急!!!!!!!!!!!!!!!!!（有图有真相）VMware_ASA无法桥接到GNS3路由器，请高人指点一下
本帖最后由 13314564 于 2011-5-31 15:15 编辑实验拓扑图如上。
添加了三块虚拟网卡
GNS3 的Cloud桥接三块网卡。
NPTP连接情况
SCRT连接虚拟ASA成功。
ASA的接口信息：
ASA# show int ip b
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.1.1 YES manual up up
Ethernet0/1 unassigned YES unsetadministratively down up
Ethernet0/2 unassigned YES unsetadministratively down up
Ethernet0/3 unassigned YES unsetadministratively down down
Ethernet0/4 unassigned YES unsetadministratively down down
Ethernet0/5 unassigned YES unsetadministratively down down
与路由器R1相连的接口信息：
ASA# show run int e0/0
!
interface Ethernet0/0
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0
R1接口信息：
R1#show ip int b
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 unassigned YES unsetadministratively down down
FastEthernet0/1 unassigned YES unsetadministratively down down
Serial1/0 unassigned YES unsetadministratively down down
Serial1/1 unassigned YES unsetadministratively down down
Serial1/2 unassigned YES unsetadministratively down down
Serial1/3 unassigned YES unsetadministratively down down
Ethernet2/0 192.168.1.2 YES manual up up
Ethernet2/1 unassigned YES unsetadministratively down down
Ethernet2/2 unassigned YES unsetadministratively down down
Ethernet2/3 unassigned YES unsetadministratively down down
R1 e2/0接口信息
R1#show run int e2/0
Building configuration...
Current configuration : 80 bytes
!
interface Ethernet2/0
ip address 192.168.1.2 255.255.255.0
half-duplex
end
配置基本上是这样，但是在路由器和ASA直连接口互ping 不同。
R1#debug ip packet
IP packet debugging is on
R1#ping 192.168.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
*Mar1 00:38:16.215: IP: tableid=0, s=192.168.1.2 (local), d=192.168.1.1 (Ethernet2/0), routed via RIB
*Mar1 00:38:16.215: IP: s=192.168.1.2 (local), d=192.168.1.1 (Ethernet2/0), len 100, sending
*Mar1 00:38:16.219: IP: s=192.168.1.2 (local), d=192.168.1.1 (Ethernet2/0), len 100, encapsulation failed.
*Mar1 00:38:18.215: IP: tableid=0, s=192.168.1.2 (local), d=192.168.1.1 (Ethernet2/0), routed via RIB
*Mar1 00:38:18.215: IP: s=192.168.1.2 (local), d=192.168.1.1 (Ethernet2/0), len 100, sending
*Mar1 00:38:18.219: IP: s=192.168.1.2 (local), d=192.168.1.1 (Ethernet2/0), len 100, encapsulation failed.
*Mar1 00:38:20.215: IP: tableid=0, s=192.168.1.2 (local), d=192.168.1.1 (Ethernet2/0), routed via RIB
*Mar1 00:38:20.215: IP: s=192.168.1.2 (local), d=192.168.1.1 (Ethernet2/0), len 100, sending
*Mar1 00:38:20.219: IP: s=192.168.1.2 (local), d=192.168.1.1 (Ethernet2/0), len 100, encapsulation failed.
*Mar1 00:38:22.215: IP: tableid=0, s=192.168.1.2 (local), d=192.168.1.1 (Ethernet2/0), routed via RIB
*Mar1 00:38:22.215: IP: s=192.168.1.2 (local), d=192.168.1.1 (Ethernet2/0), len 100, sending
*Mar1 00:38:22.219: IP: s=192.168.1.2 (local), d=192.168.1.1 (Ethernet2/0), len 100, encapsulation failed.
*Mar1 00:38:24.215: IP: tableid=0, s=192.168.1.2 (local), d=192.168.1.1 (Ethernet2/0), routed via RIB
*Mar1 00:38:24.215: IP: s=192.168.1.2 (local), d=192.168.1.1 (Ethernet2/0), len 100, sending
*Mar1 00:38:24.219: IP: s=192.168.1.2 (local), d=192.168.1.1 (Ethernet2/0), len 100, encapsulation failed.
Success rate is 0 percent (0/5)
昨天搞了一整天，方法试了很多，还是不行，请这里的高人指点一下，谢谢了。
这是ASA的ARP
ASA# show arp
inside 192.168.1.3 0050.56c0.0001 ----------------------------这个地址是虚拟网卡的
这是R1的ARP
R1#clear arp-cache
R1#show arp
ProtocolAddress Age (min)Hardware Addr Type Interface
Internet192.168.1.1 6 000c.2905.8f53ARPA FastEthernet0/0 --------------------ASA e0/0 地址
Internet192.168.1.2 - c000.0e78.0000ARPA FastEthernet0/0 --------------------R1 F0/0地址
搞不懂了
别急，会有技术指导来告诉你的~抢个沙发先~ -woniu2-哪位仁兄用过的，麻烦指点一下。万分感谢。 Kevin_Liu 发表于 2011-5-31 11:20 static/image/common/back.gif
别急，会有技术指导来告诉你的~抢个沙发先~
感谢这位朋友的顶力支持。
-woniu3-不着急啊
帮你找人去鸟。。。。 bookpig 发表于 2011-5-31 12:30 static/image/common/back.gif
不着急啊
帮你找人去鸟。。。。
谢谢，辛苦你了。 找出点眉目了，是GNS3上桥接到虚拟网卡的时候出的问题。ASA能ping通虚拟网卡。不过GNS3的问题出在哪还没找到。 高人还木有现身？ 请高手帮忙解答一下。 R1#show arp
ProtocolAddress Age (min)Hardware Addr Type Interface
Internet192.168.1.1 1 000c.2905.8f53ARPA FastEthernet0/0
Internet192.168.1.2 - c000.0e78.0000ARPA FastEthernet0/0
arp里边都已经有地址了 为什么还是ping 不通啊。防火墙也关掉了。太郁闷了。高人快点现身吧。