SVI接口为什么起不来？

[xunil]

本帖最后由 xunil 于 2017-3-3 14:36 编辑
两台型号一样的思科交换机3560V2，在上面两台上面分别创建vlan700，并为int vlan 700配置IP地址，但是show int vlan 700的时个发现有一台交换机是Vlan700 is up, line protocol is down，而另一台protocol也是up，这是怎么一个情况？
***********************************************************************************************
SVI接口起不来的交换机：
SW1#sh vl b
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/24
10 VLAN0010 active Gi0/1, Gi0/2
20 VLAN0020 active Fa0/1, Fa0/2, Fa0/3, Fa0/4, Fa0/5, Fa0/6, Fa0/7, Fa0/8, Fa0/9, Fa0/10
Fa0/11, Fa0/12, Fa0/13, Fa0/14, Fa0/15, Fa0/16, Fa0/17, Fa0/18, Fa0/19
Fa0/20, Fa0/21, Fa0/22, Fa0/23
700 teacher-vlan active
710 student-vlan active
720 ap-vlan active
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
SW1#sh int vl 700
Vlan700 is up, line protocol is down
Hardware is EtherSVI, address is 0024.c4d0.3dc5 (bia 0024.c4d0.3dc5)
Description: techaer-vlan
Internet address is 10.215.152.1/22
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 0/255
Encapsulation ARPA, loopback not set
Keepalive not supported
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output 21:39:18, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
61 packets output, 5464 bytes, 0 underruns
0 output errors, 0 interface resets
0 output buffer failures, 0 output buffers swapped out
交换机配置：
Building configuration...
Current configuration : 8256 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW1
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
no aaa new-model
system mtu routing 1500
ip subnet-zero
ip routing
no ip domain-lookup
no ip dhcp use vrf connected
ip dhcp excluded-address 10.213.135.1 10.213.135.10
!
ip dhcp pool ap-dhcp
network 10.213.135.0 255.255.255.0
default-router 10.213.135.1
dns-server 202.102.152.3 202.102.134.68
option 138 ip 10.102.200.50
lease 0 4
!
ip dhcp pool student-dhcp
network 10.213.128.0 255.255.252.0
default-router 10.213.128.1
dns-server 202.102.152.3 202.102.134.68
lease 0 4
!
ip dhcp pool teacher-dhcp
network 10.215.152.0 255.255.252.0
default-router 10.215.152.1
dns-server 202.102.152.3 202.102.134.68
lease 0 4
!
!
ip multicast-routing distributed
!
!
crypto pki trustpoint TP-self-signed-3301981568
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3301981568
revocation-check none
rsakeypair TP-self-signed-3301981568
!
!
crypto pki certificate chain TP-self-signed-3301981568
certificate self-signed 01
30820246 308201AF A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33333031 39383135 3638301E 170D3933 30333031 30303030
35375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 33303139
38313536 3830819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100D589 3FA40790 523EFB60 2FFEF495 47254C70 A0610546 4BB646C1 FCCE64BF
82F7F788 A6D03121 9D919C71 5A45DFE6 033AC1FD 9E567A17 E0B0345F C23E94AE
C79B4095 342CCF0F 09AE42A0 418033C9 F177C698 5F80EC2C E0266774 223F0585
FCD82A86 74A62B6E 46E2EEB6 E70208D6 4F93ADD1 81EFE6F3 0E363831 1399744B
73E50203 010001A3 6E306C30 0F060355 1D130101 FF040530 030101FF 30190603
551D1104 12301082 0E6C6975 6A696178 69616F78 75652E30 1F060355 1D230418
30168014 ED802FD6 F7DC123B C9F17288 07AC0C55 2381B2B5 301D0603 551D0E04
160414ED 802FD6F7 DC123BC9 F1728807 AC0C5523 81B2B530 0D06092A 864886F7
0D010104 05000381 81003EE6 936AB1DD 5ADE709C E297C47D 91E81F24 932C5214
13639856 86E99408 DBB3F672 96FD84A2 B101E2A1 51AE34FE 30C6B426 193145F4
CF47DF05 C9538C62 A340935A 192CC77E DBE95ED3 BA850033 600BEE95 08C91089
BCAB37D0 1C33A73B A3012C1B D73CE812 2D334DB5 A5A5998C DFC556C2 9B6DB473
D88E71F1 6CFE5CA1 CCCF
quit
!
!
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface Loopback0
ip address 172.24.255.62 255.255.255.255
!
interface FastEthernet0/1
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/23
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/24
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/1
switchport access vlan 10
switchport mode access
!
interface GigabitEthernet0/2
switchport access vlan 10
switchport mode access
!
interface Vlan1
no ip address
!
interface Vlan10
description connect-7609
ip address 172.24.1.242 255.255.255.252
ip access-group 101 in
ip pim sparse-dense-mode
ip ospf network point-to-point
!
interface Vlan20
ip address 10.102.40.1 255.255.248.0
ip access-group 101 in
ip pim sparse-dense-mode
ip igmp query-interval 60
!
interface Vlan700
description techaer-vlan
ip address 10.215.152.1 255.255.252.0
!
interface Vlan710
description student-vlan
ip address 10.213.128.1 255.255.252.0
!
interface Vlan720
description ap-VLAN
ip address 10.213.135.1 255.255.255.0
!
router ospf 1
router-id 172.24.255.60
log-adjacency-changes
network 10.101.40.0 0.0.7.255 area 0
network 10.213.128.0 0.0.7.255 area 0
network 10.215.152.0 0.0.3.255 area 0
network 172.24.1.242 0.0.0.0 area 0
network 172.24.255.62 0.0.0.0 area 0
!
ip classless
ip route 0.0.0.0 0.0.0.0 172.24.1.241
ip http server
ip http secure-server
ip pim rp-address 172.24.255.254
!
!
no cdp advertise-v2
!
!
control-plane
!
!
line con 0
password cisco
logging synchronous
login
line vty 0 4
password cisco
login
line vty 5 15
login
!
end
****************************************************************************************
SVI接口可以UP的交换机
SW2#sh vl b
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Gi0/2
20 VLAN0020 active Fa0/1, Fa0/2, Fa0/3, Fa0/4, Fa0/5, Fa0/6, Fa0/7, Fa0/8, Fa0/9, Fa0/10
Fa0/11, Fa0/12, Fa0/13, Fa0/14, Fa0/15, Fa0/16, Fa0/17, Fa0/18, Fa0/19
Fa0/20, Fa0/21, Fa0/22
30 VLAN0030 active
100 VLAN0100 active
700 teacher-vlan active
710 student-vlan active
720 ap-vlan active
800 VLAN0800 active
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
SW2#sh int vl 700
Vlan700 is up, line protocol is up
Hardware is EtherSVI, address is 0024.c4d0.3d47 (bia 0024.c4d0.3d47)
Description: techaer-vlan
Internet address is 10.215.112.1/22
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 0/255
Encapsulation ARPA, loopback not set
Keepalive not supported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:05:31, output 00:00:04, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
24539 packets input, 2076211 bytes, 0 no buffer
Received 0 broadcasts (25 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
60232 packets output, 6061711 bytes, 0 underruns
0 output errors, 0 interface resets
0 output buffer failures, 0 output buffers swapped out
交换机配置
Building configuration...
Current configuration : 8445 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW2
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
no aaa new-model
system mtu routing 1500
ip subnet-zero
ip routing
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.10.254
ip dhcp excluded-address 10.102.50.1
ip dhcp excluded-address 10.213.55.1 10.213.55.10
!
ip dhcp pool ap_address
network 192.168.10.0 255.255.255.0
default-router 192.168.10.254
option 43 hex f104.0a66.3201
!
ip dhcp pool ap
network 10.102.50.0 255.255.254.0
default-router 10.102.48.1
dns-server 202.102.134.68 202.102.152.3
!
ip dhcp pool ap-dhcp
network 10.213.55.0 255.255.255.0
default-router 10.213.55.1
dns-server 202.102.152.3 202.102.134.68
option 138 ip 10.102.200.51
lease 0 4
!
ip dhcp pool student-dhcp
network 10.213.48.0 255.255.252.0
default-router 10.210.48.1
dns-server 202.102.152.3 202.102.134.68
lease 0 4
!
ip dhcp pool teacher-dhcp
network 10.215.112.0 255.255.252.0
default-router 10.215.112.1
dns-server 202.102.152.3 202.102.134.68
lease 0 4
!
!
!
!
crypto pki trustpoint TP-self-signed-3301981440
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3301981440
revocation-check none
rsakeypair TP-self-signed-3301981440
!
!
crypto pki certificate chain TP-self-signed-3301981440
certificate self-signed 01
30820246 308201AF A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33333031 39383134 3430301E 170D3933 30333031 30303031
30325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 33303139
38313434 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C30B 3E6B7F3B 21C190C5 D6258E84 3E30F33E 4A10380A D04B8821 93BF9689
F65E28AD 9A1DEB36 0558ABC2 FF24FFD8 48832527 D8F9921F A884EBBF 600CA147
0BEEBA20 98EC4E22 8E61A4D0 8E0E72C6 4FF85A8A 0EF945FF E74C028F 5C8FFC97
8D001692 14D951AA 4925607C DAF632F5 D8BE60C8 F7DA1A37 BCD631CC 4C67AD92
223D0203 010001A3 6E306C30 0F060355 1D130101 FF040530 030101FF 30190603
551D1104 12301082 0E7A6869 63687578 69616F78 75652E30 1F060355 1D230418
30168014 6D17567F BE59D13F 41D0A8F3 C924277E 07D81EC0 301D0603 551D0E04
1604146D 17567FBE 59D13F41 D0A8F3C9 24277E07 D81EC030 0D06092A 864886F7
0D010104 05000381 81002B7F 9EA2BF92 391064CC C8E86F89 0EB0025A DE13E1FC
C21B68AE 6027F796 C7A693A6 56B97CA9 369CB001 17632EB2 A6B9CAFD EC9DAABC
E53CF90E CCCAC509 536BAD25 E07EF005 9EB3C442 9BB7E8F0 A99D2281 971045ED
5BDBFBD6 75DDD5B7 50557EA1 CBAE6291 3700D7E9 D100A4C8 EF1C7861 631D87D9
EAFFA5B9 8F06E161 AF6D
quit
!
!
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface Loopback0
ip address 172.24.255.55 255.255.255.255
!
interface FastEthernet0/1
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/23
description to_2960S
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/24
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/1
no switchport
ip address 172.24.1.246 255.255.255.252
ip pim sparse-dense-mode
ip ospf network point-to-point
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
!
interface Vlan10
no ip address
!
interface Vlan20
ip address 10.102.48.1 255.255.248.0
ip pim sparse-dense-mode
!
interface Vlan30
ip address 192.168.10.254 255.255.255.0
!
interface Vlan700
description techaer-vlan
ip address 10.215.112.1 255.255.252.0
!
interface Vlan710
description student-vlan
ip address 10.213.48.1 255.255.252.0
!
interface Vlan720
description ap-VLAN
ip address 10.213.55.1 255.255.255.0
!
router ospf 1
router-id 172.24.255.55
log-adjacency-changes
network 10.102.48.0 0.0.7.255 area 0
network 10.213.48.0 0.0.7.255 area 0
network 10.215.112.0 0.0.3.255 area 0
network 172.24.1.246 0.0.0.0 area 0
network 172.24.255.55 0.0.0.0 area 0
!
ip classless
ip route 211.86.91.246 255.255.255.255 10.102.48.246
ip http server
ip http secure-server
ip pim rp-address 172.24.255.254
!
!
!
!
control-plane
!
!
line con 0
password cisco
login
line vty 0 4
password cisco
login
line vty 5 15
login
!
end

[jingjian · Accepted solution]

看了上面同学们的回复，需要更正一点，vlan up 并不需要这个vlan 内一定包含一台主机，有trunk即可。因为trunk不属于任何vlan，默认属于允许任何vlan通过，若sw trunk allowed vlan 命令中没有vlan 700，也不会双up.
第一台交换机只有F0/24配置成了trunk, 可以肯定f0/24一定是down的状态，否则，vlan700是双up状态
第二台交换机的F0/23,F0/24都配置了trunk,并且f0/23 使用Trunk 互联了一台2960S交换机，所以只要这两个接口任何一个接口UP，那么vlan700就是双up的状态。
所以请检查一下上述端口的状态，即可明白
请看下面的验证过程。
Switch(config)#vlan 700
Switch(config-vlan)#name teacher
Switch(config)#int vlan 700
Switch(config-if)#ip add
Switch(config-if)#ip address
00:03:13: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan700, changed state to down
Switch(config-if)#ip address 10.255.1.10 255.255.255.0
Switch#show interfaces vlan 700
Vlan700 is up, line protocol is down
Hardware is EtherSVI, address is 000d.bce4.c200 (bia 000d.bce4.c200)
Switch(config)#int f0/48
Switch(config-if)#sw trunk encapsulation dot1q
Switch(config-if)#sw mode trunk
Switch#show int vlan 700
Vlan700 is up, line protocol is down
00:06:29: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/48, changed state to up
00:06:59: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan700, changed state to up
Switch#show interfaces trunk
Port Mode Encapsulation Status Native vlan
Fa0/48 on 802.1q trunking 1
Port Vlans allowed on trunk
Fa0/48 1-4094
Port Vlans allowed and active in management domain
Fa0/48 1,10,20,30,700
Switch(config)#int f0/48 ^
Switch(config-if)#sw trunk allowed vlan 1,10
00:17:48: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan700, changed state to down
Switch#show interfaces trunk
Port Mode Encapsulation Status Native vlan
Fa0/48 on 802.1q trunking 1
Port Vlans allowed on trunk
Fa0/48 1,10
Port Vlans allowed and active in management domain
Fa0/48 1,10

[one-time]

感谢您的提问！稍后会有小伙伴为您解答的！:)

[lxw615117]

应该是没有端口属于这个vlan，你可以把配置贴出来看一下！

[xunil]

lxw615117_cisco 发表于 2017-3-3 13:41
应该是没有端口属于这个vlan，你可以把配置贴出来看一下！

的确是没有端口属于这个VLAN，不过另一台交换机也没有端口划到VLAN里，不过SVI接口同样起来了！

[fortune]

要想up ，必须有端口属于这个vlan且连接了东西，第二是trunk，且trunk是连接的！

[xunil]

vsop5207 发表于 2017-3-3 14:16
要想up ，必须有端口属于这个vlan且连接了东西，第二是trunk，且trunk是连接的！

我把配置贴出来了，另一台交换机的VLAN里也没有接口，可是SVI接口起来了

[fortune]

xunil 发表于 2017-3-3 14:40
我把配置贴出来了，另一台交换机的VLAN里也没有接口，可是SVI接口起来了

没激活物理端口就UP的才是不正常的

[xunil]

vsop5207 发表于 2017-3-3 16:44
没激活物理端口就UP的才是不正常的

我这边7609上也没有激活物理端口同样SVI都UP了

[fortune]

xunil 发表于 2017-3-3 17:05
我这边7609上也没有激活物理端口同样SVI都UP了

那应该有trunk 或者其他吧

[lxw615117]

xunil 发表于 2017-3-3 14:08
的确是没有端口属于这个VLAN，不过另一台交换机也没有端口划到VLAN里，不过SVI接口同样起来了！

你确认一下sw1的f0/24口是up的吗

[jingjian]

xunil 发表于 2017-3-3 17:05
我这边7609上也没有激活物理端口同样SVI都UP了

因为你的7609上肯定配置了trunk,并且Trunk是UP的状态

[xunil]

arvinjing 发表于 2017-3-9 17:34
因为你的7609上肯定配置了trunk,并且Trunk是UP的状态

我再检查一下

[yssqt5211]

SVI口起来需要条件。

[yssqt5211]

什么鬼？什么鬼？