双出口互备份方案(pbr技术)

《双出口互备份方案(pbr技术)》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、双出口，负载平衡，互备份方案（需NAT转换）说明：出口下分别接不同VLAN4个VLAN分别通过两个trunk口连接到ISP。为了节约地址，ISP处使用了桥接（BVI）技术。要求：vlan2和vlan3默认走tele出口，vlan4和vlan5默认走cnc出口。Tele出口中断后vlan2和vlan3的用户能够自动切换到cnc出口。反之亦然。使用技术：NATPBR注意：在做ipnatinsidesouceroute-mapxxx时根据顺序匹配原则将备份出口的nat写在默认出口的nat前面。这样在默认出口正常的情况下，nat转换将使用默认出口的IP。当默认出口中断的情况下能实现

2、自动nat转换切换。拓扑如下：配置如下：ISP(router)Buildingconfiguration...Currentconfiguration:2546bytes!version12.3servicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!hostnameisp!boot-start-markerboot-end-marker!noaaanew-modelipsubnet-zero!ipsshbreak-string!novoice

3、hpicapturebuffernovoicehpicapturedestination!bridgeirb!interfaceFastEthernet0/0noipaddressduplexautospeedauto!interfaceFastEthernet0/0.2encapsulationdot1Q2nocdpenablebridge-group1!interfaceFastEthernet0/0.3encapsulationdot1Q3nocdpenablebridge-group1!interfaceFastEthernet0/1noipaddressduple

4、xautospeedauto!interfaceFastEthernet0/1.4encapsulationdot1Q4bridge-group2!interfaceFastEthernet0/1.5encapsulationdot1Q5bridge-group2!interfaceEthernet1/0noipaddressshutdownhalf-duplex!interfaceEthernet1/1ipaddress192.168.1.1255.255.255.0ipnatoutsidefull-duplex!interfaceEthernet1/2ipaddress

5、172.16.1.1255.255.255.0ipnatoutsidefull-duplex!interfaceEthernet1/3noipaddressshutdownhalf-duplex!interfaceBVI1ipaddress10.10.10.1255.255.255.0ipnatinsideippolicyroute-mappbr_ab!interfaceBVI2ipaddress20.20.20.1255.255.255.0ipnatinsideippolicyroute-mappbr_cd!ipnatpool20172.16.1.1172.16.1.1n

6、etmask255.255.255.0ipnatpool10192.168.1.1192.168.1.1netmask255.255.255.0ipnatinsidesourceroute-mapabpool10overloadipnatinsidesourceroute-mapcdpool20overloadipnatinsidesourceroute-mapnat_abpool10overloadipnatinsidesourceroute-mapnat_cdpool20overloadiphttpservernoiphttpsecure-serveripclassle

7、ss!!access-list10permit10.10.10.00.0.0.255access-list20permit20.20.20.00.0.0.255!route-mapabpermit10matchipaddress20matchinterfaceEthernet1/1!route-mapcdpermit10matchipaddress10matchinterfaceEthernet1/2!route-mapnat_cdpermit10matchipaddress20!route-mapnat_abpe