双出口策略路由加nat配置 (2)教学资料.doc

《双出口策略路由加nat配置 (2)教学资料.doc》由会员分享，可在线阅读，更多相关《双出口策略路由加nat配置 (2)教学资料.doc（21页珍藏版）》请在淘文阁 - 分享文档赚钱的网站上搜索。

1、Good is good, but better carries it.精益求精，善益求善。双出口策略路由加nat配置 (2)-实验实现出口双线，电信流量走电信，网通流量走网通，并且双线互相备份。电信分配给我的ip211.64.19.2网通分配给我的ip202.1.1.2R2为电信PER3为网通PER4模拟内网PCR2与R3直接用静态或动态路由自己选，确保R2与R3直接LO网段能互访就行，用来测试（比如去电信的线路段了，走网通依然能访问电信lo段）R1配置文件（出口网关设备）interfaceFastEthernet0/0ipaddress202.1.1.2255.255.255.0ipnat

2、outsideipvirtual-reassemblyduplexautospeedauto!interfaceFastEthernet0/1ipaddress211.64.19.2255.255.255.0ipnatoutsideipvirtual-reassemblyduplexautospeedauto!interfaceFastEthernet1/0ipaddress172.16.1.1255.255.255.0ipnatinsideipvirtual-reassemblyippolicyroute-mapruijieduplexautospeedauto!iphttpserverno

3、iphttpsecure-serveripnatinsidesourceroute-mapisp1interfaceFastEthernet0/1overload-符合route-mapisp1的走0/1接口进行地址转换ipnatinsidesourceroute-mapisp2interfaceFastEthernet0/0overload-符合route-mapisp2的走0/0接口进行地址转换!access-list101permitipany202.100.99.00.0.0.255-被route-mapruijie引用匹配去电信lo段的目的地址access-list102denyip

4、any202.100.99.00.0.0.255-被route-mapruijie引用匹配去往网通及其他lo段的目的地址access-list102permitipanyany!route-mapruijiepermit10matchipaddress101-去电信的流量setipdefaultnext-hop211.64.19.1202.1.1.1优先走电信的线路，如果电信线路down走网通线路!route-mapruijiepermit20matchipaddress102-去网通的流量setipdefaultnext-hop202.1.1.1211.64.19.1优先走网通线路，网通线路

5、down走电信线路!route-mapisp2permit10matchinterfaceFastEthernet0/0-route-mapisp1isp2用来匹配route-map选路以后出接口的情况，在被nat引用来选择地址转换!route-mapisp1permit10matchinterfaceFastEthernet0/1R2配置文件（模拟电信）interfaceLoopback0ipaddress202.100.99.1255.255.255.255!interfaceFastEthernet0/0ipaddress111.1.1.1255.255.255.0duplexautos

6、peedauto!interfaceFastEthernet0/1ipaddress211.64.19.1255.255.255.0duplexautospeedauto!interfaceFastEthernet1/0noipaddressshutdownduplexautospeedauto!iproute59.64.248.0255.255.255.0111.1.1.2R3配置文件（模拟网通）!interfaceLoopback0ipaddress59.64.248.1255.255.255.0!interfaceFastEthernet0/0ipaddress111.1.1.2255.

7、255.255.0duplexautospeedauto!interfaceFastEthernet0/1ipaddress202.1.1.1255.255.255.0duplexautospeedauto!iproute202.100.99.0255.255.255.0111.1.1.1R4配置文件interfaceFastEthernet0/0ipaddress172.16.1.2255.255.255.0duplexautospeedauto!interfaceFastEthernet0/1noipaddressshutdownduplexautospeedauto!iproute0.0.0.00.0.0.0172.16.1.1-