- 积分
- 881
- 鸿鹄币
- 个
- 好评度
- 点
- 精华
- 最后登录
- 1970-1-1
- 阅读权限
- 40
- 听众
- 收听
中级工程师
   
|
发表于 2012-8-15 15:24:53
|
显示全部楼层
下面的可以参考一下,拓扑和IP与你规划差不多,这是R2的配置,其中我没有使用R5,我分别在R3和R4上分别开启了环回口,即3.3.3.3和4.4.4.4,
: a: \. d3 q2 T" s: a2 hinterface Ethernet1/0. _1 F: L) b, ^+ d7 Z' _' ` v$ @
ip address 12.1.1.2 255.255.255.0
. ]8 w7 c. j8 Q ip nat inside
! C: }- \# m1 w! C: f) q half-duplex0 ~# k9 s4 B) i) Z ]6 w: O
!
: ^" o2 K/ {- N6 [interface Ethernet1/13 t' _, [/ p1 e: L' T5 [
ip address 23.1.1.2 255.255.255.0
- s7 V; J0 i4 m' D( z s+ E ip nat outside4 m3 }! w7 K0 H1 _6 Z3 l% A
half-duplex
8 W3 n6 |, o6 y6 Q( y!
$ w2 B) b, q2 Qinterface Ethernet1/26 w6 T7 w0 i0 l( e, F5 S+ d# M
ip address 24.1.1.2 255.255.255.0# V9 V; ~$ W' h d4 |" o5 u
ip nat outside+ q! H& {8 J9 O1 H8 l
half-duplex. |( D: \6 z5 Z/ l( J. r# h' ~' P
!2 `0 L$ A! t/ _ |! W+ v8 G
/ ^ ~" v7 b( g* p* s' ~+ _ip nat inside source route-map 23 interface Ethernet1/1 overload) p. r" x: b6 b" D/ S6 B! K
ip nat inside source route-map 24 interface Ethernet1/2 overload1 Z& ~ a2 V6 J8 f8 Z5 ]; B
ip http server
8 F2 n# l8 N* u P8 @no ip http secure-server; y- F4 U8 U" X8 Z0 e w
ip classless
7 j7 ]6 ^- H, r! Q6 ^" V7 F. w/ Pip route 0.0.0.0 0.0.0.0 23.1.1.3
t" f% [( w4 I3 a9 z8 h1 Eip route 0.0.0.0 0.0.0.0 24.1.1.4" c. u( k# s* q0 I
!
# ?3 s1 `. M2 S! O; A% V# g# C: Z& H4 T4 d* j: v; K/ V. _. P+ N! _# Q
access-list 123 permit ip any 23.0.0.0 0.255.255.255
3 x L5 K/ F7 h2 C& Raccess-list 123 permit ip any 3.0.0.0 0.255.255.255- c: g- y9 |9 c! E5 i$ i
access-list 124 permit ip any 24.0.0.0 0.255.255.255' @% j" n8 W( M: F$ l% J! G' d9 t
access-list 124 permit ip any 4.0.0.0 0.255.255.255
& k1 ?+ w7 e/ H% p+ W+ P* p. E!
! m* ?' U) ]7 k" P6 T% wroute-map 23 permit 10) p, ]- V, k6 Q7 g/ _
match ip address 123
4 i7 V# i1 L; k( D2 S& ^. | set ip default next-hop 23.1.1.3
1 T2 Z( h/ `. `0 Z" @! C( ]!2 U x( O5 k" l' I& I9 m8 [
route-map 24 permit 105 P7 ~9 n. m% h' K; W9 q; `( Z0 B4 L
match ip address 124
/ l* ^3 A0 l9 I set ip default next-hop 24.1.1.4) P: `" [! B: ^! Q( @
!
( Q6 Z: H. s; t/ x3 `$ b这样能符合你的要求,但是存在一个问题,即如果(假设)电信(R2-R3)的断了,那么用联通(R2-R4)的链路将访问不到电信的设备!) h4 j. j2 w( [; n5 B
' X1 x* e* g1 L$ r- U. k% U
其实我还在想链路优先的问题,即访问的电信的设备,优先电信链路。如果电信链路down了,那么走联通链路!
7 J) X; T4 ]2 u+ { |
12#
2012-8-15 15:24:53
回复(0)
收起回复
|