电信网通双出口负载分担设置指导.doc

电信网通双出口负载分担设置指导这个设置是在华为的产品上面实现的，能参考这个设置在Cisco上面做一些调整就能了。 负载分担设置指导 定义监测组，分别监测电信和网通网关： 进入系统视图，创建detect-group 1，监测电信网关： systemSystem View: return to User View with Ctrl+Z.Quidway detect-group 1Quidway-detect-group-1Quidway-detect-group-1detect-list 1 ip address 13Quidway-detect-group-1quit 创建detect-group 1，监测网通网关： Quidwaydetect-group 2Quidway-detect-group-2detect-list 1 ip address 9Quidway-detect-group-2quitQuidway 注：以上以地址13最为电信网关地址，地址9为网通网关地址为例，能根据实际组网情况修改。 中国网管联盟 设置两条默认路由互为备份，优先走电信线路： Quidwayip route-static 13 preference 60 detect-group 1Quidwayip route-static 9 preference 100 detect-group 2 注：以上以地址13最为电信网关地址，地址9为网通网关地址为例，能根据实际组网情况修改。 设置静态路由和监测组关联，使访问网通流量优先走网通线路： 以下设置较多，设置过程中能用实际网通网关地址替换地址9后直接复制粘贴： ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 46 55 54 preference 60 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 中国网管联盟 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static preference 60 注：以上路由已包含大部分网通地址段，如有更新能动态添加。 经过如上三个设置步骤后，路由器便能自动区分网通流量和电信流量，使访问网通站点走网通线路，访问电信站点走电信线路。并且当网通线路出问题后所有流量都会自动转换到电信线路上，使用户能够不间断访问网络。 添加防火墙设置，增加网络的可性： 定义电信线路使用的acl 3001： DL.网管软件下载 能用实际电信网关地址替换地址12，实际内网地址网段替换 55后直接复制粘贴： acl number 3001 rule 10 deny tcp destination-port eq 445 rule 11 deny udp destination-port eq 445 rule 20 deny tcp destination-port eq 135 rule 21 deny udp destination-port eq 135 rule 30 deny tcp destination-port eq 137 rule 31 deny udp destination-port eq netbios-ns rule 40 deny tcp destination-port eq 138 rule 41 deny udp destination-port eq netbios-dgm rule 50 deny tcp destination-port eq 139 rule 51 deny udp destination-port eq netbios-ssn rule 61 deny udp destination-port eq tftp rule 70 deny tcp destination-port eq 593 rule 80 deny tcp destination-port eq 4444 rule 90 deny tcp destination-port eq 707 rule 100 deny tcp destination-port eq 1433 rule 101 deny udp destination-port eq 1433 rule 110 deny tcp destination-port eq 1434 rule 111 deny udp destination-port eq 1434 rule 120 deny tcp destination-port eq 5554 rule 130 deny tcp destination-port eq 9996 rule 141 deny udp source-port eq bootps rule 160 permit icmp icmp-type echo rule 161 permit icmp icmp-type echo-reply rule 162 permit icmp icmp-type ttl-exceeded rule 165 deny icmp rule 200 deny tcp destination-port eq www rule 202 deny tcp destination-port eq ftp rule 204 deny tcp destination-port eq 3389 rule 2000 permit ip destination 12 0 rule 2001 permit ip destination 55 rule 2002 deny ip 定义网通线路使用的acl 3002 能用实际网通网关地址替换地址9，实际内网地址网段替换 55后直接复制粘贴： acl number 3002 rule 10 deny tcp destination-port eq 445 rule 11 deny udp destination-port eq 445 rule 20 deny tcp destination-port eq 135 rule 21 deny udp destination-port eq 135 rule 30 deny tcp destination-port eq 137 rule 31 deny udp destination-port eq netbios-ns rule 40 deny tcp destination-port eq 138 rule 41 deny udp destination-port eq netbios-dgm rule 50 deny tcp destination-port eq 139 rule 51 deny udp destination-port eq netbios-ssn rule 61 deny udp destination-port eq tftp rule 70 deny tcp destination-port eq 593 rule 80 deny tcp destination-port eq 4444 rule 90 deny tcp destination-port eq 707 rule 100 deny tcp destination-port eq 1433 rule 101 deny udp destination-port eq 1433 rule 110 deny tcp destination-port eq 1434 rule 111 deny udp destination-port eq 1434 rule 120 deny tcp destination-port eq 5554 rule 130 deny tcp destination-port eq 9996 rule 141 deny udp source-port eq bootps bitsCN_com rule 160 permit icmp icmp-type echo rule 161 permit icmp icmp-type echo-reply rule 162 permit icmp icmp-type ttl-exceeded rule 165 deny icmp rule 200 deny tcp destination-port eq www rule 202 deny tcp destination-port eq ftp rule 204 deny tcp destination-port eq 3389 rule 2000 permit ip destination 4 0 rule 2001 permit ip destination