电信网通双出口负载分担设置指导.docx

《电信网通双出口负载分担设置指导.docx》由会员分享，可在线阅读，更多相关《电信网通双出口负载分担设置指导.docx（7页珍藏版）》请在淘文阁 - 分享文档赚钱的网站上搜索。

1、电信网通双出口负载分担设置指导这个设置是在华为的产品上面实现的，能参考这个设置在Cisco上面做一些调整就能了。 负载分担设置指导定义监测组，分别监测电信和网通网关：进入系统视图，创建detect-group 1,监测电信网关： systemSystem View: return to User View with Ctrl+Z.Quidway detect-group 1Quidway-detect-group-1Quidway-detect-group-1 quit创建detect-group 1,监测网通网关：Quidwaydetect-group 2Quidway-detect-gro

2、up- 2 quitQuidway注：以上以地址最为电信网关地址，地址为网通网关地址为例，能根据实际组网情况修改。中国网管联盟设置两条默认路由互为备份，优先走电信线路：Quidwayip route-static 0.0.0.0 0.0.0,0 60.190.80.113 preference 60 detect-group 1Quidwayip route-static 0.0.0.0 0.0.0.0 221.12.79.49 preference 100 detect-group 2注：以上以地址最为电信网关地址，地址为网通网关地址为 例，能根据实际组网情况修改。设置静态路由和监测组关联，

3、使访问网通流量优先走网通线路：以下设置较多，设置过程中能用实际网通网关地址替换地址后直接复制粘贴:ip route-static 58.16.0.0 255.248.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 58.100.0.0 255.254.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 58.240.0.0 255.240.0.0 221.12.79.49 preference 60 detect-group 2ip route-sta

4、tic 60.0.0.0 255.248.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 60.8.0.0 255.252.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 60.12.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 60.13.0.0 255.255.192.0 221.12.79.49 preference 60 detect-gro

5、up 2ip route-static 60.13.128.0255.255.128.0221.12.79.49 preference 60 detect-group 2ip route-static 60.16.0.0 255.240.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 60.24.0.0 255.248.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 60.31.0.0 255.255.0.0 221.12.79.49 prefer

6、ence 60 detect-group 2ip route-static 60.208.0.0 255.248.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 60.216.0.0 255.254.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 60.220.0.0 255.252.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.48.0.0 255.252.0.0

7、221.12.79.49 preference 60 detect-group 2ip route-static 61.52.0.0 255.254.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.54.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.55.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.133

8、.0.0 255.255.128.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.134.64.0 255.255.192.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.134.128.0 255.255.128.0 221.12.79.49 preference 60 detect-group 2iproute-static61.135.0.0 255.255.0.0 221.12.79.49 preference 60 detect-gr

9、oup 2ip route-static 61.136.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.138.0.0 255.255.128.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.139.128.0 255.255.192.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.148.0.0 255.255.0.0 221.12.79.

10、49 preference 60 detect-group 2ip route-static 61.149.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.156.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.158.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static61.159.0.0 255

11、.255.192.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.161.0.0 255.255.192.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.161.128.0 255.255.128.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.162.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip

12、 route-static 61.163.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.167.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.168.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.176.0.0 255.255.0.0 221.12.79.49 preference

13、 60 detect-group 2ip route-static 61.179.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.180.128.0 255.255.128.0 221.12.79.49 preference 60 detect-group 2iproute-static61.181.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 61.182.0.0 255.255.0.0 2

14、21.12.79.49 preference 60 detect-group 2ip route-static 61.189.0.0 255.255.128.0 221.12.79.49 preference 60 detect-group 2ip route-static 124.90.0.0 255.254.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 124.162.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 1

15、92.168.2,246 255.255.255.255 192.168.2.254 preference 60ip route-static 202.32.0.0 255.224.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 202.96.64.0 255.255.224.0 221.12.79.49 preference 60 detect-group 2ip route-static 202.97.128.0 255.255.128.0 221.12.79.49 preference 60 detect-grou

16、p 2ip route-static 202.98.0.0 255.255.224.0 221.12.79.49 preference 60 detect-group 2ip route-static 202.99.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static202.102.128.0255.255.192.0221.12.79.49 preference 60detect-group2ip route-static 202.102.224.0255.255.254.0 221.12.79.49

17、 preference 60 detect-group 2ip route-static 202.106.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 202.107.0.0 255.255.128.0 221.12.79.49 preference 60 detect-group 2ip route-static 202.108.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 202.110.0.

18、0 255.255.128.0 221.12.79.49 preference 60 detect-group 2ip route-static202.110.192.0255.255.192.0221.12.79.49 preference 60detect-group2ip route-static202.111.128.0255.255.192.0221.12.79.49 preference60detect-group2ip route-static 203.79.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ipro

19、ute-static203.80.0.0255.255.0.0221.12.79.49preference60detect-group2 中国网管联盟 ip route-static 203.81.0.0 255.255.224.0 221.12.79.49 preference 60 detect-group 2ip route-static 203.86.32.0 255.255.224.0 221.12.79.49 preference 60 detect-group 2ip route-static 203.86.64.0 255.255.224.0 221.12.79.49 pref

20、erence 60 detect-group 2ip route-static 203.90.0.0 255.255.128.0 221.12.79.49 preference 60 detect-group 2ip route-static203.90.128.0 255.255.192.0221.12.79.49 preference 60detect-group2ip route-static203.90.192.0 255.255.224.0221.12.79.49 preference 60detect-group2ip route-static 203.92.0.0 255.254

21、.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 210.12.0.0 255.255.128.0 221.12.79.49 preference 60 detect-group 2ip route-static 210.12.192.0 255.255.192.0 221.12.79.49 preference 60 detect-group 2ip route-static 210.13.0.0 255.255.255.0 221.12.79.49 preference 60 detect-group 2ip rou

22、te-static210.14.160.0 255.255.224.0221.12.79.49 preference 60detect-group2ip route-static210.14.192.0 255.255.192.0221.12.79.49 preference 60detect-group2ip route-static 210.15.0.0 255.255.128.0 221.12.79.49 preference 60 detect-group 2ip route-static210.15.128.0255.255.192.0221.12.79.49 preference

23、60 detect-group2ip route-static210.16.128.0 255.255.192.0221.12.79.49 preference 60detect-group2ip route-static 210.21.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 210.22.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 210.51.0.0 255.255.0.0 221.1

24、2.79.49 preference 60 detect-group 2ip route-static 210.52.0.0 255.254.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 210.52.128.0 255.255.128.0 221.12.79.49 preference 60 detect-group 2ip route-static 210.53.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 210.

25、74.64.0 255.255.192.0 221.12.79.49 preference 60 detect-group 2ip route-static 210.74.128.0 255.255.192.0 221.12.79.49 preference 60 detect-group 2ip route-static 210.78.0.0 255.255.224.0 221.12.79.49 preference 60 detect-group 2ip route-static 210.82.0.0 255.254.0.0 221.12.79.49 preference 60 detec

26、t-group 2ip route-static 211.100.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 211.101.0.0 255.255.192.0 221.12.79.49 preference 60 detect-group 2ip route-static 211.147.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 211.167.96.0 255.255.224.0 221

27、.12.79.49 preference 60 detect-group 2ip route-static 218.4.0.0 255.252.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 218.10.0.0 255.254.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 218.21.128.0 255.255.128.0 221.12.79.49 preference 60 detect-group 2ip route-static 218

28、.24.0.0 255.254.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 218.26.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 218.27.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 218.28.0.0 255.254.0.0 221.12.79.49 preference 60 detect-group

29、2ip route-static 218.56.0.0 255.252.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 218.60.0.0 255.254.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 218.62.0.0 255.255.128.0 221.12.79.49 preference 60 detect-group 2ip route-static 218.67.128.0 255.255.128.0 221.12.79.49 p

30、reference 60 detect-group 2ip route-static 218.68.0.0 255.254.0.0 221.12.79.49 preference 60 detect-group 2ip route-static218.109.159.0255.255.255.0221.12.79.49 preference60detect-group2ip route-static219.141.128.0255.255.128.0221.12.79.49 preference60detect-group2ip route-static 219.142.0.0 255.254

31、.0.0 221.12.79.49 preference 60 detect-group 2 ip route-static 219.154.0.0 255.254.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 219.156.0.0 255.254.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 219.158.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-s

32、tatic 219.159.0.0 255.255.192.0 221.12.79.49 preference 60 detect-group 2ip route-static 220.248.0.0 255.252.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 220.252.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 221.0.0.0 255.252.0.0 221.12.79.49 preference 60

33、detect-group 2ip route-static 221.4.0.0 255.254.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 221.6.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 221.7.128.0 255.255.128.0 221.12.79.49 preference 60 detect-group 2ip route-static 221.8.0.0 255.254.0.0 221.12.

34、79.49 preference 60 detect-group 2ip route-static 221.10.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 221.11.0.0 255.255.128.0 221.12.79.49 preference 60 detect-group 2ip route-static 221.12.0.0 255.252.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 221.12.0

35、.0 255.255.128.0 221.12.79.49 preference 60 detect-group 2ip route-static 221.12.128.0 255.255.192.0 221.12.79.49 preference 60 detect-group 2ip route-static 221.192.0.0 255.252.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 221.195.0.0 255.255.0.0 221.12.79.49 preference 60 detect-gro

36、up 2ip route-static 221.196.0.0 255.254.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 221.199.0.0 255.255.224.0 221.12.79.49 preference 60 detect-group 2ip route-static 221.199.32.0 255.255.240.0 221.12.79.49 preference 60 detect-group 2ip route-static221.199.128.0255.255.192.0221.12.

37、79.49 preference 60detect-group2ip route-static221.199.192.0255.255.240.0221.12.79.49 preference 60detect-group2ip route-static 221.200.0.0 255.252.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 221.204.0.0 255.254.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 221.207.0.

38、0 255.255.192.0 221.12.79.49 preference 60 detect-group 2ip route-static 221.208.0.0 255.240.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 221.208.0.0 255.252.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 221.213.0.0 255.255.0.0 221.12.79.49 preference 60 detect-group 2

39、ip route-static 221.214.0.0 255.254.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 222.128.0.0 255.252.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 222.132.0.0 255.252.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 222.136.0.0 255.248.0.0 221.12.79.49 pref

40、erence 60 detect-group 2ip route-static 222.160.0.0 255.252.0.0 221.12.79.49 preference 60 detect-group 2ip route-static 222.163.0.0 255.255.224.0 221.12.79.49 preference 60 detect-group 2ip route-static 0.0.0.0 0.0.0.0 20.1.1.2 preference 60注：以上路由已包含大部分网通地址段，如有更新能动态添加。经过如上三个设置步骤后，路由器便能自动区分网通流量和电信流量

41、，使访问网通站点走 网通线路，访问电信站点走电信线路。并月.当网通线路出问题后所有流量都会自动转换到电信线 路上，使用户能够不间断访问网络。添加防火墙设置，增加网络的可性：定义电信线路使用的acl 3001：DL.网管软件下载能用实际电信网关地址替换地址60.190.80.112,实际内网地址网段替换后直接复制粘贴：acl number3001rule 10 deny tcp destination-port eq 445rule 11 deny udp destination-port eq 445rule 20 deny tcp destination-port eq 135rule 21

42、 deny udp destination-port eq 135rule 30 deny tcp destination-port eq 137rule 31 deny udp destination-port eq netbios-nsrule 40 deny tcp destination-port eq 138rule 41 deny udp destination-port eq netbios-dgmrule 50 deny tcp destination-port eq 139rule 51 deny udp destination-port eq netbios-ssnrule

43、 61 deny udp destination-port eq tftprule 70 deny tcp destination-port eq 593rule 80 deny tcp destination-port eq4444rule 90 deny tcp destination-port eq707rule 100 deny tcp destination-port eq 1433rule 101 deny udp destination-port eq 1433rule 110 deny tcp destination-port eq 1434rule 111 deny udp

44、destination-port eq 1434rule 120 deny tcp destination-port eq 5554rule 130 deny tcp destination-port eq 9996rule 141 deny udp source-port eqbootpsrule 160 permit icmp icmp-type echorule 161 permit icmp icmp-type echo-replyrule 162 permit icmp icmp-type ttl-exceededrule 165 denyicmprule 200 deny tcp

45、destination-port eq wwwrule 202 deny tcp destination-port eq ftprule 204 deny tcp destination-port eq 3389rule 2000 permit ip destination 60.190.80.112 0rule 2001 permit ip destination 192.168.2.00.0.0,255rule 2002 deny ip定义网通线路使用的acl 3002能用实际网通网关地址替换地址221.12.79.49,实际内网地址网段替换后直接复制粘贴：acl number3002ru

46、le 10 deny tcp destination-port eq 445rule 11 deny udp destination-port eq 445rule 20 deny tcp destination-port eq 135rule 21 deny udp destination-port eq 135rule 30 deny tcp destination-port eq 137rule 31 deny udp destination-port eq netbios-nsrule 40 deny tcp destination-port eq 138rule 41 deny ud

47、p destination-port eq netbios-dgmrule 50 deny tcp destination-port eq 139rule 51 deny udp destination-port eq netbios-ssnrule 61 deny udp destination-port eq tftprule 70 deny tcp destination-port eq 593rule 80 deny tcp destination-port eq 4444rule 90 deny tcp destination-port eq707rule 100 deny tcp

48、destination-port eq 1433rule 101 deny udp destination-port eq 1433rule 110 deny tcp destination-port eq 1434rule 111 deny udp destination-port eq 1434rule 120 deny tcp destination-port eq 5554rule 130 deny tcp destination-port eq 9996rule 141 deny udp source-port eq bootps bitsCN_comrule 160 permit

49、icmp icmp-type echorule 161 permit icmp icmp-type echo-replyrule 162 permit icmp icmp-type ttl-exceededrule 165 denyicmprule 200 deny tcp destination-port eq wwwrule 202 deny tcp destination-port eq ftprule 204 deny tcp destination-port eq 3389rule 2000 permit ip destination 221.12.79.54 0rule 2002 deny ip定义内网使用的acl 3003