路由器双出口负载分担并NAT及互为备份.docx

资源描述

路由器双出口负载分担并NAT及互为备份.docx

《路由器双出口负载分担并NAT及互为备份.docx》由会员分享，可在线阅读，更多相关《路由器双出口负载分担并NAT及互为备份.docx（25页珍藏版）》请在冰豆网上搜索。

路由器双出口负载分担并NAT及互为备份.docx

路由器双出口负载分担并NAT及互为备份

思科路由器双WAN口负载分担并NAT及互为备份

说明：

客户接入ISP1及ISP2，部有4个网段分别是：

192.168.10.0/24

192.168.20.0/24

10.10.10.0/24

20.20.20.20/24

正常模式为192.168.10.0和10.10.10.0两个网段优先走ISP1，192.168.20.0和202.20.20.0两个网段优先走ISP2。

当IPS1线路中断时（即使R3接IPS1的接口是UP）192.168.10.0和10.10.10.0两个网段会自动转到ISP2，ISP2中断时同亦。

下面是拓扑图，及各台设备的配置文档，在GNS3上模拟测试成功。

（在网络上一直是伸手党，现在也分享下自己的经验，有不当之处还请指教，谢谢）

分别在R1、R2均配置loopback01.1.1.1/32为测试对象,R3为边界路由器，配置最多放在最后

R1#shrun

Buildingconfiguration...

Currentconfiguration:

761bytes

version12.4

servicetimestampsdebugdatetimemsec

servicetimestampslogdatetimemsec

nopassword-encryption

hostnameR1

boot-start-marker

boot-end-marker

noaaanew-model

ipcef

noipdomainlookup

interfaceLoopback0

ipaddress1.1.1.1255.255.255.255

interfaceFastEthernet0/0

ipaddress11.11.11.3255.255.255.248

duplexauto

speedauto

interfaceFastEthernet0/1

noipaddress

shutdown

duplexauto

speedauto

iproute11.11.11.0255.255.255.24811.11.11.1

noiphttpserver

noiphttpsecure-server

control-plane

gatekeeper

shutdown

linecon0

exec-timeout00

loggingsynchronous

stopbits1

lineaux0

stopbits1

linevty04

end

R2#shrun

Buildingconfiguration...

Currentconfiguration:

761bytes

version12.4

servicetimestampsdebugdatetimemsec

servicetimestampslogdatetimemsec

nopassword-encryption

hostnameR2

boot-start-marker

boot-end-marker

noaaanew-model

ipcef

noipdomainlookup

interfaceLoopback0

ipaddress1.1.1.1255.255.255.255

interfaceFastEthernet0/0

ipaddress22.22.22.3255.255.255.248

duplexauto

speedauto

interfaceFastEthernet0/1

noipaddress

shutdown

duplexauto

speedauto

iproute22.22.22.0255.255.255.24822.22.22.1

noiphttpserver

noiphttpsecure-server

control-plane

gatekeeper

shutdown

linecon0

exec-timeout00

loggingsynchronous

stopbits1

lineaux0

stopbits1

linevty04

end

R4#SHRUN

Buildingconfiguration...

Currentconfiguration:

755bytes

version12.4

servicetimestampsdebugdatetimemsec

servicetimestampslogdatetimemsec

nopassword-encryption

hostnameR4

boot-start-marker

boot-end-marker

noaaanew-model

ipcef

noipdomainlookup

interfaceLoopback0

ipaddress10.10.10.10255.255.255.0

interfaceFastEthernet0/0

ipaddress192.168.10.10255.255.255.0

duplexauto

speedauto

interfaceFastEthernet0/1

noipaddress

shutdown

duplexauto

speedauto

iproute0.0.0.00.0.0.0192.168.10.1

noiphttpserver

noiphttpsecure-server

control-plane

gatekeeper

shutdown

linecon0

exec-timeout00

loggingsynchronous

stopbits1

lineaux0

stopbits1

linevty04

end

R5#SHRUN

Buildingconfiguration...

Currentconfiguration:

757bytes

version12.4

servicetimestampsdebugdatetimemsec

servicetimestampslogdatetimemsec

nopassword-encryption

hostnameR5

boot-start-marker

boot-end-marker

noaaanew-model

ipcef

noipdomainlookup

interfaceLoopback0

ipaddress20.20.20.20255.255.255.0

interfaceFastEthernet0/0

ipaddress192.168.20.20255.255.255.0

duplexauto

speedauto

interfaceFastEthernet0/1

noipaddress

shutdown

duplexauto

speedauto

iproute0.0.0.00.0.0.0192.168.20.254

noiphttpserver

noiphttpsecure-server

control-plane

gatekeeper

shutdown

linecon0

exec-timeout00

loggingsynchronous

stopbits1

lineaux0

stopbits1

linevty04

end

R6#SHRUN

Buildingconfiguration...

Currentconfiguration:

1548bytes

version12.4

servicetimestampsdebugdatetimemsec

servicetimestampslogdatetimemsec

nopassword-encryption

hostnameR6

boot-start-marker

boot-end-marker

noaaanew-model

resourcepolicy

memory-sizeiomem5

ipcef

noipdomainlookup

interfaceFastEthernet0/0

noipaddress

shutdown

duplexauto

speedauto

interfaceFastEthernet0/1

noipaddress

shutdown

duplexauto

speedauto

interfaceFastEthernet1/0

switchportmodetrunk

interfaceFastEthernet1/1

interfaceFastEthernet1/2

interfaceFastEthernet1/3

interfaceFastEthernet1/4

switchportaccessvlan10

interfaceFastEthernet1/5

switchportaccessvlan20

interfaceFastEthernet1/6

interfaceFastEthernet1/7

interfaceFastEthernet1/8

interfaceFastEthernet1/9

interfaceFastEthernet1/10

interfaceFastEthernet1/11

interfaceFastEthernet1/12

interfaceFastEthernet1/13

interfaceFastEthernet1/14

interfaceFastEthernet1/15

interfaceVlan1

noipaddress

interfaceVlan10

ipaddress192.168.10.254255.255.255.0

interfaceVlan20

ipaddress192.168.20.254255.255.255.0

iproute0.0.0.00.0.0.0192.168.10.1

iproute10.10.10.0255.255.255.0192.168.10.10

iproute20.20.20.0255.255.255.0192.168.20.20

noiphttpserver

noiphttpsecure-server

control-plane

linecon0

exec-timeout00

loggingsynchronous

lineaux0

linevty04

webvpncontextDefault_context

sslauthenticateverifyall

noinservice

end

R6#

R3#SHRUN

Buildingconfiguration...

Currentconfiguration:

2739bytes

version12.4

servicetimestampsdebugdatetimemsec

servicetimestampslogdatetimemsec

nopassword-encryption

hostnameR3

boot-start-marker

boot-end-marker

noaaanew-model

ipcef

noipdomainlookup

ipslamonitor1

typeechoprotocolipIcmpEcho11.11.11.3source-interfaceFastEthernet0/0

frequency10

ipslamonitorschedule1lifeforeverstart-timenow

ipslamonitor2

typeechoprotocolipIcmpEcho22.22.22.3source-interfaceFastEthernet0/1

frequency10

ipslamonitorschedule2lifeforeverstart-timenow

track1rtr1reachability

track2rtr2reachability

interfaceFastEthernet0/0

ipaddress11.11.11.1255.255.255.248

ipnatoutside

ipvirtual-reassembly

duplexauto

speedauto

interfaceFastEthernet0/1

ipaddress22.22.22.1255.255.255.248

ipnatoutside

ipvirtual-reassembly

duplexauto

speedauto

interfaceFastEthernet1/0

noipaddress

shutdown

duplexauto

speedauto

interfaceFastEthernet1/1

noipaddress

shutdown

duplexauto

speedauto

interfaceFastEthernet2/0

noipaddress

duplexfull

interfaceFastEthernet2/0.10

encapsulationdot1Q10

ipaddress192.168.10.1255.255.255.0

ipnatinside

ipvirtual-reassembly

ippolicyroute-maptest

iproute0.0.0.00.0.0.011.11.11.3

iproute0.0.0.00.0.0.022.22.22.3

iproute10.10.10.0255.255.255.0192.168.10.254

iproute20.20.20.0255.255.255.0192.168.10.254

iproute192.168.20.0255.255.255.0192.168.10.254

noiphttpserver

noiphttpsecure-server

ipnatinsidesourceroute-map1interfaceFastEthernet0/0overload

ipnatinsidesourceroute-map2interfaceFastEthernet0/1overload

ipnatinsidesourceroute-map3interfaceFastEthernet0/1overload

ipnatinsidesourceroute-map4interfaceFastEthernet0/0overload

access-list10permit192.168.10.00.0.0.255

access-list10permit10.10.10.00.0.0.255

access-list20permit192.168.20.00.0.0.255

access-list20permit20.20.20.00.0.0.255

route-maptestpermit10

matchipaddress10

setipnext-hopverify-availability11.11.11.31track1

setipnext-hopverify-availability22.22.22.32track2

route-maptestpermit20

matchipaddress20

setipnext-hopverify-availability22.22.22.31track2

setipnext-hopverify-availability11.11.11.32track1

route-map1permit10

matchipaddress10

matchinterfaceFastEthernet0/0

route-map2permit10

matchipaddress20

matchinterfaceFastEthernet0/1

route-map3permit10

matchipaddress10

route-map4permit10

matchipaddress20

control-plane

gatekeeper

shutdown

linecon0

exec-timeout00

loggingsynchronous

stopbits1

lineaux0

stopbits1

linevty04

end

R3#

展开阅读全文