《双出口策略路由加nat配置 (2).doc》由会员分享，可在线阅读，更多相关《双出口策略路由加nat配置 (2).doc（4页珍藏版）》请在taowenge.com淘文阁网|工程机械CAD图纸|机械工程制图|CAD装配图下载|SolidWorks_CaTia_CAD_UG_PROE_设计图分享下载上搜索。
1、【精品文档】如有侵权，请联系网站删除，仅供学习与交流双出口策略路由加nat配置 (2).精品文档.实验实现出口双线，电信流量走电信，网通流量走网通，并且双线互相备份。电信分配给我的ip 211.64.19.2 网通分配给我的ip 202.1.1.2R2为电信PE R3为网通PE R4模拟内网PCR2与R3直接用静态或动态路由自己选，确保R2与R3直接LO网段能互访就行，用来测试（比如去电信的线路段了，走网通依然能访问 电信lo段）R1配置文件（出口网关设备）interface FastEthernet0/0 ip address 202.1.1.2 255.255.255.0 ip nat o
2、utside ip virtual-reassembly duplex auto speed autointerface FastEthernet0/1 ip address 211.64.19.2 255.255.255.0 ip nat outside ip virtual-reassembly duplex auto speed autointerface FastEthernet1/0 ip address 172.16.1.1 255.255.255.0 ip nat inside ip virtual-reassembly ip policy route-map ruijie du
3、plex auto speed autoip http serverno ip http secure-serverip nat inside source route-map isp1 interface FastEthernet0/1 overload -符合route-map isp1的走0/1接口进行地址转换ip nat inside source route-map isp2 interface FastEthernet0/0 overload -符合route-map isp2的走0/0接口进行地址转换access-list 101 permit ip any 202.100.99
4、.0 0.0.0.255 -被route-map ruijie引用匹配去电信lo段的目的地址access-list 102 deny ip any 202.100.99.0 0.0.0.255 -被route-map ruijie 引用匹配去往网通及其他lo段的目的地址access-list 102 permit ip any anyroute-map ruijie permit 10 match ip address 101 -去电信的流量 set ip default next-hop 211.64.19.1 202.1.1.1 优先走电信的线路，如果电信线路down走网通线路route-
5、map ruijie permit 20 match ip address 102 -去网通的流量 set ip default next-hop 202.1.1.1 211.64.19.1 优先走网通线路，网通线路down走电信线路route-map isp2 permit 10 match interface FastEthernet0/0 -route-map isp1 isp2 用来匹配 route-map选路以后出接口的情况，在被nat引用来选择地址转换route-map isp1 permit 10 match interface FastEthernet0/1R2配置文件（模拟电
6、信）interface Loopback0 ip address 202.100.99.1 255.255.255.255interface FastEthernet0/0 ip address 111.1.1.1 255.255.255.0 duplex auto speed autointerface FastEthernet0/1 ip address 211.64.19.1 255.255.255.0 duplex auto speed autointerface FastEthernet1/0 no ip address shutdown duplex auto speed auto
7、ip route 59.64.248.0 255.255.255.0 111.1.1.2R3配置文件（模拟网通）interface Loopback0 ip address 59.64.248.1 255.255.255.0interface FastEthernet0/0 ip address 111.1.1.2 255.255.255.0 duplex auto speed autointerface FastEthernet0/1 ip address 202.1.1.1 255.255.255.0 duplex auto speed autoip route 202.100.99.0 255.255.255.0 111.1.1.1R4配置文件interface FastEthernet0/0 ip address 172.16.1.2 255.255.255.0 duplex auto speed autointerface FastEthernet0/1 no ip address shutdown duplex auto speed autoip route 0.0.0.0 0.0.0.0 172.16.1.1