|
在做双出口NAT热备份实验时碰到一些问题,无法实现双出口NAT热备份。R1,R2,R3配置了OSPF 协议,R3是BDR,R1是DR,R2与R3之间为什么没有形成邻居?在接口正常的情况下,两个S接口都能正常工作,一但关闭S1/0接口,R1和R2都无法访问(因为R2,R3没有形成邻接,R3没有路由条目传递给R2)。关闭S1/1,R4不可以访问R1,R2,R5能正常访问R1,R2。请大家指点一二。
实验拓扑图如下:
R1配置如下:
R1#sh run
Building configuration...
Current configuration : 1703 bytes
!
upgrade fpd auto
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip cef
!
no ip domain lookup
ip domain name lab.local
!
multilink bundle-name authenticated
!
archive
log config
hidekeys
!
interface Loopback0
ip address 1.1.1.1 255.255.255.0
!
interface FastEthernet0/0
ip address 13.13.13.1 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
ip address 12.12.12.1 255.255.255.0
serial restart-delay 0
!
interface Serial1/1
no ip address
shutdown
serial restart-delay 0
router ospf 100
router-id 1.1.1.1
log-adjacency-changes
network 1.1.1.0 0.0.0.255 area 0
network 12.12.12.0 0.0.0.255 area 0
network 13.13.13.0 0.0.0.255 area 0
!
no ip http server
no ip http secure-server
!
!
!
logging alarm informational
!
control-plane
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line vty 0 4
login
!
!
webvpn cef
!
end
R2配置如下:
R2#sh run
Building configuration...
*Sep 25 13:39:37.451: %SYS-5-CONFIG_I: Configured from console by console
Current configuration : 2699 bytes
!
upgrade fpd auto
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
no aaa new-model
ip cef
!
no ip domain lookup
ip domain name lab.local
!
multilink bundle-name authenticated
!
archive
log config
hidekeys
!
interface Loopback0
ip address 2.2.2.2 255.255.255.0
!
interface FastEthernet0/0
ip address 199.10.20.254 255.255.255.0 secondary
ip address 199.10.10.254 255.255.255.0
ip nat inside
ip virtual-reassembly
ip policy route-map spoto
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
ip address 12.12.12.2 255.255.255.0
ip nat outside
ip virtual-reassembly
serial restart-delay 0
!
interface Serial1/1
ip address 23.23.23.2 255.255.255.0
ip nat outside
ip virtual-reassembly
serial restart-delay 0
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
!
router ospf 100
router-id 2.2.2.2
log-adjacency-changes
network 2.2.2.0 0.0.0.255 area 0
network 12.12.12.0 0.0.0.255 area 0
network 13.13.13.0 0.0.0.255 area 0
!
no ip http server
no ip http secure-server
!
!
ip nat inside source route-map nat1 interface Serial1/0 overload
ip nat inside source route-map nat2 interface Serial1/1 overload
ip nat inside source route-map nat3 interface Serial1/1 overload
ip nat inside source route-map nat4 interface Serial1/0 overload
!
logging alarm informational
access-list 1 permit 199.10.10.0 0.0.0.255
access-list 2 permit 199.10.20.0 0.0.0.255
!
!
!
route-map nat3 permit 10
match ip address 2
match interface Serial1/1
!
route-map nat2 permit 10
match ip address 1
!
route-map nat1 permit 10
match ip address 1
match interface Serial1/0
!
route-map nat4 permit 10
match ip address 2
!
route-map spoto permit 10
match ip address 1
match interface Serial1/0
set interface Serial1/0
!
route-map spoto permit 20
match ip address 2
match interface Serial1/1
set interface Serial1/1
!
control-plane
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line vty 0 4
login
!
!
webvpn cef
!
end
R3配置如下:
R3#sh run
Building configuration...
Current configuration : 1703 bytes
!
upgrade fpd auto
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip cef
!
no ip domain lookup
ip domain name lab.local
!
multilink bundle-name authenticated
!
archive
log config
hidekeys
!
interface Loopback0
ip address 3.3.3.3 255.255.255.0
!
interface FastEthernet0/0
ip address 13.13.13.3 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
ip address 23.23.23.3 255.255.255.0
serial restart-delay 0
!
interface Serial1/1
no ip address
shutdown
serial restart-delay 0
!
router ospf 100
router-id 3.3.3.3
log-adjacency-changes
network 3.3.3.0 0.0.0.255 area 0
network 13.13.13.0 0.0.0.255 area 0
network 23.23.23.0 0.0.0.255 area 0
!
no ip http server
no ip http secure-server
!
logging alarm informational
!
control-plane
!
gatekeeper
shutdown
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line vty 0 4
login
!
webvpn cef
!
end
R4和R5配置成PC机。
|
|