欢迎来到天天文库
浏览记录
ID:2223975
大小:72.50 KB
页数:5页
时间:2017-11-15
《双出口互备份方案(pbr技术)》由会员上传分享,免费在线阅读,更多相关内容在行业资料-天天文库。
1、双出口,负载平衡,互备份方案(需NAT转换)说明:出口下分别接不同VLAN4个VLAN分别通过两个trunk口连接到ISP。为了节约地址,ISP处使用了桥接(BVI)技术。要求:vlan2和vlan3默认走tele出口,vlan4和vlan5默认走cnc出口。Tele出口中断后vlan2和vlan3的用户能够自动切换到cnc出口。反之亦然。使用技术:NATPBR注意:在做ipnatinsidesouceroute-mapxxx时根据顺序匹配原则将备份出口的nat写在默认出口的nat前面。这样在默认出口正常的情况下,nat转换
2、将使用默认出口的IP。当默认出口中断的情况下能实现自动nat转换切换。拓扑如下:配置如下:ISP(router)Buildingconfiguration...Currentconfiguration:2546bytes!version12.3servicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!hostnameisp!boot-start-markerboot-end-marker!noa
3、aanew-modelipsubnet-zero!ipsshbreak-string!novoicehpicapturebuffernovoicehpicapturedestination!bridgeirb!interfaceFastEthernet0/0noipaddressduplexautospeedauto!interfaceFastEthernet0/0.2encapsulationdot1Q2nocdpenablebridge-group1!interfaceFastEthernet0/0.3encapsula
4、tiondot1Q3nocdpenablebridge-group1!interfaceFastEthernet0/1noipaddressduplexautospeedauto!interfaceFastEthernet0/1.4encapsulationdot1Q4bridge-group2!interfaceFastEthernet0/1.5encapsulationdot1Q5bridge-group2!interfaceEthernet1/0noipaddressshutdownhalf-duplex!interf
5、aceEthernet1/1ipaddress192.168.1.1255.255.255.0ipnatoutsidefull-duplex!interfaceEthernet1/2ipaddress172.16.1.1255.255.255.0ipnatoutsidefull-duplex!interfaceEthernet1/3noipaddressshutdownhalf-duplex!interfaceBVI1ipaddress10.10.10.1255.255.255.0ipnatinsideippolicyrou
6、te-mappbr_ab!interfaceBVI2ipaddress20.20.20.1255.255.255.0ipnatinsideippolicyroute-mappbr_cd!ipnatpool20172.16.1.1172.16.1.1netmask255.255.255.0ipnatpool10192.168.1.1192.168.1.1netmask255.255.255.0ipnatinsidesourceroute-mapabpool10overloadipnatinsidesourceroute-map
7、cdpool20overloadipnatinsidesourceroute-mapnat_abpool10overloadipnatinsidesourceroute-mapnat_cdpool20overloadiphttpservernoiphttpsecure-serveripclassless!!access-list10permit10.10.10.00.0.0.255access-list20permit20.20.20.00.0.0.255!route-mapabpermit10matchipaddress2
8、0matchinterfaceEthernet1/1!route-mapcdpermit10matchipaddress10matchinterfaceEthernet1/2!route-mapnat_cdpermit10matchipaddress20!route-mapnat_abpe
此文档下载收益归作者所有