双ISP接入负载均衡NAT与IPSLA链路检测实验配置Word文件下载.docx

双ISP接入负载均衡NAT与IPSLA链路检测实验配置Word文件下载.docx

《双ISP接入负载均衡NAT与IPSLA链路检测实验配置Word文件下载.docx》由会员分享，可在线阅读，更多相关《双ISP接入负载均衡NAT与IPSLA链路检测实验配置Word文件下载.docx（17页珍藏版）》请在冰豆网上搜索。

!

version12.4

servicetimestampsdebugdatetimemsec

servicetimestampslogdatetimemsec

noservicepassword-encryption

hostnameCE

boot-start-marker

boot-end-marker

noaaanew-model

memory-sizeiomem5

ipcef

noipdomainlookup

ipslamonitor1

typeechoprotocolipIcmpEcho172.16.2.1source-interfaceFastEthernet0/0

ipslamonitorschedule1lifeforeverstart-timenow

ipslamonitor2

typeechoprotocolipIcmpEcho172.31.2.1source-interfaceFastEthernet2/0

ipslamonitorschedule2lifeforeverstart-timenow

track1rtr1reachability#将track与ipsla关联起来，track根据ipsla的返回代码来断定链路UP/DOWN

track2rtr2reachability

interfaceLoopback0

ipaddress1.1.1.1255.255.255.255

ipload-sharingper-packet

ipnatinside

ipvirtual-reassembly

noiproute-cachecef

noiproute-cache

interfaceFastEthernet0/0

descriptionisp1

ipaddress172.16.1.1255.255.255.0

ipnatoutside

duplexauto

speedauto

interfaceSerial1/0

noipaddress

shutdown

serialrestart-delay0

interfaceSerial1/1

interfaceSerial1/2

interfaceSerial1/3

interfaceFastEthernet2/0

descriptionisp2

ipaddress172.31.1.1255.255.255.0

iphttpserver

noiphttpsecure-server

iproute0.0.0.00.0.0.0FastEthernet0/0172.16.1.2track1#根据trackreachability状态UP/DOWN默认路由

iproute0.0.0.00.0.0.0FastEthernet2/0172.31.1.2track2

iproute172.16.2.1255.255.255.255FastEthernet0/0#首先解决IPSLA检测目标的路由，而后默认路由才能UP

iproute172.31.2.1255.255.255.255FastEthernet2/0

ipnatinsidesourceroute-mapisp1interfaceFastEthernet0/0overload

ipnatinsidesourceroute-mapisp2interfaceFastEthernet2/0overload#通过使用routemap来匹配数据包的路由出接口

access-list1permit1.1.1.1

access-list100permitiphost1.1.1.1host3.3.3.3#此ACL仅用于debug调试

route-mapisp2permit10

matchipaddress1

matchinterfaceFastEthernet2/0

route-mapisp1permit10

matchinterfaceFastEthernet0/0

control-plane

linecon0

loggingsynchronous

lineaux0

linevty04

login

End

ISP1configuration

ISP1#shrun

955bytes

hostnameISP1

resourcepolicy

ipaddress172.16.1.2255.255.255.0

duplexhalf

ipaddress172.16.2.2255.255.255.0

iproute3.3.3.3255.255.255.255Serial1/1

noiphttpserver

loggingalarminformational

stopbits1

ISP2configuration

ISP2#shrun

hostnameISP2

ipaddress172.31.2.2255.255.255.0

ipaddress172.31.1.2255.255.255.0

iproute3.3.3.3255.255.255.255Serial1/0

Internet-serverconfiguration

Internet-server#shrun

1065bytes

hostnameInternet-server

ipaddress3.3.3.3255.255.255.255

ipaddress172.16.2.1255.255.255.0

ipaddress172.31.2.1255.255.255.0

iproute172.16.0.0255.255.0.0Serial1/0

iproute172.31.0.0255.255.0.0Serial1/1

Show信息

Debug测试

走F2/0的包，源IP被NAT成ISP2接口IP

走F0/0的包，源IP被NAT成ISP1接口IP

Shutdowninternet-server路由器的S1/0接口，测试IPSLA

由于IPSLAmonitor1检测目标ping不同，ISP1的默认路由DOWN掉，只剩下ISP2的默认路由

IPSLAmonitor1returncode为timeout，track1reachability为down，因此ISP1默认路由DOWN掉