雙出口策略路由加nat配置 2

1、實驗實現(xiàn)出口雙線，電信流量走電信，網(wǎng)通流量走網(wǎng)通，并且雙線互相備份。R2為電信PE R3為網(wǎng)通PE R4模擬內(nèi)網(wǎng)PCR2與R3直接用靜態(tài)或動態(tài)路由自己選，確保R2與R3直接LO網(wǎng)段能互訪就行，用來測試（比如去電信的線路段了，走網(wǎng)通依然能訪問 電信lo段）R1配置文件（出口網(wǎng)關(guān)設(shè)備）interface FastEthernet0/0 ip nat outside ip virtual-reassembly duplex auto speed auto!interface FastEthernet0/1 ip nat outside ip virtual-reassembly duplex aut

2、o speed auto!interface FastEthernet1/0 ip nat inside ip virtual-reassembly ip policy route-map ruijie duplex auto speed auto!ip http serverno ip http secure-serverip nat inside source route-map isp1 interface FastEthernet0/1 overload -符合route-map isp1的走0/1接口進(jìn)行地址轉(zhuǎn)換ip nat inside source route-map isp2

3、interface FastEthernet0/0 overload -符合route-map isp2的走0/0接口進(jìn)行地址轉(zhuǎn)換! access-list 101 permit ip any .255 -被route-map ruijie引用匹配去電信lo段的目的地址access-list 102 deny ip any .255 -被route-map ruijie 引用匹配去往網(wǎng)通及其他lo段的目的地址access-list 102 permit ip any any!route-map ruijie permit 10 match i

4、p address 101 -去電信的流量 優(yōu)先走電信的線路，如果電信線路down走網(wǎng)通線路!route-map ruijie permit 20 match ip address 102 -去網(wǎng)通的流量 優(yōu)先走網(wǎng)通線路，網(wǎng)通線路down走電信線路! route-map isp2 permit 10 match interface FastEthernet0/0 -route-map isp1 isp2 用來匹配 route-map選路以后出接口的情況，在被nat引用來選擇地址轉(zhuǎn)換!route-map isp1 permit 10 match interface FastEthernet0/1

5、R2配置文件（模擬電信）interface Loopback0!interface FastEthernet0/0 duplex auto speed auto!interface FastEthernet0/1 duplex auto speed auto!interface FastEthernet1/0 no ip address shutdown duplex auto speed auto!R3配置文件（模擬網(wǎng)通）!interface Loopback0!interface FastEthernet0/0 duplex auto speed auto!interface FastEthernet0/1 duplex auto speed auto!R4配置文件interface FastEthernet0/0 duplex auto speed au