双ISP实现负载均衡手册

1、双ISP实现负载均衡详细操作手册、模拟拓扑图其中：R5, R6相当于ISP方，R1为企业对外router, R2,R3,R4为内网设备二、配置R1:int f0/0ip add 192.168.0.1 255.255.255.0no sh!ip nat inside!int f1/0ip add 111.111.111.2 255.255.255.0no sh!ip nat outside!int f1/1ip add 222.222.222.2 255.255.255.0 no ship nat outsideip route 0.0.0.0 0.0.0.0 111.111.111.1ip

2、route 0.0.0.0 0.0.0.0 222.222.222.1ip route 10.10.10.0 255.255.0.0 192.168.0.2ip route 172.168.1.0 255.255.255.0 192.168.0.2access-list 1 permit 10.10.10.0 0.0.0.255access-list 2 permit 172.168.1.0 0.0.0.255route-map isp1 permit 10match ip address 1 （条件 1）match interface f1/0 （条件 2）ip nat inside sou

3、rce route-map ispl interface f1/0 overload*匹配条件1, 2被映射为f1/0的公网地址route-map isp2 permit 10match ip address 2 （条件 3）match interface f1/1 （条件 4）ip nat inside source route-map isp2 interface f1/1 overload*匹配条件3, 4被映射为f1/1的公网地址route-map ispl2 permit 10match ip address 1ip nat inside source route-map isp12

4、 interface f1/1 overloadroute-map isp permit 10match ip address 1match interface f1/0set int f1/0不过一但f1/0的上连线路断掉，或者f1/0不小心shut down 10.10.10.0的网段将无法访问 外网,因此这里是把f1/1设置为10.10.10.0的备份nat ouside 口route-map isp2l permit 10match ip address 2ip nat inside source route-map isp21 interface f1/0 overloadroute

5、-map isp permit 20match ip address 2match interface f1/1set int f1/1int f0/0ip policy route-map isp （最后在 inside 内口进方向调用）R2:int f0/0ip add 192.168.0.2 255.255.255.0no sh!int f1/0ip add 10.10.10.1 255.255.255.0no sh!int f1/1ip add 172.168.1.1 255.255.255.0 no sh!ip route 0.0.0.0 0.0.0.0 192.168.0.1R3:

6、int f1/0ip add 10.10.10.2 255.255.255.0no sh!ip route 0.0.0.0 0.0.0.0 10.10.10.1R4:int f1/1ip add 172.168.1.2 255.255.255.0no sh !ip route 0.0.0.0 0.0.0.0 10.10.20.1R5:int f1/0ip add 111.111.111.1 255.255.255.0no sh !ip route 192.168.0.0 255.255.255.0 111.111.111.2ip route 0.0.0.0 0.0.0.0 111.111.11

7、1.2R6:int f1/1ip add 222.222.222.1 255.255.255.0 no ship route 192.168.0.0 255.255.255.0 222.222.222.2ip route 10.10.0.0 0.0.0.0 222.222.222.2三、测试nat是否能够实现双nat出口负载均衡sh ip nat translationsRl#Rl#sh ip nat translationsPro Inside global Inside localOutside localtcp 111.111.111.2:50102 10.10.10.2:50102 1

8、11.111.111.1:233tcp 222.222.222.2:19439 172.168.1.2:19439 222.222.222.1:233Outside global111.111.111.1:2222.222.222.1:2测试OK!2. nat是否能够实现备份(shut down R1 f1/0)Rl#sh ip nat translationsPro Inside global Inside localtcp 222.222.222.2:11672 10.10.10.2:11672tcp 222.222.222.2:33890 10.10.10.2:33890tcp 222.222.222.2:19439 172.168.1.2:19439tcp 111.111.111.2:53493 172.168.1.2:53493Outside local222.222.222.1:23222.222.222.1:23222.222.222.1:23222.222.222.1:23Outside global222.222.222.1:23222.222.222.1:23222.222.222.1:23222.222.222.1:23从