雙ISP實現(xiàn)負(fù)載均衡手冊

1、雙ISP實現(xiàn)負(fù)載均衡詳細(xì)操作手冊、模擬拓?fù)鋱D其中：R5, R6相當(dāng)于ISP方，R1為企業(yè)對外router, R2,R3,R4為內(nèi)網(wǎng)設(shè)備二、配置R1:int f0/0ip add 192.168.0.1 255.255.255.0no sh!ip nat inside!int f1/0ip add 111.111.111.2 255.255.255.0no sh!ip nat outside!int f1/1ip add 222.222.222.2 255.255.255.0 no ship nat outsideip route 0.0.0.0 0.0.0.0 111.111.111.1ip

2、route 0.0.0.0 0.0.0.0 222.222.222.1ip route 10.10.10.0 255.255.0.0 192.168.0.2ip route 172.168.1.0 255.255.255.0 192.168.0.2access-list 1 permit 10.10.10.0 0.0.0.255access-list 2 permit 172.168.1.0 0.0.0.255route-map isp1 permit 10match ip address 1 （條件 1）match interface f1/0 （條件 2）ip nat inside sou

3、rce route-map ispl interface f1/0 overload*匹配條件1, 2被映射為f1/0的公網(wǎng)地址route-map isp2 permit 10match ip address 2 （條件 3）match interface f1/1 （條件 4）ip nat inside source route-map isp2 interface f1/1 overload*匹配條件3, 4被映射為f1/1的公網(wǎng)地址route-map ispl2 permit 10match ip address 1ip nat inside source route-map isp12

4、 interface f1/1 overloadroute-map isp permit 10match ip address 1match interface f1/0set int f1/0不過一但f1/0的上連線路斷掉，或者f1/0不小心shut down 10.10.10.0的網(wǎng)段將無法訪問 外網(wǎng),因此這里是把f1/1設(shè)置為10.10.10.0的備份nat ouside 口route-map isp2l permit 10match ip address 2ip nat inside source route-map isp21 interface f1/0 overloadroute

5、-map isp permit 20match ip address 2match interface f1/1set int f1/1int f0/0ip policy route-map isp （最后在 inside 內(nèi)口進(jìn)方向調(diào)用）R2:int f0/0ip add 192.168.0.2 255.255.255.0no sh!int f1/0ip add 10.10.10.1 255.255.255.0no sh!int f1/1ip add 172.168.1.1 255.255.255.0 no sh!ip route 0.0.0.0 0.0.0.0 192.168.0.1R3:

6、int f1/0ip add 10.10.10.2 255.255.255.0no sh!ip route 0.0.0.0 0.0.0.0 10.10.10.1R4:int f1/1ip add 172.168.1.2 255.255.255.0no sh !ip route 0.0.0.0 0.0.0.0 10.10.20.1R5:int f1/0ip add 111.111.111.1 255.255.255.0no sh !ip route 192.168.0.0 255.255.255.0 111.111.111.2ip route 0.0.0.0 0.0.0.0 111.111.11

7、1.2R6:int f1/1ip add 222.222.222.1 255.255.255.0 no ship route 192.168.0.0 255.255.255.0 222.222.222.2ip route 10.10.0.0 0.0.0.0 222.222.222.2三、測試nat是否能夠?qū)崿F(xiàn)雙nat出口負(fù)載均衡sh ip nat translationsRl#Rl#sh ip nat translationsPro Inside global Inside localOutside localtcp 111.111.111.2:50102 10.10.10.2:50102 1

8、11.111.111.1:233tcp 222.222.222.2:19439 172.168.1.2:19439 222.222.222.1:233Outside global111.111.111.1:2222.222.222.1:2測試OK!2. nat是否能夠?qū)崿F(xiàn)備份(shut down R1 f1/0)Rl#sh ip nat translationsPro Inside global Inside localtcp 222.222.222.2:11672 10.10.10.2:11672tcp 222.222.222.2:33890 10.10.10.2:33890tcp 222.222.222.2:19439 172.168.1.2:19439tcp 111.111.111.2:53493 172.168.1.2:53493Outside local222.222.222.1:23222.222.222.1:23222.222.222.1:23222.222.222.1:23Outside global222.222.222.1:23222.222.222.1:23222.222.222.1:23222.222.222.1:23從