移动宽带某终端设备 | 然后内网 web 就连不上的问题

前几天移动客服给我电话安利我免费装他们的“宽带机顶盒”，当时忙（也是好奇）就答应来装了。

装好后一看原来是两个设备，一个是把原来的光猫整合到一个貌似路由器的设备（铭牌上是“***无源光纤接入用户端设备”，自带一个 wifi AP ）里；另一个是带 Dolby 的“***网络机顶盒”。

然后问题来了，突然发现我内网机器上的 web 页面都打不开了，我自己的路由器（ 192.168.10.1 ）管理页面打不开，Rpi 上的 Transmission UI 也打不开，连移动那破“用户端设备”上的配置 web 页面 192.168.1.1 也打不开。表现是：重连几次后，就报 reset （就像被墙了一样惹）。

现在内网的拓扑如下：

外面的光纤 )------ “用户端设备”------- “网络机顶盒”----------（连接电视

                                            | 

                                              ------------------我自己的路由器 

                                                                               |           |             | 

                                                                          电脑     RPi        ....

我已反复检查自己机器的防火墙（都是关着的），Transmission 的白名单也是关闭的。

暂时拔掉“网络机顶盒”，nmap 扫一扫，发现：192.168.1.0/24 这个域竟然有三个 IP 地址（ 1,2,3)。-sS 显示如下：

Nmap scan report for 192.168.1.1
Host is up (0.020s latency).
Not shown: 992 closed ports
PORT     STATE    SERVICE      VERSION
21/tcp   open     ftp          vsftpd 2.0.8 or later
22/tcp   filtered ssh
23/tcp   filtered telnet
135/tcp  filtered msrpc
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
1434/tcp filtered ms-sql-m
4444/tcp filtered krb524
No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ).
TCP/IP fingerprint:
OS:SCAN(V=7.40%E=4%D=6/3%OT=21%CT=1%CU=43525%PV=Y%DS=4%DC=T%G=Y%TM=5932CB07
OS:%P=i686-pc-linux-gnu)SEQ(SP=103%GCD=1%ISR=10C%II=RI%TS=U)SEQ(SP=F9%GCD=1
OS:%ISR=10E%TI=I%II=RI%TS=U)OPS(O1=M5A0%O2=M5A0%O3=M5A0%O4=M5A0%O5=M5A0%O6=
OS:M5A0)WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)ECN(R=Y%DF=N%T=
OS:FF%W=2000%O=M5A0%CC=N%Q=)ECN(R=N)T1(R=Y%DF=N%T=FF%S=O%A=S+%F=AS%RD=0%Q=)
OS:T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=N%T=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=
OS:N)T7(R=N)U1(R=Y%DF=N%T=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
OS:IE(R=Y%DFI=S%T=FF%CD=S)

Network Distance: 4 hops

TRACEROUTE (using port 256/tcp)
HOP RTT      ADDRESS
1   1.36 ms  192.168.10.1
2   6.47 ms  172.27.0.1
3   ...
4   23.01 ms 192.168.1.1

Nmap scan report for 192.168.1.2
Host is up (0.038s latency).
Not shown: 992 closed ports
PORT     STATE    SERVICE      VERSION
21/tcp   open     ftp          vsftpd 2.0.8 or later
22/tcp   open     ssh          Huawei VRP sshd (protocol 1.99)
| ssh-hostkey: 
|   2048 96:5e:83:ff:bd:7d:f2:a5:b7:cc:2a:2a:88:4b:46:56 (RSA1)
|_  2048 f4:0e:29:eb:8e:d2:be:cf:bb:74:42:aa:3a:b7:81:a2 (RSA)
|_sshv1: Server supports SSHv1
23/tcp   filtered telnet
135/tcp  filtered msrpc
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
1434/tcp filtered ms-sql-m
4444/tcp filtered krb524
No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ).
TCP/IP fingerprint:
OS:SCAN(V=7.40%E=4%D=6/3%OT=21%CT=1%CU=36008%PV=Y%DS=5%DC=T%G=Y%TM=5932CB07
OS:%P=i686-pc-linux-gnu)SEQ(II=RI%TS=U)SEQ(TI=I%II=RI%SS=O%TS=U)OPS(O1=M5A0
OS:%O2=M578%O3=M280%O4=M5A0%O5=M218%O6=M109)WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=
OS:FFFF%W5=FFFF%W6=FFFF)ECN(R=Y%DF=N%T=101%W=FFFF%O=M5A0%CC=N%Q=)T1(R=Y%DF=
OS:N%T=101%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=N%T=101%W=0
OS:%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=100%IPL=38%UN=0%RI
OS:PL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=S%T=100%CD=S)

Network Distance: 5 hops
Service Info: OS: VRP; CPE: cpe:/o:huawei:vrp

TRACEROUTE (using port 3389/tcp)
HOP RTT       ADDRESS
-   Hops 1-2 are the same as for 192.168.1.1
3   ...
4   137.96 ms 120.197.103.1
5   83.33 ms  192.168.1.2

Nmap scan report for 192.168.1.3
Host is up (0.017s latency).
All 1000 scanned ports on 192.168.1.3 are filtered
Too many fingerprints match this host to give specific OS details
Network Distance: 4 hops

TRACEROUTE (using proto 1/icmp)
HOP RTT      ADDRESS
-   Hops 1-2 are the same as for 192.168.1.1
3   16.13 ms 120.197.103.181
4   13.37 ms 192.168.1.3

厉害了！不知移动这是要干啥~~（开辣么多 interface ）

有大佬可以来解读一下么？

以及我遇到的这问题到底是不是跟移动这破终端有关？有哪些可能的原因呢？

tks