H3C雙線(xiàn)出口配置

H3C雙互聯(lián)網(wǎng)接入負(fù)載分擔(dān)及備份【解決方案及配置實(shí)例】

?#?version?5.20,?Alpha?1011#?sysname?H3C##???????????????acl?number?3000acl?number?3001#interface?Ethernet0/1/0?port?link-mode?route?ip?policy-based-route?internet#interface?Ethernet0/1/1?port?link-mode?route#interface?Ethernet0/1/2?port?link-mode?route#policy-based-route?internet?permit?node?1???if-match?acl?3000policy-based-route?internet?permit?node?2???if-match?acl?3001##?track?2?bfd?echo?interface?Ethernet0/1/2?配置案例1.10????????雙WAN接入路由配置

目前越來(lái)越多的企業(yè)和網(wǎng)吧采用雙WAN上行接入的方式，這種組網(wǎng)方式既可以實(shí)現(xiàn)鏈路的負(fù)載分擔(dān)又可以實(shí)現(xiàn)鏈路的動(dòng)態(tài)備份，受到用戶(hù)的普遍歡迎。下面分別介紹不同雙WAN接入方式下路由的優(yōu)化配置方法。

1.10.1????????同運(yùn)營(yíng)商雙WAN接入

1.????????雙以太網(wǎng)鏈路接入

1)????????MSR配置方法

對(duì)于MSR網(wǎng)關(guān)，可以使用策略路由和自動(dòng)偵測(cè)實(shí)現(xiàn)負(fù)載分擔(dān)和鏈路備份功能。同樣以其中一條WAN連接地址為，網(wǎng)關(guān)為，另外一條WAN連接地址為，網(wǎng)關(guān)為，使用MSR2010做為網(wǎng)關(guān)設(shè)備為例，配置方法如下：：

1、????????配置自動(dòng)偵測(cè)組，對(duì)WAN連接狀態(tài)進(jìn)行偵測(cè)：

[H3C]nqa?agent?enable

[H3C]nqa?entry?wan1?1

[H3C-nqa-wan1-1]type?icmp-echo

[H3C-nqa-wan1-1-icmp-echo]destina

[H3C-nqa-wan1-1-icmp-echo]probe?count?3

[H3C-nqa-wan1-1-icmp-echo]probe?timeout?1000

[H3C-nqa-wan1-1-icmp-echo]frequency?10000

[H3C-nqa-wan1-1-icmp-echo]reaction?1?checked-element?probe-fail?threshold-type?consecutive?6?action-type?trigger-only?

[H3C]nqa?entry?wan2?1

[H3C-nqa-wan2-1]type?icmp-echo

[H3C-nqa-wan2-1-icmp-echo]frequency?10000

[H3C-nqa-wan2-1-icmp-echo]probe?count?3

[H3C-nqa-wan2-1-icmp-echo]probe?timeout?1000

[H3C-nqa-wan2-1-icmp-echo]reaction?1?checked-element?probe-fail?threshold-type?consecutive?6?action-type?trigger-only

[H3C-nqa-wan2-1-icmp-echo]quit

[H3C]nqa?schedule?wan1?1?start-time?now?lifetime?forever

[H3C]nqa?schedule?wan2?1?start-time?now?lifetime?forever

[H3C]track?1?nqa?entry?wan1?1?reaction?1

[H3C]track?2?nqa?entry?wan2?1?reaction??1

2、????????配置ACL，對(duì)業(yè)務(wù)流量進(jìn)行劃分，以根據(jù)內(nèi)網(wǎng)主機(jī)單雙號(hào)進(jìn)行劃分為例：

[H3C]acl?number?3200

[H3C-acl-adv-3200]rule?1000?deny?ip??

[H3C-acl-adv-3200]quit

[H3C]acl?number?3201??

[H3C-acl-adv-3201]rule?0?permit?ip?source?1

[H3C-acl-adv-3201]rule?1000?deny?ip

3、????????配置策略路由，定義流量轉(zhuǎn)發(fā)規(guī)則，以雙號(hào)主機(jī)走WAN1，單號(hào)主機(jī)走WAN2為例：

[H3C]policy-based-route?wan?permit?node?1

[H3C-pbr-wan-1]if-match?acl?3200??

[H3C-pbr-wan-1]quit

[H3C]policy-based-route?wan?permit?node?2??

[H3C-pbr-wan-2]if-match?acl?3201

4、????????在LAN口啟用策略路由轉(zhuǎn)發(fā)：

[H3C]interface?Vlan-interface?1

[H3C-Vlan-interface1]ip?policy-based-route?wan??

5、????????配置默認(rèn)路由，當(dāng)任意WAN鏈路出現(xiàn)故障時(shí)，流量可以在另外一條鏈路上進(jìn)行轉(zhuǎn)發(fā)：

2)????????基于用戶(hù)負(fù)載分擔(dān)配置方法

MSR5006支持基于用戶(hù)負(fù)載分擔(dān)特性，可以根據(jù)接口帶寬將流量動(dòng)態(tài)進(jìn)行負(fù)載分擔(dān)。配合自動(dòng)偵測(cè)特性可同時(shí)實(shí)現(xiàn)鏈路備份的功能，當(dāng)一條鏈路出現(xiàn)故障時(shí)，流量自動(dòng)轉(zhuǎn)發(fā)到另外一條鏈路上。以其中一條WAN連接地址為，網(wǎng)關(guān)為，另外一條WAN連接地址為，網(wǎng)關(guān)為為例，配置方法如下：

1、自動(dòng)偵測(cè)的配置請(qǐng)參考上述說(shuō)明：

2、配置到兩個(gè)WAN接口的靜態(tài)默認(rèn)路由，并管理自動(dòng)偵測(cè)組：

3、啟用基于用戶(hù)負(fù)載分擔(dān)功能：

ip?user-based-sharing?enable

4、配置WAN口的負(fù)載分擔(dān)帶寬（兩個(gè)WAN接口負(fù)載分擔(dān)帶寬配置符合一定比例即可，不需要與實(shí)際申請(qǐng)的物理帶寬一致）：

#

interface?Ethernet0/0

port?link-mode?route

nat?outbound

load-bandwidth?1000

#??????????????????????????????????????????????

2.????????以太網(wǎng)鏈路＋PPPoE鏈路接入

1)????????MSR配置方法

與以太網(wǎng)鏈路接入方式配置相似，只有部分地方需要進(jìn)行調(diào)整。同樣以其中一條WAN連接地址為，網(wǎng)關(guān)為，另外一條WAN連接為PPPoE鏈路，使用MSR2010做為網(wǎng)關(guān)設(shè)備為例，配置方法如下：

1、????????配置自動(dòng)偵測(cè)組，對(duì)WAN連接狀態(tài)進(jìn)行偵測(cè)：

[H3C]nqa?agent?enable

[H3C]nqa?entry?wan1?1

[H3C-nqa-wan1-1]type?icmp-echo

[H3C-nqa-wan1-1-ic

[H3C-nqa-wan1-1-icmp-echo]probe?count?5

[H3C-nqa-wan1-1-icmp-echo]probe?timeout?1000

[H3C-nqa-wan1-1-icmp-echo]frequency?10000

[H3C-nqa-wan1-1-icmp-echo]reaction?1?checked-element?probe-fail?threshold-type?consecutive?6?action-type?trigger-only?

[H3C]nqa?schedule?wan1?1?start-time?now?lifetime?forever

[H3C]track?1?nqa?entry?wan1?1?reaction?1

2、????????配置ACL，對(duì)業(yè)務(wù)流量進(jìn)行劃分，以根據(jù)內(nèi)網(wǎng)主機(jī)單雙號(hào)進(jìn)行劃分為例：

[H3C]acl?number?3200

[H3C-acl-adv-3200]rule?1000?deny?ip??

[H3C-acl-adv-3200]quit

[H3C]acl?number?3201??

[H3C-acl-adv-3201]rule?1000?deny?ip

3、????????配置策略路由，定義流量轉(zhuǎn)發(fā)規(guī)則，以雙號(hào)主機(jī)走WAN1，單號(hào)主機(jī)走WAN2為例：

[H3C]policy-based-route?wan?permit?node?1

[H3C-pbr-wan-1]if-match?acl?3200??

[H3C-pbr-wan-1]quit

[H3C]policy-based-route?wan?permit?node?2??

[H3C-pbr-wan-2]if-match?acl?3201

[H3C-pbr-wan-2]apply?output-interface?dialer0???

4、????????在LAN口啟用策略路由轉(zhuǎn)發(fā)：

[H3C]interface?Vlan-interface?1

[H3C-Vlan-interface1]ip?policy-based-route?wan??

5、????????配置默認(rèn)路由，當(dāng)任意WAN鏈路出現(xiàn)故障時(shí)，流量可以在另外一條鏈路上進(jìn)行轉(zhuǎn)發(fā)：

注：由于早期版本MSR系列網(wǎng)關(guān)策略路由、快速轉(zhuǎn)發(fā)和PPPoE撥號(hào)結(jié)合存在問(wèn)題(此問(wèn)題在R1618P11和E1711后的版本解決)，當(dāng)WAN連接為PPPoE連接時(shí)，使用策略路由需要關(guān)閉vlan接口的快轉(zhuǎn)功能，如下操作：

[H3C]interface?Vlan-interface?1

[H3C-Vlan-interface1]?undo?ip?fast-forwarding

1.10.2????????電信網(wǎng)通雙WAN接入

這是目前新建網(wǎng)絡(luò)中最流行的組網(wǎng)方式，用戶(hù)分別向電信和網(wǎng)通各申請(qǐng)一條接入鏈路，配置路由使客戶(hù)機(jī)訪問(wèn)電信服務(wù)器走電信鏈路，訪問(wèn)網(wǎng)通的服務(wù)器走網(wǎng)通鏈路，可以大大提高很多網(wǎng)絡(luò)應(yīng)用的訪問(wèn)速度，同時(shí)兩條鏈路互為備份，也提高了網(wǎng)絡(luò)的可靠性。配置方法如下：

1)????????MSR配置方法

以其中電信WAN連接地址為，網(wǎng)關(guān)為，另外網(wǎng)通WAN連接地址為，網(wǎng)關(guān)為為例，配置方法如下：

1、????????配置自動(dòng)偵測(cè)組，對(duì)WAN連接狀態(tài)進(jìn)行偵測(cè)：

[H3C]nqa?agent?enable

[H3C]nqa?entry?wan1?1

[H3C-nqa-wan1-1]type?icmp-echo

[H3C-nqa-wan1-1-icmp-echo]probe?count?5

[H3C-nqa-wan1-1-icmp-echo]probe?timeout?1000

[H3C-nqa-wan1-1-icmp-echo]frequency?10000

[H3C-nqa-wan1-1-icmp-echo]reaction?1?checked-element?probe-fail?threshold-type?consecutive?6?action-type?trigger-only?

[H3C]nqa?entry?wan2?1

[H3C-nqa-wan2-1]type?icmp-echo

[H3C-nqa-wan2-1-icmp-echo]frequency?10000

[H3C-nqa-wan2-1-icmp-echo]probe?count?3

[H3C-nqa-wan2-1-icmp-echo]probe?timeout?1000

[H3C-nqa-wan2-1-icmp-echo]reaction?1?checked-element?probe-fail?threshold-type?consecutive?6?action-type?trigger-only

[H3C-nqa-wan2-1-icmp-echo]quit

[H3C]nqa?schedule?wan1?1?start-time?now?lifetime?forever

[H3C]nqa?schedule?wan2?1?st