校园网双出口方案.doc

验证策略路由的正确性测试编号9.7.1验证策略路由的正确性测试组：策略路由测试项目：验证策略路由的正确性测试目的：验证策略路由的正确性测试组网图：测试步骤：1、 按拓扑搭建网络2、 配置各路由器互联地址3、 做NAT，默认所有流量往电信走，对图书馆的数据流量使用策略路由往教育网出口走4、 查看数据流量走向预期测试结果：测试准备：路由器、PC测试结果：测试过程和结果：步骤2：Internet : interface Ethernet0/0 ip address 192.168.1.254 255.255.255.0 full-duplexinterface Ethernet0/0.1 encapsulation dot1Q 2 ip address 192.168.2.254 255.255.255.0interface Serial1/0 ip address 202.202.202.2 255.255.255.252interface Serial1/1 ip address 200.200.200.2 255.255.255.252 serial restart-delay 0电信：Inter lo 0Ip add 2.2.2.2 255.255.255.255Int s1/0Ip add 202.202.202.1 255.255.255.252教育网：Inter lo 0 Ip add 3.3.3.3 255.255.255.255Int s1/0Ip add 200.200.200.1 255.255.255.252步骤3：默认所有流量往电信走；做NAT，对图书馆的数据流量使用策略路由往教育网出口走ip route 0.0.0.0 0.0.0.0 202.202.202.1 30 / 默认流量走电信出口ip route 0.0.0.0 0.0.0.0 200.200.200.1 40 /在电信出口故障的情况下将会使用这条路由int s1/0ip nat outsideint s1/1ip nat outsideint e0/0ip nat insideint e0/0.1 /注意子接口也要配置nat 边界ip nat insideroute-map nat-dianxin permit match interface s1/0router-map nat-jiaoyu permitmatch interface s1/1ip nat inside source route-map nat-dianxin interface s1/0 overloadip nat inside source route-map nat-jiaoyu interface s1/1 overloadaccess-list 100 permit ip 192.168.2.0 0.0.0.255 any /匹配感兴趣流量route-map jiaoyu permit 1 match ip address 100set ip next-hop 200.200.200.1 /将下一跳设置为200.200.200.1 ，然后路由器在查路由表转发，随即知道往S1/1发送步骤4：查看数据走向在图书馆网段上：192.168.2.0/24 网段 （走教育网）在网段192.168.1.0/24SW1#traceroute 2.2.2.2Type escape sequence to abort.Tracing the route to 2.2.2.2 1 192.168.1.254 76 msec 72 msec 16 msec 2 202.202.202.1 40 msec * 64 msec /走电信网SW1#ping 2.2.2.2Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 44/71/9