本帖最后由 allbluelai 于 2017-12-16 15:33 编辑
1.环境：GNS3 2.1.0rc3+WIN7 64
2.拓扑：
3.配置
3.1 接口配置如图所示，路由选择eigrp，R3--R4直接的串口shutdown，暂时不用，快速以太口开启，实现负载均衡
3.2 ACL配置
R2的ACL：
R2(config)#interface FastEthernet0/0
R2(config-if)#ip address 12.1.1.2 255.255.255.0
R2(config-if)#ip access-group 100 in
R2(config-if)#exit
R2(config)#access-list 100 permit icmp any any
R2(config)#access-list 100 permit eigrp any any
R3的ACL：
R3(config)#interface FastEthernet0/1
R3(config-if)#ip address 13.1.1.3 255.255.255.0
R3(config-if)#ip access-group 100 in
R3(config-if)#exit
R3(config)#access-list 100 permit icmp any any
R3(config)#access-list 100 permit eigrp any any
4.实验
4.1 逐流负载均衡
在R1上关闭ip cef，在R2和R3上开启ACL匹配ICMP报文，在R1上ping 46.1.1.6/24，同时打开debug查看ICMP发包情况
R1(config)#access-list10 permit 46.1.1.0 0.0.0.255 R1(config)#no ip cef R1(config)#end R1#debug ip packetdetail 10 IP packet debuggingis on (detailed) for access list 10 R1#ping 46.1.1.4source 1.1.1.1 repeat 10 Type escape sequenceto abort. Sending 10, 100-byteICMP Echos to 46.1.1.4, timeout is 2 seconds: Packet sent with asource address of 1.1.1.1 !!!!!!!!!! Success rate is 100percent (10/10), round-trip min/avg/max = 36/56/84 ms R1# *Mar 1 02:14:42.779: IP: tableid=0, s=46.1.1.4(FastEthernet0/1), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:14:42.779: IP: s=46.1.1.4(FastEthernet0/1), d=1.1.1.1, len 100, rcvd 4 *Mar 1 02:14:42.779: ICMPtype=0, code=0 *Mar 1 02:14:42.843: IP: tableid=0, s=46.1.1.4(FastEthernet0/1), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:14:42.843: IP: s=46.1.1.4(FastEthernet0/1), d=1.1.1.1, len 100, rcvd 4 *Mar 1 02:14:42.843: ICMP type=0, code=0 *Mar 1 02:14:42.887: IP: tableid=0, s=46.1.1.4(FastEthernet0/1), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:14:42.887: IP: s=46.1.1.4(FastEthernet0/1), d=1.1.1.1, len 100, rcvd 4 *Mar 1 02:14:42.887: ICMP type=0, code=0 *Mar 1 02:14:42.923: IP: tableid=0, s=46.1.1.4(FastEthernet0/1), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:14:42.923: IP: s=46.1.1.4(FastEthernet0/1), d=1.1.1.1, len 100, rcvd 4 *Mar 1 02:14:42.923: ICMP type=0, code=0 *Mar 1 02:14:42.987: IP: tableid=0, s=46.1.1.4(FastEthernet0/1), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:14:42.987: IP: s=46.1.1.4(FastEthernet0/1), d=1.1.1.1, len 100, rcvd 4 *Mar 1 02:14:42.987: ICMP type=0, code=0 *Mar 1 02:14:43.043: IP: tableid=0, s=46.1.1.4(FastEthernet0/1), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:14:43.043: IP: s=46.1.1.4(FastEthernet0/1), d=1.1.1.1, len 100, rcvd 4 *Mar 1 02:14:43.043: ICMP type=0, code=0 *Mar 1 02:14:43.087: IP: tableid=0, s=46.1.1.4(FastEthernet0/1), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:14:43.087: IP: s=46.1.1.4(FastEthernet0/1), d=1.1.1.1, len 100, rcvd 4 *Mar 1 02:14:43.087: ICMP type=0, code=0 *Mar 1 02:14:43.171: IP: tableid=0, s=46.1.1.4(FastEthernet0/1), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:14:43.171: IP: s=46.1.1.4(FastEthernet0/1), d=1.1.1.1, len 100, rcvd 4 *Mar 1 02:14:43.171: ICMP type=0, code=0 *Mar 1 02:14:43.215: IP: tableid=0, s=46.1.1.4(FastEthernet0/1), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:14:43.215: IP: s=46.1.1.4(FastEthernet0/1), d=1.1.1.1, len 100, rcvd 4 *Mar 1 02:14:43.215: ICMP type=0, code=0 *Mar 1 02:14:43.279: IP: tableid=0, s=46.1.1.4(FastEthernet0/1), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:14:43.279: IP: s=46.1.1.4(FastEthernet0/1), d=1.1.1.1, len 100, rcvd 4 *Mar 1 02:14:43.279: ICMP type=0, code=0 查看R2和R3上的匹配情况： R2# show ip access-lists Extended IP accesslist 100 10 permit icmp any any (5 matches) 20 permit eigrp any any (9 matches) R3# show ip access-lists Extended IP accesslist 100 10 permit icmp any any (5 matches) 20 permit eigrp any any (9 matches) 问题1：R2和R3均匹配了5条ICMP报文，说明已经实现逐包的负载均衡，那么，debug信息中的红色字体的出接口为什么没有变换，理论上应该是FastEthernet0/0和FastEthernet0/1交替的把？ 4.2 逐流的负载均衡 在R1上开启ip cef，并在R1上ping 46.1.1.6/24、46.1.1.4/24、4.4.4.4三条不同的目的地 R1#ping 46.1.1.6 source 1.1.1.1
Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 46.1.1.6, timeout is 2 seconds: Packet sent with a source address of 1.1.1.1 !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 64/84/124 ms R1# *Mar 1 02:29:21.655: IP: tableid=0, s=46.1.1.6 (FastEthernet0/0), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:29:21.655: IP: s=46.1.1.6 (FastEthernet0/0), d=1.1.1.1, len 100, rcvd 4 *Mar 1 02:29:21.655: ICMP type=0, code=0 *Mar 1 02:29:21.719: IP: tableid=0, s=46.1.1.6 (FastEthernet0/0), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:29:21.719: IP: s=46.1.1.6 (FastEthernet0/0), d=1.1.1.1, len 100, rcvd 4 *Mar 1 02:29:21.719: ICMP type=0, code=0 *Mar 1 02:29:21.783: IP: tableid=0, s=46.1.1.6 (FastEthernet0/0), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:29:21.783: IP: s=46.1.1.6 (FastEthernet0/0), d=1.1.1.1, len 100, rcvd 4 R1# *Mar 1 02:29:21.783: ICMP type=0, code=0 *Mar 1 02:29:21.887: IP: tableid=0, s=46.1.1.6 (FastEthernet0/0), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:29:21.887: IP: s=46.1.1.6 (FastEthernet0/0), d=1.1.1.1, len 100, rcvd 4 *Mar 1 02:29:21.887: ICMP type=0, code=0 *Mar 1 02:29:21.951: IP: tableid=0, s=46.1.1.6 (FastEthernet0/0), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:29:21.951: IP: s=46.1.1.6 (FastEthernet0/0), d=1.1.1.1, len 100, rcvd 4 *Mar 1 02:29:21.951: ICMP type=0, code=0 R1#ping 46.1.1.4 source 1.1.1.1
Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 46.1.1.4, timeout is 2 seconds: Packet sent with a source address of 1.1.1.1 !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 60/66/80 ms R1# *Mar 1 02:29:35.859: IP: tableid=0, s=46.1.1.4 (FastEthernet0/1), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:29:35.859: IP: s=46.1.1.4 (FastEthernet0/1), d=1.1.1.1, len 100, rcvd 4 *Mar 1 02:29:35.859: ICMP type=0, code=0 *Mar 1 02:29:35.923: IP: tableid=0, s=46.1.1.4 (FastEthernet0/1), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:29:35.923: IP: s=46.1.1.4 (FastEthernet0/1), d=1.1.1.1, len 100, rcvd 4 *Mar 1 02:29:35.923: ICMP type=0, code=0 *Mar 1 02:29:35.987: IP: tableid=0, s=46.1.1.4 (FastEthernet0/1), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:29:35.987: IP: s=46.1.1.4 (FastEthernet0/1), d=1.1.1.1, len 100, rcvd 4 R1# *Mar 1 02:29:35.987: ICMP type=0, code=0 *Mar 1 02:29:36.051: IP: tableid=0, s=46.1.1.4 (FastEthernet0/1), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:29:36.051: IP: s=46.1.1.4 (FastEthernet0/1), d=1.1.1.1, len 100, rcvd 4 *Mar 1 02:29:36.051: ICMP type=0, code=0 *Mar 1 02:29:36.115: IP: tableid=0, s=46.1.1.4 (FastEthernet0/1), d=1.1.1.1 (Loopback0), routed via RIB *Mar 1 02:29:36.115: IP: s=46.1.1.4 (FastEthernet0/1), d=1.1.1.1, len 100, rcvd 4 *Mar 1 02:29:36.115: ICMP type=0, code=0 R1#ping 4.4.4.4 source 1.1.1.1
Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 4.4.4.4, timeout is 2 seconds: Packet sent with a source address of 1.1.1.1 !!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 40/52/80 ms 在R2和R3上查看ACL匹配情况： R2#show ip access-lists Extended IP access list 100 10 permit icmp any any 20 permit eigrp any any (18 matches) R2#show ip access-lists Extended IP access list 100 10 permit icmp any any 20 permit eigrp any any (24 matches) R2#show ip access-lists Extended IP access list 100 10 permit icmp any any 20 permit eigrp any any (30 matches)
R3#show ip access-lists Extended IP access list 100 10 permit icmp any any (5 matches) 20 permit eigrp any any (15 matches) R3#show ip access-lists Extended IP access list 100 10 permit icmp any any (10 matches) 20 permit eigrp any any (21 matches) R3#show ip access-lists Extended IP access list 100 10 permit icmp any any (15 matches) 20 permit eigrp any any (27 matches)
问题2：R2一次都没有匹配中，三次ping包均走的R3路径，说明去往不同目的地的流量走了相同路径，难道eigrp没有实现负载均衡吗？ 因为刚开始学习，可能还没理解透彻，还望各位前辈不吝赐教，谢谢 附上配置文件。
| 
发表于 2017-12-16 15:30:38
置顶卡
喧嚣卡
变色卡
千斤顶
楼主