search

kstm-su / ictsc2018-yrfw

0 stars 0 forks source link

05_君のことだけみていたい #5

Closed rossy0213 closed 5 years ago

rossy0213 commented 5 years ago

ios 2

tsurugi-TakaChan commented 5 years ago

SNMPって何？ とりあえずログインしてみる

ugwis commented 5 years ago
02_sss
ugwis commented 5 years ago 
1841-B#ping 192.168.2.10
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.10, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
1841-B#show ip route
Load for five secs: 1%/0%; one minute: 1%; five minutes: 1%
Time source is user configuration, 02:21:14.688 UTC Thu Jan 5 2006

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area 
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       + - replicated route, % - next hop override

Gateway of last resort is not set

      192.168.2.0/24 is variably subnetted, 4 subnets, 2 masks
C        192.168.2.0/26 is directly connected, FastEthernet0/0
L        192.168.2.1/32 is directly connected, FastEthernet0/0
C        192.168.2.64/26 is directly connected, FastEthernet0/1
L        192.168.2.65/32 is directly connected, FastEthernet0/1
ugwis commented 5 years ago

1841-BからZabbix監視サーバにpingがとばなかった

ugwis commented 5 years ago 
1841-B#show running-config 
Load for five secs: 2%/0%; one minute: 1%; five minutes: 1%
Time source is user configuration, 02:34:22.680 UTC Thu Jan 5 2006

Building configuration...

Current configuration : 1894 bytes
!
! No configuration change since last restart
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname 1841-B
!
boot-start-marker
boot-end-marker
!
!
enable secret 4 .qe5G5VYpTYYfafDBOh/XVn4a8gIiQxeyctXUHeg37M
!
no aaa new-model
!
memory-size iomem 25
dot11 syslog
ip source-route
!
!
!
!
!
ip vrf mgmt
!
ip cef
no ip domain lookup
ip domain name icttoracon.net
no ipv6 cef
!
multilink bundle-name authenticated
!
crypto pki token default removal timeout 0
!
!
!
!
license udi pid CISCO1841 sn FHK090610R6
username admin password 7 07060A146D030B5635
!
redundancy
!
!
ip ssh version 2
! 
!
!
!
!
!
!
interface FastEthernet0/0
 ip address 192.168.2.1 255.255.255.192
 ip access-group 100 in
 duplex auto
 speed auto
!
interface FastEthernet0/0.95
 description mgmt
 encapsulation dot1Q 95
 ip vrf forwarding mgmt
 ip address 192.168.127.7 255.255.255.0
!
interface FastEthernet0/1
 ip address 192.168.2.65 255.255.255.192
 duplex auto
 speed auto
!
interface Serial0/0/0
 no ip address
 shutdown
 no fair-queue
 clock rate 2000000
!
interface Serial0/0/1
 no ip address
 shutdown
 clock rate 2000000
!
interface BRI0/1/0
 no ip address
 encapsulation hdlc
 shutdown
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip route vrf mgmt 0.0.0.0 0.0.0.0 192.168.127.254
!
access-list 100 permit tcp any eq 22 any
access-list 100 permit tcp any eq telnet any
access-list 100 deny   udp any eq snmp any
access-list 100 deny   udp any eq snmptrap any
!
!
!
!
!
!
control-plane
!
!
!
line con 0
 exec-timeout 0 0
 logging synchronous
 login local
 exec prompt timestamp
line aux 0
line vty 0 4
 exec-timeout 0 0
 login local
 exec prompt timestamp
 transport input telnet ssh
line vty 5 15
 exec-timeout 0 0
 login local
 exec prompt timestamp
 transport input telnet ssh
!
scheduler allocate 20000 1000
end
ugwis commented 5 years ago 
access-list 100 deny   udp any eq snmp any
access-list 100 deny   udp any eq snmptrap any

この二つを削除してみたが、ping通らず。192.168.2.1にもpingが通らない？