继续执行ping命令。

Question

请告诉我为什么继续执行这个命令ping..。

Router#ping vrf vrf-trust 50.50.50.50 sou 2.2.2.2

Type escape sequence to abort.
ending 5, 100-byte ICMP Echos to 50.50.50.50, timeout is 2 seconds:
Packet sent with a source address of 2.2.2.2 
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms

虽然路由表中没有指定的路由返回到2.2.2.2。

UntrustGi-vr.inet.0: 9 destinations, 9 routes (9 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

10.10.10.0/24      *[Static/5] 21:31:56
                > to 14.0.64.1 via ge-0/0/1.0
14.0.64.0/24       *[Direct/0] 1d 09:03:47
                > via ge-0/0/1.0
14.0.64.2/32       *[Local/0] 1d 09:40:15
                  Local via ge-0/0/1.0
20.20.20.0/24      *[Static/5] 21:31:56
                > to 14.0.64.1 via ge-0/0/1.0
30.30.30.0/24      *[Static/5] 21:31:56
                > to 14.0.64.1 via ge-0/0/1.0
40.40.40.0/24      *[OSPF/10] 1d 09:00:35, metric 2
                > to 14.0.64.1 via ge-0/0/1.0
50.50.50.0/24      *[OSPF/10] 21:37:17, metric 2
                > to 14.0.64.1 via ge-0/0/1.0
60.60.60.0/24      *[OSPF/10] 1d 09:00:35, metric 2
                > to 14.0.64.1 via ge-0/0/1.0
224.0.0.5/32       *[OSPF/10] 2d 00:06:40, metric 1
                  MultiRecv

但最近这条路。但现在我把它删除了。

也许是因为SRX记忆中的会话。但我进入了命令清除安全流会话除了ping继续..。

[edit routing-instances UntrustGi-vr]
admin# run show route 

inet.0: 2 destinations, 2 routes (1 active, 0 holddown, 1 hidden)
+ = Active Route, - = Last Active, * = Both

224.0.0.5/32       *[OSPF/10] 3d 00:31:23, metric 1
                      MultiRecv

Trust-vr.inet.0: 10 destinations, 10 routes (10 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

0.0.0.0/0          *[Static/5] 1d 04:08:21
                      to table UntrustGi-vr.inet.0
1.1.1.0/24         *[Static/5] 1d 12:31:58
                    > to 7.7.7.1 via ge-0/0/0.0
2.2.2.0/24         *[Static/5] 1d 12:30:19
                    > to 7.7.7.1 via ge-0/0/0.0
3.3.3.0/24         *[Static/5] 1d 12:30:19
                    > to 7.7.7.1 via ge-0/0/0.0
4.4.4.0/24         *[OSPF/10] 1d 12:50:53, metric 2
                    > to 7.7.7.1 via ge-0/0/0.0
5.5.5.0/24         *[OSPF/10] 1d 12:45:48, metric 2
                    > to 7.7.7.1 via ge-0/0/0.0
6.6.6.0/24         *[OSPF/10] 1d 12:50:53, metric 2
                    > to 7.7.7.1 via ge-0/0/0.0
7.7.7.0/24         *[Direct/0] 1d 12:54:13
                    > via ge-0/0/0.0
7.7.7.2/32         *[Local/0] 1d 13:30:28
                      Local via ge-0/0/0.0
224.0.0.5/32       *[OSPF/10] 2d 04:41:34, metric 1
                      MultiRecv

UntrustGi-vr.inet.0: 9 destinations, 9 routes (9 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

10.10.10.0/24      *[Static/5] 1d 01:22:09
                    > to 14.0.64.1 via ge-0/0/1.0
14.0.64.0/24       *[Direct/0] 1d 12:54:00
                    > via ge-0/0/1.0
14.0.64.2/32       *[Local/0] 1d 13:30:28
                      Local via ge-0/0/1.0
20.20.20.0/24      *[Static/5] 1d 01:22:09
                    > to 14.0.64.1 via ge-0/0/1.0
30.30.30.0/24      *[Static/5] 1d 01:22:09
                    > to 14.0.64.1 via ge-0/0/1.0
40.40.40.0/24      *[OSPF/10] 1d 12:50:48, metric 2
                    > to 14.0.64.1 via ge-0/0/1.0
50.50.50.0/24      *[OSPF/10] 1d 01:27:30, metric 2
                    > to 14.0.64.1 via ge-0/0/1.0
60.60.60.0/24      *[OSPF/10] 1d 12:50:48, metric 2
                    > to 14.0.64.1 via ge-0/0/1.0
224.0.0.5/32       *[OSPF/10] 2d 03:56:53, metric 1
                      MultiRecv

Answer 1

根据你的评论，一切看起来都是正确的。尽管50.50.50.50可能没有直接/学习路径为2.2.2.2，但他确实有一个默认网关设置为14.0.64.2。

Router#show ip route vrf vrf-untrustgi 
  S* 0.0.0.0/0 [1/0] via 14.0.64.2

如果您在本地没有一个可用于响应ping的接口，那么您将无法使用它。在ASA中可能存在使用随机地址的功能，这可能是出于安全审核的原因。它看起来类似于这样：

Router#ping 8.8.8.8 source 2.2.2.2
% Invalid source address- IP address not on any of our up interfaces
Router#