双出口策略路由加nat配置

《双出口策略路由加nat配置》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、网通段lo：59.64.24&0/24电信段lo：202.100.99.0/24isp2电信分配给我的ip211.64.19.2网通分配给我的ip202.1.1.2R2为电信PER3为网通PER4模拟内网PCR2与R3直接用静态或动态路由自己选，确保R2与R3直接LO网段能互访就行，用来测试（比如去电信的线路段了，走网通依然能访问电信10段）R1配置文件（出口网关设备）interfaceFastEthemetO/Oipaddress202.1.1.2255.255.255.0ipnatoutsideipvirtual-reassemblyduplexau

2、tospeedautoiinterfaceFastEthernetO/1ipaddress211.64.19.2255.255.255.0ipnatoutsideipvirtual-reassemblyduplexautospeedautointerfaceFastEthernet1/Oipaddress172.16.1.1255.255.255.0ipnatinsideipvirtual-reassemblyippolicyroute-mapruijieduplexautospeedautoiphttpservernoiphttpsecure-serv

3、eripnatinsidesourceroute-mapisplinterfaceFastEthernetO/1overload一符合route-mapispl的走0/1接口进行地址转换ipnatinsidesourceroute-mapisp2interfaceFastEthernetO/Ooverload一彳孑介route-mapisp2的走0/0接口进行地址转换access-list101permitipany202.100.99.00.0.0.255-■一被route-mapruijie引用匹配去电信10段的丨I的地址access-list102

4、denyipany202.100.99.00.0.0.255被route-mapruijie引川匹配去往网通及其他lo段的目的地址access-list102permitipanyanyi■I•route-mapruijiepermit10matchipaddress101setipdefaultnext-hop211.64.19.1202」」」I•route-mapruijiepermit20matchipaddress102setipdefaultnext-hop202.1.1.1211.64.19.1--去电信的流量优先走电信的线路，如果电信线路d

5、own走网通线路■…去网通的流量优先走网通线路，网通线路down走电信线路route-mapisp2permit1()matchinterfaceFastEthernetO/Oroute-mapisplisp2用来匹配route-map选路以后出接口的情况，在被nat引用來选择地址转换route-mapisplpermit10matchinterfaceFastEthernetO/1R2配置文件（模拟电信）interfaceLoopbackOipaddress202.100.99.1255.255.255.255IinterfaceFastEtherne

6、tO/Oipaddress111.1.1.1255.255.255.0duplexautospeedautointerfaceFastEthernetO/1ipaddress211.64」9.1255.255.255.0duplexautospeedauto•interfaceFastEthernetl/Onoipaddressshutdownduplexautospeedautoi•iproute59.64.24&0255.255.255.0111」」.2R3配置文件（模拟网通）I•interfaceLoopbackOipaddress59.64.24

7、8.1255.255.255.0IinterfaceFastEthernetO/Oipaddress111.1.1.2255.255.255.0duplexautospeedautoiinterfaceFastEthernetO/1ipaddress202.1.1.1255.255.255.0duplexautospeedautoiproute202.100.99.0255.255.255.0111」」」R4配置文件interfaceFastEthernetO/Oipaddress172.16.1.2255.255.255.0duplexautospee

8、dauto•interfaceFastEthernetO/1noipaddres