问题现象：
pc能ping通路由，ping不通直连的交换机管理IP
路由和交换机互ping不通
2台交换机间能互ping通
配置：
路由做了单臂路由，不同VLAN的PC能互ping通
例：
路由配了2个子接口，172.32.12.1 172.32.4.1
交换机IP：172.32.4.X
请高手帮忙看看问题出在哪？
下面是路由配置
R1#sh run
Building configuration...
Current configuration : 1220 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
service password-encryption
!
hostname R1
!
!
!
enable secret 5 $1$mERr$EhMAv6LmP8GklpWJfOWDA0
!
!
ip dhcp excluded-address 172.32.4.1
ip dhcp excluded-address 172.32.12.1
!
ip dhcp pool DIANPU_DHCP
network 172.32.4.0 255.255.255.0
default-router 172.32.4.1
dns-server 202.96.209.6
!
!
!
username nribadmin password 7 08115E431A49544749
!
!
!
!
!
ip domain-name prms.com
!
!
spanning-tree mode pvst
!
!
!
!
interface Loopback0
ip address 172.31.4.22 255.255.255.255
!
interface FastEthernet0/0
ip address 202.96.209.5 255.255.255.252
ip nat outside
duplex auto
speed auto
ipv6 ospf cost 1
!
interface FastEthernet0/1
no ip address
ip nat inside
duplex auto
speed auto
!
interface FastEthernet0/1.200
encapsulation dot1Q 200
ip address 172.32.12.1 255.255.255.0
!
interface FastEthernet0/1.204
encapsulation dot1Q 204
ip address 172.32.4.1 255.255.255.0
!
interface Vlan1
no ip address
shutdown
!
ip nat inside source list ACL-NAT interface FastEthernet0/0 overload
ip classless
!
!
!
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
password 7 08115E431A49544749
login
transport input telnet
!
!
!
end
下面是其中一台交换机配置
SW1>en
Password:
SW1#sh run
Building configuration...
Current configuration : 1490 bytes
!
version 12.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
service password-encryption
!
hostname SW1
!
enable secret 5 $1$mERr$EhMAv6LmP8GklpWJfOWDA0
!
no ip domain-lookup
ip domain-name prms.com
!
username nribadmin privilege 1 password 7 08115E431A49544749
!
spanning-tree mode rapid-pvst
spanning-tree portfast default
!
interface FastEthernet0/1
switchport access vlan 204
!
interface FastEthernet0/2
switchport access vlan 204
!
interface FastEthernet0/3
switchport access vlan 204
!
interface FastEthernet0/4
switchport access vlan 204
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
switchport access vlan 200
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
switchport mode trunk
!
interface FastEthernet0/24
switchport mode trunk
!
interface Vlan1
no ip address
shutdown
!
interface Vlan300
ip address 172.32.12.6 255.255.255.0
!
ip default-gateway 172.32.12.1
!
!
line con 0
!
line vty 0 4
password 7 08115E431A49544749
login
transport input telnet
line vty 5 15
login
!
!
end
