AR1200使用策略路由配置雙wan(isp)接入

 

AR1200配置如下：

#

acl number 3000           用于NAT

 rule 10 permit ip

#

acl number 3001             用于NAT

 rule 10 permit ip

#

acl number 3002                       （策略）定義基于端口的acl

 rule 10 permit ip source 192.168.10.0 0.0.0.255

#

traffic classifier c1              （策略） 定義流量配置

if-match acl 3002

#

traffic behavior b1               （策略）定義流量動(dòng)作

redirect ip-nexthop 2.2.2.1      移動(dòng)的網(wǎng)關(guān)地址

#

traffic policy p1               （策略）組成流量策略

classifier c1 behavior b1

#

interface Ethernet0/0/0               與S5700互聯(lián)的IP地址

 ip address 192.168.30.2 255.255.255.0  配置內(nèi)網(wǎng)與S5700互聯(lián)IP地址

traffic-policy p1 inbound       （策略）應(yīng)用流量策略，如果IP-nexthop地址不可達(dá)，策略路由將失效

#

interface GigabitEthernet0/0/0

 ip address 1.1.1.50 255.255.255.0　　模擬電信IP地址

 nat outbound 3000             做Nat轉(zhuǎn)換

#

interface GigabitEthernet0/0/1

 ip address 2.2.2.10 255.255.255.0    模擬移動(dòng)IP地址

 nat outbound 3001

#

ip route-static 0.0.0.0 0.0.0.0 1.1.1.1   默認(rèn)路由指向電信的網(wǎng)關(guān)地址

ip route-static 0.0.0.0 0.0.0.0 2.2.2.1 preference 150

       如果電信斷了，會(huì)切到移動(dòng)

ip route-static 192.168.10.0 255.255.255.0 192.168.30.1

 指向S5700的明細(xì)路由

ip route-static 192.168.20.0 255.255.255.0 192.168.30.1

指向S5700的明細(xì)路由

 

#

S5700配置示例如下：

#

ip route-static 0.0.0.0 0.0.0.0 192.168.30.2   配置將所有流量轉(zhuǎn)給路由器

#

interface Vlanif10                        vlan 10下接PC

 ip address 192.168.10.1 255.255.255.0   配置vlan10的網(wǎng)關(guān)地址

 dhcp select interface                     配置接于接口的dhcp

 dhcp server dns-list 8.8.8.8            配置dns

#

interface Vlanif20                          vlan20是會(huì)下掛PC

 ip address 192.168.20.1 255.255.255.0

#

interface Vlanif30                            vlan30作為與路由器互聯(lián)的vlan

 ip address 192.168.30.1 255.255.255.0     與路由器互聯(lián)的Ip地址

#

interface GigabitEthernet0/0/1          配置與路由器互聯(lián)的IP接口

 port link-type access

 port default vlan 30