h3c -msr-30-20路由问题

路由

我是一个小区的网管，最近几天网络出现了问题，实在是找不出问题所在。

希望高手们能指点一下，谢谢！！！！

小区租用了电信30M的带宽，路由器用的是h3c -msr-30-20 下面接了三层交换机

三层交换机用的是h3c的s3600-28tp-si 下面分别接了2个h3c的2层交换机

二层交换用的是h3cs3100-26c 下面接了tp-link的24口交换机

路由器msr 30-20配置
<WanNianHuaCheng>dis current-configuration
#
version 5.20, Beta 1204P03, Basic
#
sysname WanNianHuaCheng
#
firewall enable
#
nat address-group 1 220.101.206.35 220.101.206.38
#
domain default enable system
#
telnet server enable
#
vlan 1
#
radius scheme system
server-type extended
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
local-user admin
password simple #43%g$%^dgfd
service-type telnet
level 3
#
acl number 2000
rule 0 permit source 172.17.0.0 0.0.255.255
rule 1 permit source 172.16.1.0 0.0.0.3
#
interface Aux0
async mode flow
link-protocol ppp
#
interface NULL0
#
interface GigabitEthernet0/0
port link-mode route
nat outbound 2000 address-group 1
description Uplink
ip address 220.101.206.34 255.255.255.248
#
interface GigabitEthernet0/1
port link-mode route
description Link_To_WanNianHuaCheng
ip address 172.16.1.1 255.255.255.252
#
ip route-static 0.0.0.0 0.0.0.0 220.101.206.33
ip route-static 172.17.0.0 255.255.0.0 172.16.1.2
#
user-interface con 0
user-interface aux 0
set authentication password simple 57fg*234#$%
user-interface vty 0 4
user privilege level 3
set authentication password simple $#%%ddf#$465
protocol inbound telnet
#

交换机3600-28tp配置
<3600_88_youzhu_wanfy>dis cu
<3600_88_youzhu_wanfy>dis current-configuration
#
sysname 3600_88_youzhu_wanfy
#
radius scheme system
#
domain system
#
local-user user
local-user users
#
vlan 1
#
vlan 101
#
vlan 201 to 250
#
vlan 423
#
interface Vlan-interface1
ip address 172.17.0.1 255.255.255.0
#
interface Vlan-interface101
ip address 172.16.1.2 255.255.255.252
#
interface Vlan-interface201
description 88_1haoluo1-2
ip address 172.17.1.1 255.255.255.192
#
interface Vlan-interface202
description 88_1haoluo3-4
ip address 172.17.1.65 255.255.255.192
#
interface Vlan-interface203
description 88_1haoluo5-7
ip address 172.17.1.129 255.255.255.128
#
interface Vlan-interface204
description 88_2haoluo
ip address 172.17.2.1 255.255.255.0
#
interface Vlan-interface205
description 88_3haoluo
ip address 172.17.3.1 255.255.255.0
#
interface Vlan-interface206
description 88_4haoluo
ip address 172.17.4.1 255.255.255.0
#
interface Vlan-interface207
description 88_5haoluo
ip address 172.17.5.1 255.255.255.0
#
interface Vlan-interface208
description 88_6haoluo1-2
ip address 172.17.6.1 255.255.255.192
#
interface Vlan-interface209
description 88_6haoluo3-5
ip address 172.17.6.65 255.255.255.192
#
interface Vlan-interface210
description 88_6haoluo6-7
ip address 172.17.6.129 255.255.255.128
#
interface Vlan-interface211
description 88_7haoluo1men
ip address 172.17.7.1 255.255.255.128
#
interface Vlan-interface212
description 88_7haoluo2men
ip address 172.17.7.129 255.255.255.128
#
interface Vlan-interface213
description 88_8haoluo1men
ip address 172.17.8.1 255.255.255.128
#
interface Vlan-interface214
description 88_8haoluo2men
ip address 172.17.8.129 255.255.255.128
#
interface Vlan-interface215
description 88_9haoluo1-3men
ip address 172.17.9.1 255.255.255.128
#
interface Vlan-interface216
description 88_9haoluo4-6men
ip address 172.17.9.129 255.255.255.128
#
interface Vlan-interface217
description 88_10haoluo
ip address 172.17.10.1 255.255.255.0
#
interface Vlan-interface218
description 88_13haoluo1-3men
ip address 172.17.13.1 255.255.255.128
#
interface Vlan-interface219
description 88_13haoluo4-6men
ip address 172.17.13.129 255.255.255.128
#
interface Vlan-interface220
description 88_14haoluo1-3men
ip address 172.17.14.1 255.255.255.128
#
interface Vlan-interface221
description 88_14haoluo4-6men
ip address 172.17.14.129 255.255.255.192
#
interface Vlan-interface222
description 88_14haoluo7-8men
ip address 172.17.14.193 255.255.255.192
#
interface Vlan-interface231
ip address 172.17.21.1 255.255.255.128
#
interface Vlan-interface232
ip address 172.17.21.129 255.255.255.128
#
interface Vlan-interface233
ip address 172.17.22.1 255.255.255.128
#
interface Vlan-interface234
ip address 172.17.22.129 255.255.255.128
#
interface Vlan-interface235
ip address 172.17.23.1 255.255.255.0
#
interface Vlan-interface236
ip address 172.17.24.1 255.255.255.128
#
interface Vlan-interface237
ip address 172.17.24.129 255.255.255.128
#
interface Vlan-interface238
ip address 172.17.25.1 255.255.255.192
#
interface Vlan-interface239
ip address 172.17.25.65 255.255.255.192
#
interface Vlan-interface240
ip address 172.17.25.129 255.255.255.192
#
interface Vlan-interface241
ip address 172.17.25.193 255.255.255.192
#
interface Vlan-interface242
ip address 172.17.26.1 255.255.255.192
#
interface Vlan-interface243
ip address 172.17.26.65 255.255.255.192
#
interface Vlan-interface244
ip address 172.17.26.129 255.255.255.192
#
interface Vlan-interface245
ip address 172.17.26.193 255.255.255.192
#
interface Aux1/0/0
#
interface Ethernet1/0/1
port access vlan 101
#
interface Ethernet1/0/2
port link-type trunk
port trunk permit vlan 1 101 201 to 230
#
interface Ethernet1/0/3
port link-type trunk
port trunk permit vlan 1 101 231 to 251
#
interface Ethernet1/0/4
#
interface Ethernet1/0/5
#
interface Ethernet1/0/6
#
interface Ethernet1/0/7
#
interface Ethernet1/0/8
#
interface Ethernet1/0/9
#
interface Ethernet1/0/10
#
interface Ethernet1/0/11
#
interface Ethernet1/0/12
#
interface Ethernet1/0/13
#
interface Ethernet1/0/14
#
interface Ethernet1/0/15
#
interface Ethernet1/0/16
#
interface Ethernet1/0/17
#
interface Ethernet1/0/18
#
interface Ethernet1/0/19
#
interface Ethernet1/0/20
#
interface Ethernet1/0/21
#
interface Ethernet1/0/22
#
interface Ethernet1/0/23
#
interface Ethernet1/0/24
#
interface GigabitEthernet1/1/1
#
interface GigabitEthernet1/1/2
#
interface GigabitEthernet1/1/3
#
interface GigabitEthernet1/1/4
#
undo irf-fabric authentication-mode
#
interface NULL0
#
voice vlan mac-address 0001-e300-0000 mask ffff-ff00-0000
#
ip route-static 0.0.0.0 0.0.0.0 172.16.1.1 preference 60
#
user-interface aux 0 7
authentication-mode password
set authentication password simple ！￥#￥DSF%
user-interface vty 0 4
user privilege level 2
set authentication password simple #￥%%￥……%……
protocol inbound telnet
#
return
<3600_88_youzhu_wanfy>

3100配置1

<31_88_huiju>dis cu
<31_88_huiju>dis current-configuration
#
sysname 31_88_huiju
#
radius scheme system
#
domain system
#
vlan 1
#
vlan 201 to 230
#
interface Vlan-interface1
ip address 172.17.0.2 255.255.255.0
#
interface Aux1/0/0
#
interface Ethernet1/0/1
port access vlan 201
description 88_1haoluo1-2men
#
interface Ethernet1/0/2
port access vlan 202
description 88_1haoluo3-4men
#
interface Ethernet1/0/3
port access vlan 203
description 88_1haoluo5-7men
#
interface Ethernet1/0/4
port access vlan 204
description 88_2haoluo
#
interface Ethernet1/0/5
port access vlan 205
description 88_3haoluo
#
interface Ethernet1/0/6
port access vlan 206
description 88_4haoluo
#
interface Ethernet1/0/7
port access vlan 207
description 88_5haoluo
#
interface Ethernet1/0/8
port access vlan 208
description 88_6haoluo1-2men
#
interface Ethernet1/0/9
port access vlan 209
description 88_6haoluo3-5men
#
interface Ethernet1/0/10
port access vlan 210
description 88_6haoluo6-7men
#
interface Ethernet1/0/11
port access vlan 211
description 88_7haoluo1men
#
interface Ethernet1/0/12
port access vlan 212
description 88_7haoluo2men
#
interface Ethernet1/0/13
port access vlan 213
description 88_8haoluo1men
#
interface Ethernet1/0/14
port access vlan 214
description 88_8haoluo2men
#
interface Ethernet1/0/15
port access vlan 215
description 88_9haoluo1-3men
#
interface Ethernet1/0/16
port access vlan 216
description 88_9haoluo4-6men
#
interface Ethernet1/0/17
port access vlan 217
description 88_10haoluo
#
interface Ethernet1/0/18
port access vlan 218
description 88_13haoluo1-3men
#
interface Ethernet1/0/19
port access vlan 219
description 88_13haoluo4-6men
#
interface Ethernet1/0/20
port access vlan 220
description 88_14haoluo1-3men
#
interface Ethernet1/0/21
port access vlan 221
description 88_14haoluo4-6men
#
interface Ethernet1/0/22
port access vlan 222
description 88_14haoluo7-8men
#
interface Ethernet1/0/23
#
interface Ethernet1/0/24
port link-type trunk
port trunk permit vlan all
description up_link to 3600
#
interface NULL0
#
user-interface aux 0
authentication-mode password
set authentication password simple yano525
user-interface vty 0 4
user privilege level 3
set authentication password simple yano525
protocol inbound telnet
#
return
<31_88_huiju>

3100配置2

<youzhu>dis cu
#
sysname youzhu
#
radius scheme system
#
domain system
#
vlan 1
#
vlan 231 to 251
#
interface Vlan-interface1
ip address 172.17.0.3 255.255.255.0
#
interface Aux1/0/0
#
interface Ethernet1/0/1
port access vlan 231
description 1#1-2men
#
interface Ethernet1/0/2
port access vlan 232
description 1#3-4men
#
interface Ethernet1/0/3
port access vlan 233
description 2#1-2men
#
interface Ethernet1/0/4
port access vlan 234
description 2#3-4men
#
interface Ethernet1/0/5
port access vlan 235
description fenqaolu_2#-2me
#
interface Ethernet1/0/6
port access vlan 236
description fenqaolu_1#1-2men
#
interface Ethernet1/0/7
port access vlan 237
description fenqaolu_1#3-4men
#
interface Ethernet1/0/8
port access vlan 238
description 5#1men
#
interface Ethernet1/0/9
port access vlan 239
description 5#2men
#
interface Ethernet1/0/10
port access vlan 240
description 5#3men
#
interface Ethernet1/0/11
port access vlan 241
description back
#
interface Ethernet1/0/12
port access vlan 242
description 6#1men
#
interface Ethernet1/0/13
port access vlan 243
description 6#2men
#
interface Ethernet1/0/14
port access vlan 244
description 6#3men
#
interface Ethernet1/0/15
port access vlan 245
description 6#4men
#
interface Ethernet1/0/16
port link-type trunk
port trunk permit vlan all
description up-link 3600
#
interface NULL0
#
user-interface aux 0
authentication-mode password
set authentication password simple yano525
user-interface vty 0 4
user privilege level 2
set authentication password simple yano525
protocol inbound telnet
#
return
<youzhu>

网络从组建成功1年多没有出现什么问题，但是从上周三开始，突然出现很多用户上不了网

我到用户家里测试发现能ping 通网（关36上的网关）还能ping通30-20路由器。但是ping 不通外网。我 telnet 到3600，从3600上能ping 通用户主机ip 也能ping 通外网但是用户就是上不了网。给用户换了个ip 发现能上网，再换回去又不能上网我开始以为是ip地址冲突，就给上不了网的用户多换了ip 第二天发现用户又不能上了，在这同时我snifer 抓过包没有发现有任何不正常的数据包。现在已经3天了，希望各位高手们看到小弟的求助能给与帮助，小弟在此，先谢谢了！！！！

网友：

查一下网络是不是网络产生环路了，，，
很有可能是这个原因