电信网通双出口负载分担设置指导

1、电信网通双出口负载分担设置指导这个设置是在华为的产品上面实现的， 能参考这个设置在 Cisco 上面做一些调整就能了。 负载分担设置指导定义监测组，分别监测电信和网通网关： 进入系统视图，创建 detect-group 1 ，监测电信网关：systemSystem View: return to User View with Ctrl+Z.Quidway detect-group 1Quidway-detect-group-1Quidway-detect-group-1detect-list 1 ip address 13 Quidway-detect-group-1qu

2、it创建 detect-group 1 ，监测网通网关：Quidwaydetect-group 2Quidway-detect-group-2detect-list 1 ip address 9 Quidway-detect-group-2quitQuidway注：以上以地址 13 最为电信网关地址， 地址 9 为网通网关地址为 例，能根据实际组网情况修改。 中国网管联盟设置两条默认路由互为备份，优先走电信线路：Quidwayip route-static 13 prefer

3、ence 60 detect-group 1Quidwayip route-static 9 preference 100 detect-group 2注：以上以地址 13 最为电信网关地址， 地址 9 为网通网关地址为 例，能根据实际组网情况修改。设置静态路由和监测组关联， 使访问网通流量优先走网通线路：以下设置较多， 设置过程中能用实际网通网关地址替换地址 9 后直接复制粘 贴：ip route-static 221.12.79

4、.49 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 255.2

5、52.0.0 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-

6、static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect

7、-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 pr

8、eference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 255.25

9、5.192.0 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip rout

10、e-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preferenc

11、e 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 255.255.192.

12、0 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-stat

13、ic 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-

14、group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 221.12.7

15、9.49 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 46 55 54 preference 60ip route-static 255.22

16、4.0.0 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip r

17、oute-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 p

18、reference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 202.11

19、0.192.0 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 dete

20、ct-group 2 中国网管联盟 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 255.

21、255.128.0 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group

22、 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 221

23、.12.79.49 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-

24、static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference

25、 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 255.25

26、5.192.0 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2 ip

27、 route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static

28、9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 218.24.

29、0.0 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2 ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2

30、ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 pr

31、eference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 219.142.

32、0.0 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2

33、ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 pref

34、erence 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 255.254.0

35、.0 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-stati

36、c 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60

37、detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 255.255.

38、192.0 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip rou

39、te-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preferen

40、ce 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2 ip route-static 255.248.

41、0.0 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static 9 preference 60 detect-group 2ip route-static preference 60 注：以上路由已包含大部分网通地址段， 如有更新能动态添加。经过如上三个设

42、置步骤后， 路由器便能自动区分网通流量和电信流量， 使访问网通站点 走网通线路， 访问电信站点走电信线路。 并且当网通线路出问题后所有流量都会自动转换到 电信线路上，使用户能够不间断访问网络。添加防火墙设置，增加网络的可性：定义电信线路使用的 acl 3001 ：DL.网管软件下载能用实际电信网关地址替换地址12，实际内网地址网段替换 55 后直接复制粘贴： acl number 3001 rule 10 deny tcp destination-port eq 445 rule 11 deny udp destination-port

43、 eq 445 rule 20 deny tcp destination-port eq 135 rule 21 deny udp destination-port eq 135 rule 30 deny tcp destination-port eq 137 rule 31 deny udp destination-port eq netbios-ns rule 40 deny tcp destination-port eq 138 rule 41 deny udp destination-port eq netbios-dgm rule 50 deny tcp destination-po

44、rt eq 139 rule 51 deny udp destination-port eq netbios-ssn rule 61 deny udp destination-port eq tftp rule 70 deny tcp destination-port eq 593 rule 80 deny tcp destination-port eq 4444 rule 90 deny tcp destination-port eq 707 rule 100 deny tcp destination-port eq 1433 rule 101 deny udp destination-po

45、rt eq 1433 rule 110 deny tcp destination-port eq 1434 rule 111 deny udp destination-port eq 1434 rule 120 deny tcp destination-port eq 5554 rule 130 deny tcp destination-port eq 9996 rule 141 deny udp source-port eq bootps rule 160 permit icmp icmp-type echo rule 161 permit icmp icmp-type echo-reply

46、 rule 162 permit icmp icmp-type ttl-exceeded rule 165 deny icmp rule 200 deny tcp destination-port eq www rule 202 deny tcp destination-port eq ftp rule 204 deny tcp destination-port eq 3389 rule 2000 permit ip destination 12 0rule 2001 permit ip destination 55 rule 200

47、2 deny ip定义网通线路使用的 acl 3002 能用实际网通网关地址替换地址9 ，实际内网地址网段替换55 后直接复制粘贴：acl number 3002rule 10 deny tcp destination-port eq 445rule 11 deny udp destination-port eq 445rule 20 deny tcp destination-port eq 135rule 21 deny udp destination-port eq 135rule 30 deny tcp destination-p

48、ort eq 137rule 31 deny udp destination-port eq netbios-nsrule 40 deny tcp destination-port eq 138rule 41 deny udp destination-port eq netbios-dgmrule 50 deny tcp destination-port eq 139rule 51 deny udp destination-port eq netbios-ssnrule 61 deny udp destination-port eq tftprule 70 deny tcp destinati

49、on-port eq 593rule 80 deny tcp destination-port eq 4444rule 90 deny tcp destination-port eq 707rule 100 deny tcp destination-port eq 1433rule 101 deny udp destination-port eq 1433rule 110 deny tcp destination-port eq 1434rule 111 deny udp destination-port eq 1434rule 120 deny tcp destination-port eq

50、 5554rule 130 deny tcp destination-port eq 9996rule 141 deny udp source-port eq bootps bitsCN_comrule 160 permit icmp icmp-type echorule 161 permit icmp icmp-type echo-replyrule 162 permit icmp icmp-type ttl-exceededrule 165 deny icmprule 200 deny tcp destination-port eq wwwrule 202 deny tcp destination-port eq ftprule 204 deny tcp destination-port eq 3389rule 2000 permit ip destination 4 0rule 2001 permit ip des