纯外网访问不了老OA网络故障排查2021-1-29

一、查看纯外网经过哪条路由到内网

1. 查看包含纯外网2网段的路由。
   ktyy-4507R-01#show ip route | include 192.168.2.
   C 192.168.25.0/24 is directly connected, Vlan25
   C 192.168.21.0/24 is directly connected, Vlan16
   C 192.168.20.0/24 is directly connected, Vlan20
   S 192.168.2.0/24 [1/0] via 12.12.18.2
   ktyy-4507R-01#sho
2. ping ,结果发现不通。

ktyy-4507R-01#ping 12.12.18.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 12.12.18.2, timeout is 2 seconds:
…
Success rate is 0 percent (0/5)
ktyy-4507R-01#ip rout

3.原12.12.18.2 路由ping不通，新添加路由，从防火墙走。

ktyy-4507R-01(config)#ip route 192.168.2.0 255.255.255.0 12.12.17.2 ?
<1-255> Distance metric for this route
name Specify name of the next hop
permanent permanent route
tag Set tag for this route
track Install route depending on tracked item

ktyy-4507R-01(config)#ip route 192.168.2.0 255.255.255.0 12.12.17.2 1