路由器双出口负载分担并NAT及互为备份.docx
- 文档编号:26323672
- 上传时间:2023-06-17
- 格式:DOCX
- 页数:25
- 大小:45.79KB
路由器双出口负载分担并NAT及互为备份.docx
《路由器双出口负载分担并NAT及互为备份.docx》由会员分享,可在线阅读,更多相关《路由器双出口负载分担并NAT及互为备份.docx(25页珍藏版)》请在冰豆网上搜索。
路由器双出口负载分担并NAT及互为备份
思科路由器双WAN口负载分担并NAT及互为备份
说明:
客户接入ISP1及ISP2,部有4个网段分别是:
192.168.10.0/24
192.168.20.0/24
10.10.10.0/24
20.20.20.20/24
正常模式为192.168.10.0和10.10.10.0两个网段优先走ISP1,192.168.20.0和202.20.20.0两个网段优先走ISP2。
当IPS1线路中断时(即使R3接IPS1的接口是UP)192.168.10.0和10.10.10.0两个网段会自动转到ISP2,ISP2中断时同亦。
下面是拓扑图,及各台设备的配置文档,在GNS3上模拟测试成功。
(在网络上一直是伸手党,现在也分享下自己的经验,有不当之处还请指教,谢谢)
分别在R1、R2均配置loopback01.1.1.1/32为测试对象,R3为边界路由器,配置最多放在最后
R1
R1#shrun
Buildingconfiguration...
Currentconfiguration:
761bytes
!
version12.4
servicetimestampsdebugdatetimemsec
servicetimestampslogdatetimemsec
nopassword-encryption
!
hostnameR1
!
boot-start-marker
boot-end-marker
!
!
noaaanew-model
!
!
ipcef
noipdomainlookup
!
!
interfaceLoopback0
ipaddress1.1.1.1255.255.255.255
!
interfaceFastEthernet0/0
ipaddress11.11.11.3255.255.255.248
duplexauto
speedauto
!
interfaceFastEthernet0/1
noipaddress
shutdown
duplexauto
speedauto
!
iproute11.11.11.0255.255.255.24811.11.11.1
!
noiphttpserver
noiphttpsecure-server
!
control-plane
!
gatekeeper
shutdown
!
!
linecon0
exec-timeout00
loggingsynchronous
stopbits1
lineaux0
stopbits1
linevty04
!
end
R2
R2#shrun
Buildingconfiguration...
Currentconfiguration:
761bytes
!
version12.4
servicetimestampsdebugdatetimemsec
servicetimestampslogdatetimemsec
nopassword-encryption
!
hostnameR2
!
boot-start-marker
boot-end-marker
!
!
noaaanew-model
!
!
ipcef
noipdomainlookup
!
!
interfaceLoopback0
ipaddress1.1.1.1255.255.255.255
!
interfaceFastEthernet0/0
ipaddress22.22.22.3255.255.255.248
duplexauto
speedauto
!
interfaceFastEthernet0/1
noipaddress
shutdown
duplexauto
speedauto
!
iproute22.22.22.0255.255.255.24822.22.22.1
!
noiphttpserver
noiphttpsecure-server
control-plane
!
gatekeeper
shutdown
!
!
linecon0
exec-timeout00
loggingsynchronous
stopbits1
lineaux0
stopbits1
linevty04
!
end
R4
R4#SHRUN
Buildingconfiguration...
Currentconfiguration:
755bytes
!
version12.4
servicetimestampsdebugdatetimemsec
servicetimestampslogdatetimemsec
nopassword-encryption
!
hostnameR4
!
boot-start-marker
boot-end-marker
!
!
noaaanew-model
!
!
ipcef
noipdomainlookup
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interfaceLoopback0
ipaddress10.10.10.10255.255.255.0
!
interfaceFastEthernet0/0
ipaddress192.168.10.10255.255.255.0
duplexauto
speedauto
!
interfaceFastEthernet0/1
noipaddress
shutdown
duplexauto
speedauto
!
iproute0.0.0.00.0.0.0192.168.10.1
!
noiphttpserver
noiphttpsecure-server
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
gatekeeper
shutdown
!
!
linecon0
exec-timeout00
loggingsynchronous
stopbits1
lineaux0
stopbits1
linevty04
!
!
end
R5
R5#SHRUN
Buildingconfiguration...
Currentconfiguration:
757bytes
!
version12.4
servicetimestampsdebugdatetimemsec
servicetimestampslogdatetimemsec
nopassword-encryption
!
hostnameR5
!
boot-start-marker
boot-end-marker
!
!
noaaanew-model
!
!
ipcef
noipdomainlookup
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interfaceLoopback0
ipaddress20.20.20.20255.255.255.0
!
interfaceFastEthernet0/0
ipaddress192.168.20.20255.255.255.0
duplexauto
speedauto
!
interfaceFastEthernet0/1
noipaddress
shutdown
duplexauto
speedauto
!
iproute0.0.0.00.0.0.0192.168.20.254
!
noiphttpserver
noiphttpsecure-server
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
gatekeeper
shutdown
!
!
linecon0
exec-timeout00
loggingsynchronous
stopbits1
lineaux0
stopbits1
linevty04
!
!
end
R6
R6#SHRUN
Buildingconfiguration...
Currentconfiguration:
1548bytes
!
version12.4
servicetimestampsdebugdatetimemsec
servicetimestampslogdatetimemsec
nopassword-encryption
!
hostnameR6
!
boot-start-marker
boot-end-marker
!
!
noaaanew-model
!
resourcepolicy
!
memory-sizeiomem5
ipcef
!
!
!
!
noipdomainlookup
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interfaceFastEthernet0/0
noipaddress
shutdown
duplexauto
speedauto
!
interfaceFastEthernet0/1
noipaddress
shutdown
duplexauto
speedauto
!
interfaceFastEthernet1/0
switchportmodetrunk
!
interfaceFastEthernet1/1
!
interfaceFastEthernet1/2
!
interfaceFastEthernet1/3
!
interfaceFastEthernet1/4
switchportaccessvlan10
!
interfaceFastEthernet1/5
switchportaccessvlan20
!
interfaceFastEthernet1/6
!
interfaceFastEthernet1/7
!
interfaceFastEthernet1/8
!
interfaceFastEthernet1/9
!
interfaceFastEthernet1/10
!
interfaceFastEthernet1/11
!
interfaceFastEthernet1/12
!
interfaceFastEthernet1/13
!
interfaceFastEthernet1/14
!
interfaceFastEthernet1/15
!
interfaceVlan1
noipaddress
!
interfaceVlan10
ipaddress192.168.10.254255.255.255.0
!
interfaceVlan20
ipaddress192.168.20.254255.255.255.0
!
iproute0.0.0.00.0.0.0192.168.10.1
iproute10.10.10.0255.255.255.0192.168.10.10
iproute20.20.20.0255.255.255.0192.168.20.20
!
!
noiphttpserver
noiphttpsecure-server
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
linecon0
exec-timeout00
loggingsynchronous
lineaux0
linevty04
!
!
webvpncontextDefault_context
sslauthenticateverifyall
!
noinservice
!
!
end
R6#
R3
R3#SHRUN
Buildingconfiguration...
Currentconfiguration:
2739bytes
!
version12.4
servicetimestampsdebugdatetimemsec
servicetimestampslogdatetimemsec
nopassword-encryption
!
hostnameR3
!
boot-start-marker
boot-end-marker
!
!
noaaanew-model
!
!
ipcef
noipdomainlookup
!
!
ipslamonitor1
typeechoprotocolipIcmpEcho11.11.11.3source-interfaceFastEthernet0/0
frequency10
ipslamonitorschedule1lifeforeverstart-timenow
ipslamonitor2
typeechoprotocolipIcmpEcho22.22.22.3source-interfaceFastEthernet0/1
frequency10
ipslamonitorschedule2lifeforeverstart-timenow
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
track1rtr1reachability
!
track2rtr2reachability
!
!
!
!
!
interfaceFastEthernet0/0
ipaddress11.11.11.1255.255.255.248
ipnatoutside
ipvirtual-reassembly
duplexauto
speedauto
!
interfaceFastEthernet0/1
ipaddress22.22.22.1255.255.255.248
ipnatoutside
ipvirtual-reassembly
duplexauto
speedauto
!
interfaceFastEthernet1/0
noipaddress
shutdown
duplexauto
speedauto
!
interfaceFastEthernet1/1
noipaddress
shutdown
duplexauto
speedauto
!
interfaceFastEthernet2/0
noipaddress
duplexfull
!
interfaceFastEthernet2/0.10
encapsulationdot1Q10
ipaddress192.168.10.1255.255.255.0
ipnatinside
ipvirtual-reassembly
ippolicyroute-maptest
!
iproute0.0.0.00.0.0.011.11.11.3
iproute0.0.0.00.0.0.022.22.22.3
iproute10.10.10.0255.255.255.0192.168.10.254
iproute20.20.20.0255.255.255.0192.168.10.254
iproute192.168.20.0255.255.255.0192.168.10.254
!
noiphttpserver
noiphttpsecure-server
!
ipnatinsidesourceroute-map1interfaceFastEthernet0/0overload
ipnatinsidesourceroute-map2interfaceFastEthernet0/1overload
ipnatinsidesourceroute-map3interfaceFastEthernet0/1overload
ipnatinsidesourceroute-map4interfaceFastEthernet0/0overload
!
access-list10permit192.168.10.00.0.0.255
access-list10permit10.10.10.00.0.0.255
access-list20permit192.168.20.00.0.0.255
access-list20permit20.20.20.00.0.0.255
!
route-maptestpermit10
matchipaddress10
setipnext-hopverify-availability11.11.11.31track1
setipnext-hopverify-availability22.22.22.32track2
!
route-maptestpermit20
matchipaddress20
setipnext-hopverify-availability22.22.22.31track2
setipnext-hopverify-availability11.11.11.32track1
!
route-map1permit10
matchipaddress10
matchinterfaceFastEthernet0/0
!
route-map2permit10
matchipaddress20
matchinterfaceFastEthernet0/1
!
route-map3permit10
matchipaddress10
!
route-map4permit10
matchipaddress20
!
!
!
!
control-plane
!
!
!
!
!
!
gatekeeper
shutdown
!
!
linecon0
exec-timeout00
loggingsynchronous
stopbits1
lineaux0
stopbits1
linevty04
!
!
end
R3#
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- 路由器 出口 负载 分担 NAT 互为 备份