这个配置问题多多，我去做个实验，把配置给你贴出来，你参考一下。。

好好学习，天天向上！
我的Blog
2007-9-28 17:062楼
[ 顶部 ]
 
rock1019
新新人类  点击可查看详细



帖子 31
精华 0
无忧币 94
积分 105
阅读权限 20
注册日期 2007-1-2
最后登录 2008-1-1 离线

[查看资料]  [发短消息]  [Blog] 
  QQ       
发表于:2007-9-28 18:14　
好啊!谢谢版主!

千里之外，传递你对震灾人民的关怀
2007-9-28 18:143楼
[ 顶部 ]
 
loveme23
副版主  点击可查看详细


天秤座  
帖子 6606
精华 0
无忧币 18853
积分 7884
阅读权限 140
来自 (保密)
注册日期 2006-3-13
最后登录 2008-5-17 在线

[查看资料]  [发短消息]  [Blog] 
[个人主页]         
发表于:2007-9-28 18:18　
第一台：
Router#show run
Building configuration...

Current configuration : 1945 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip subnet-zero
!
!
no ip domain lookup
!
ip cef
!
!
!         
!         
!         
!         
!         
!         
!
!
!
!
!
!
!
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key cisco123 address 10.1.1.2
crypto isakmp key cisco address 192.168.1.2
!
!
crypto ipsec transform-set vpn esp-3des esp-md5-hmac
!
crypto map cisco 10 ipsec-isakmp
set peer 10.1.1.2
set peer 192.168.1.2
set transform-set vpn
match address 101
!
!
!
!
interface Tunnel1
ip address 192.168.1.1 255.255.255.0
tunnel source 10.1.1.1
tunnel destination 10.1.1.2
crypto map cisco
!
interface FastEthernet0/0
ip address 1.1.1.1 255.255.255.0
duplex half
no keepalive
!
interface Ethernet1/0
no ip address
shutdown
duplex half
!
interface Ethernet1/1
no ip address
shutdown
duplex half
!
interface Ethernet1/2
no ip address
shutdown
duplex half
!
interface Ethernet1/3
no ip address
shutdown
duplex half
!
interface Serial2/0
ip address 10.1.1.1 255.255.255.0
serial restart-delay 0
clock rate 64000
!
interface Serial2/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/4
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/5
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/6
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/7
no ip address
shutdown
serial restart-delay 0
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.1.2
no ip http server
no ip http secure-server
!
!
access-list 101 permit ip 1.1.1.0 0.0.0.255 2.2.2.0 0.0.0.255
!
!
!
!
!
!
!
gatekeeper
shutdown
!         
!
line con 0
stopbits 1
line aux 0
line vty 0 4
!
!
end
第二台：
Router#show run
Building configuration...

Current configuration : 1927 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip subnet-zero
!
!
no ip domain lookup
!
ip cef
!
!
!         
!
!
!
!
!
!
!
!
!
!
!
!
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key cisco123 address 10.1.1.1
crypto isakmp key cisco address 192.168.1.1
!
!
crypto ipsec transform-set vpn esp-3des esp-md5-hmac
!         
crypto map cisco 10 ipsec-isakmp
set peer 10.1.1.1
set peer 192.168.1.1
set transform-set vpn
match address 101
!
!
!
!
interface Tunnel1
ip address 192.168.1.2 255.255.255.0
tunnel source 10.1.1.2
tunnel destination 10.1.1.1
crypto map cisco
!
interface FastEthernet0/0
ip address 2.2.2.2 255.255.255.0
duplex half
no keepalive
!
interface Ethernet1/0
no ip address
shutdown
duplex half
!
interface Ethernet1/1
no ip address
shutdown
duplex half
!
interface Ethernet1/2
no ip address
shutdown
duplex half
!
interface Ethernet1/3
no ip address
shutdown
duplex half
!
interface Serial2/0
ip address 10.1.1.2 255.255.255.0
serial restart-delay 0
!
interface Serial2/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/4
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/5
no ip address
shutdown
serial restart-delay 0
!         
interface Serial2/6
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/7
no ip address
shutdown
serial restart-delay 0
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.1.1
no ip http server
no ip http secure-server
!
!
access-list 101 permit ip 2.2.2.0 0.0.0.255 1.1.1.0 0.0.0.255
!
!
!
!
!
!         
!
gatekeeper
shutdown
!
!
line con 0
stopbits 1
line aux 0
line vty 0 4
!
!
end

好好学习，天天向上！
我的Blog
2007-9-28 18:184楼
[ 顶部 ]
 
loveme23
副版主  点击可查看详细


天秤座  
帖子 6606
精华 0
无忧币 18853
积分 7884
阅读权限 140
来自 (保密)
注册日期 2006-3-13
最后登录 2008-5-17 在线

[查看资料]  [发短消息]  [Blog] 
[个人主页]         
发表于:2007-9-28 18:20　
在第一台上用扩展ping命令：
Router#ping
Protocol [ip]:
Target IP address: 2.2.2.2
Repeat count [5]:
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]: y
Source address or interface: 1.1.1.1
Type of service [0]:
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]: r
Number of hops [ 9 ]:
Loose, Strict, Record, Timestamp, Verbose[RV]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
Packet sent with a source address of 1.1.1.1
Packet has IP options:  Total option bytes= 39, padded length=40
Record route: <*>
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)

Reply to request 0 (52 ms).  Received packet has options
Total option bytes= 40, padded length=40
Record route:
   (192.168.1.1)
   (2.2.2.2)
   (192.168.1.2)
   (1.1.1.1) <*>
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
End of list

Reply to request 1 (208 ms).  Received packet has options
Total option bytes= 40, padded length=40
Record route:
   (192.168.1.1)
   (2.2.2.2)
   (192.168.1.2)
   (1.1.1.1) <*>
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
End of list

Reply to request 2 (88 ms).  Received packet has options
Total option bytes= 40, padded length=40
Record route:
   (192.168.1.1)
   (2.2.2.2)
   (192.168.1.2)
   (1.1.1.1) <*>
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
End of list

Reply to request 3 (112 ms).  Received packet has options
Total option bytes= 40, padded length=40
Record route:
   (192.168.1.1)
   (2.2.2.2)
   (192.168.1.2)
   (1.1.1.1) <*>
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
End of list

Reply to request 4 (88 ms).  Received packet has options
Total option bytes= 40, padded length=40
Record route:
   (192.168.1.1)
   (2.2.2.2)
   (192.168.1.2)
   (1.1.1.1) <*>
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
End of list

Success rate is 100 percent (5/5), round-trip min/avg/max = 52/109/208 ms
可以通，并且走的是Tunnel1。。。

好好学习，天天向上！
我的Blog
2007-9-28 18:205楼
[ 顶部 ]
 
rock1019
新新人类  点击可查看详细



帖子 31
精华 0
无忧币 94
积分 105
阅读权限 20
注册日期 2007-1-2
最后登录 2008-1-1 离线

[查看资料]  [发短消息]  [Blog] 
  QQ       
发表于:2007-9-28 18:45　
版主辛苦了.先用着了。谢谢！

千里之外，传递你对震灾人民的关怀
2007-9-28 18:456楼
[ 顶部 ]
 
loveme23
副版主  点击可查看详细


天秤座  
帖子 6606
精华 0
无忧币 18853
积分 7884
阅读权限 140
来自 (保密)
注册日期 2006-3-13
最后登录 2008-5-17 在线

[查看资料]  [发短消息]  [Blog] 
[个人主页]         
发表于:2007-9-28 19:14　
客气~~

好好学习，天天向上！
我的Blog
2007-9-28 19:147楼
[ 顶部 ]
 
夕阳流水
副版主  点击可查看详细


帖子 1234
精华 1
无忧币 2573
积分 1335
阅读权限 140
来自 (保密)
注册日期 2007-3-21
最后登录 2008-5-16 离线

[查看资料]  [发短消息]  [Blog] 
[个人主页]    QQ       
发表于:2007-9-29 08:19　
晕啊，你怎么用AH加密数据连接，又用ESP呢？有意思
你用GRE，也不用指两个对等体啊，直接指s口的就行

QQ191820815提供远程技术协助
2007-9-29 08:198楼
[ 顶部 ]
 
夕阳流水
副版主  点击可查看详细


帖子 1234
精华 1
无忧币 2573
积分 1335
阅读权限 140
来自 (保密)
注册日期 2007-3-21
最后登录 2008-5-16 离线

[查看资料]  [发短消息]  [Blog] 
[个人主页]    QQ       
发表于:2007-9-29 08:29　
还有啊，你做ipsec+gre的话，你最好把那个模式配成透明的，不做tunnel
应该GRE已经是个三层tunnel 了，一个数据封两隧道，没有必要

QQ191820815提供远程技术协助
2007-9-29 08:299楼
[ 顶部 ]
 
webberann
新新人类  点击可查看详细



帖子 9
精华 0
无忧币 16
积分 14
阅读权限 20
注册日期 2007-2-3
最后登录 2008-5-6 离线

[查看资料]  [发短消息]  [Blog] 
       
发表于:2007-9-29 11:47　
很好的排错案例。

千里之外，传递你对震灾人民的关怀
2007-9-29 11:4710楼
[ 顶部 ]
 
rock1019
新新人类  点击可查看详细



帖子 31
精华 0
无忧币 94
积分 105
阅读权限 20
注册日期 2007-1-2
最后登录 2008-1-1 离线

[查看资料]  [发短消息]  [Blog] 
  QQ       
发表于:2007-10-5 11:11　
loveme23版主:
我按你的配置做了,能在1.1.1.1上拼通2.2.2.2但测试结果如下:
router1#ping
Protocol [ip]:
Target IP address: 2.2.2.2
Repeat count [5]:
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]: y
Source address or interface: 1.1.1.1
Type of service [0]:
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]: r
Number of hops [ 9 ]:
Loose, Strict, Record, Timestamp, Verbose[RV]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
Packet sent with a source address of 1.1.1.1
Packet has IP options:  Total option bytes= 39, padded length=40
Record route: <*>
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)

Request 0 timed out
Request 1 timed out
Request 2 timed out
Request 3 timed out
Request 4 timed out
Success rate is 0 percent (0/5)
router1#ping
Protocol [ip]:
Target IP address: 2.2.2.2
Repeat count [5]:
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]: y
Source address or interface: 1.1.1.1
Type of service [0]:
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]: r
Number of hops [ 9 ]:
Loose, Strict, Record, Timestamp, Verbose[RV]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
Packet sent with a source address of 1.1.1.1
Packet has IP options:  Total option bytes= 39, padded length=40
Record route: <*>
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)

Request 0 timed out
Request 1 timed out
Request 2 timed out
Request 3 timed out
Request 4 timed out
Success rate is 0 percent (0/5)

router2上则如下显示:
router2#
*Mar  1 01:39:32.643: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet ha
s invalid spi for destaddr=10.1.1.2, prot=50, spi=0x1F401F4(32768500), srcaddr=1
0.1.1.1

为什么会这样?在线等!

千里之外，传递你对震灾人民的关怀
2007-10-5 11:1111楼
[ 顶部 ]
 
cnpfidc
技术员  点击可查看详细


帖子 461
精华 0
无忧币 1009
积分 486
阅读权限 30
注册日期 2007-8-9
最后登录 2008-5-13 离线

[查看资料]  [发短消息]  [Blog] 
  QQ       
发表于:2007-10-5 13:18　
看不懂了,晕!......

千里之外，传递你对震灾人民的关怀
2007-10-5 13:1812楼
[ 顶部 ]
 
cnpfidc
技术员  点击可查看详细


帖子 461
精华 0
无忧币 1009
积分 486
阅读权限 30
注册日期 2007-8-9
最后登录 2008-5-13 离线

[查看资料]  [发短消息]  [Blog] 
  QQ       
发表于:2007-10-5 13:21　
两们版哥,能不能加一下你们的QQ,在线给我指导一下VPN呀.??这样的话,小弟不胜感激.!~

千里之外，传递你对震灾人民的关怀
2007-10-5 13:2113楼
[ 顶部 ]
 
tiger86234
新新人类  点击可查看详细



帖子 68
精华 0
无忧币 2
积分 68
阅读权限 20
注册日期 2007-8-25
最后登录 2008-4-25 离线

[查看资料]  [发短消息]  [Blog] 
       
发表于:2007-10-5 20:52　
简直无法想像，太牛x了

千里之外，传递你对震灾人民的关怀
2007-10-5 20:5214楼
[ 顶部 ]
 
qq87825152
新新人类  点击可查看详细



帖子 56
精华 0
无忧币 5
积分 59
阅读权限 20
注册日期 2006-11-4
最后登录 2008-4-17 离线

[查看资料]  [发短消息]  [Blog] 
       
发表于:2007-10-6 11:46　
学习了，VPN不太熟

千里之外，传递你对震灾人民的关怀
2007-10-6 11:4615楼
[ 顶部 ]
 
rock1019
新新人类  点击可查看详细



帖子 31
精华 0
无忧币 94
积分 105
阅读权限 20
注册日期 2007-1-2
最后登录 2008-1-1 离线

[查看资料]  [发短消息]  [Blog] 
  QQ       
发表于:2007-10-9 11:38　 　标题：vpn不能连接解决方案
以下是"vpn不能连接"的解决方案:
router1的配置:
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp key 123456 address 192.168.10.2
!
!
crypto ipsec transform-set test1 esp-des esp-md5-hmac
mode transport
!
crypto map cmap1 1 ipsec-isakmp
set peer 192.168.10.2
set transform-set test1
match address 101
!
!
!
!
interface Tunnel0
ip address 10.10.10.1 255.255.255.0
tunnel source 192.168.10.1
tunnel destination 192.168.10.2
!
interface FastEthernet0/0
ip address 172.16.10.1 255.255.255.0
duplex auto
speed auto
!
interface Serial1/0
ip address 192.168.10.1 255.255.255.0
no ip route-cache cef
no ip route-cache
serial restart-delay 0
no fair-queue
crypto map cmap1
!
interface Serial1/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 Tunnel0
!
!
!
access-list 101 permit ip host 192.168.10.1 host 192.168.10.2

router2的配置:
与router1相对应.

router1的测试结果:
router1#ping
Protocol [ip]:
Target IP address: 172.17.10.1
Repeat count [5]:
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]: y
Source address or interface: 172.16.10.1
Type of service [0]:
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]: r
Number of hops [ 9 ]:
Loose, Strict, Record, Timestamp, Verbose[RV]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.17.10.1, timeout is 2 seconds:
Packet sent with a source address of 172.16.10.1
Packet has IP options:  Total option bytes= 39, padded length=40
Record route: <*>
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)

Reply to request 0 (264 ms).  Received packet has options
Total option bytes= 40, padded length=40
Record route:
   (10.10.10.1)
   (172.17.10.1)
   (10.10.10.2)
   (172.16.10.1) <*>
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
End of list

Reply to request 1 (276 ms).  Received packet has options
Total option bytes= 40, padded length=40
Record route:
   (10.10.10.1)
   (172.17.10.1)
   (10.10.10.2)
   (172.16.10.1) <*>
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
End of list

Reply to request 2 (476 ms).  Received packet has options
Total option bytes= 40, padded length=40
Record route:
   (10.10.10.1)
   (172.17.10.1)
   (10.10.10.2)
   (172.16.10.1) <*>
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
End of list

Reply to request 3 (532 ms).  Received packet has options
Total option bytes= 40, padded length=40
Record route:
   (10.10.10.1)
   (172.17.10.1)
   (10.10.10.2)
   (172.16.10.1) <*>
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
End of list

Reply to request 4 (532 ms).  Received packet has options
Total option bytes= 40, padded length=40
Record route:
   (10.10.10.1)
   (172.17.10.1)
   (10.10.10.2)
   (172.16.10.1) <*>
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
   (0.0.0.0)
End of list

Success rate is 100 percent (5/5), round-trip min/avg/max = 264/416/532
!

千里之外，传递你对震灾人民的关怀
2007-10-9 11:3816楼
[ 顶部 ]
     
论坛跳转:  

| | |
| | |
| | |
标记已读 · 删除论坛Cookies · 文本版 · WAP
 
| 诚征版主 | 版主堂 | 意见建议 | 大史记 | 论坛地图
Copyright©2005-2008 51CTO.COM  Powered by Discuz!
本论坛言论纯属发布者个人意见，不代表51CTO网站立场！如有疑义，请与管理员联系。
京ICP备05051492号