NAT接入双ISP负载均衡+SLA及内部服务器的发布

拓扑：





R7配置：

interface FastEthernet0/0

ip address 192.168.100.7 255.255.255.0

ip route 0.0.0.0 0.0.0.0 192.168.100.254

R8配置：

interface FastEthernet0/0

ip address 192.168.200.8 255.255.255.0

ip route 0.0.0.0 0.0.0.0 192.168.200.254

R6配置：

VLAN D

VLAN 100

VLAN 200

interface FastEthernet1/0

switchport mode trunk

interface FastEthernet1/1

switchport mode trunk

interface FastEthernet1/2

switchport access vlan 100

interface FastEthernet1/3

switchport access vlan 200

R1配置：

track 3 ip sla 3

!

track 4 ip sla 4

!

track 1000 ip route 59.1.1.0 255.255.255.0 reachability

!

interface FastEthernet0/0

ip address 13.1.1.1 255.255.255.0

ip nat outside

speed 100

duplex full

!

interface FastEthernet0/1

ip address 14.1.1.1 255.255.255.0

ip nat outside

speed 100

duplex full

!

interface FastEthernet1/0

no ip address

speed 100

duplex full

!

interface FastEthernet1/0.100

encapsulation dot1Q 100

ip address 192.168.100.1 255.255.255.0

ip nat inside

standby 100 ip 192.168.100.254

standby 100 priority 150

standby 100 preempt

standby 100 track 1000 decrement 80

!

interface FastEthernet1/0.200

encapsulation dot1Q 200

ip address 192.168.200.1 255.255.255.0

ip nat inside

standby 200 ip 192.168.200.254

standby 200 preempt

standby 200 track 1000 decrement 80

!

ip nat inside source route-map to_r3 interface FastEthernet0/0 overload

ip nat inside source route-map to_r4 interface FastEthernet0/1 overload

ip forward-protocol nd

!

ip route 59.1.1.0 255.255.255.0 13.1.1.3 100 track 3

ip route 59.1.1.0 255.255.255.0 14.1.1.4 200 track 4

!

ip access-list standard vlan_100

permit 192.168.100.0 0.0.0.255

ip access-list standard vlan_200

permit 192.168.200.0 0.0.0.255

!

ip sla 3

icmp-echo 13.1.1.3

frequency 30

ip sla schedule 3 life forever start-time now

ip sla 4

icmp-echo 14.1.1.4

frequency 30

ip sla schedule 4 life forever start-time now

!

route-map to_r4 permit 10

match ip address vlan_100 vlan_200

match interface FastEthernet0/1

!

route-map to_r3 permit 10

match ip address vlan_100 vlan_200

match interface FastEthernet0/0

R2配置：

track 3 ip sla 3

!

track 4 ip sla 4

!

track 1000 ip route 59.1.1.0 255.255.255.0 reachability

!

interface FastEthernet0/0

ip address 24.1.1.2 255.255.255.0

ip nat outside

speed auto

duplex auto

!

interface FastEthernet0/1

ip address 23.1.1.2 255.255.255.0

ip nat outside

speed auto

duplex auto

!

interface FastEthernet1/0

no ip address

speed 100

duplex full

!

interface FastEthernet1/0.100

encapsulation dot1Q 100

ip address 192.168.100.2 255.255.255.0

ip nat inside

standby 100 ip 192.168.100.254

standby 100 preempt

standby 100 track 1000 decrement 80

!

interface FastEthernet1/0.200

encapsulation dot1Q 200

ip address 192.168.200.2 255.255.255.0

ip nat inside

standby 200 ip 192.168.200.254

standby 200 priority 150

standby 200 preempt

standby 200 track 1000 decrement 80

!

ip nat inside source route-map to_r3 interface FastEthernet0/0 overload

ip nat inside source route-map to_r4 interface FastEthernet0/1 overload

!

ip route 59.1.1.0 255.255.255.0 23.1.1.3 200 track 3

ip route 59.1.1.0 255.255.255.0 24.1.1.4 100 track 4

!

ip access-list standard vlan_100

permit 192.168.100.0 0.0.0.255

ip access-list standard vlan_200

permit 192.168.200.0 0.0.0.255

!

ip sla 3

icmp-echo 23.1.1.3

frequency 30

ip sla schedule 3 life forever start-time now

ip sla 4

icmp-echo 24.1.1.4

frequency 30

ip sla schedule 4 life forever start-time now

!

route-map to_r4 permit 10

match ip address vlan_100 vlan_200

match interface FastEthernet0/1

!

route-map to_r3 permit 10

match ip address vlan_100 vlan_200

match interface FastEthernet0/0

R3配置：

interface FastEthernet0/0

ip address 13.1.1.3 255.255.255.0

speed 100

full-duplex

!

interface FastEthernet0/1

ip address 23.1.1.3 255.255.255.0

speed 100

full-duplex

!

interface FastEthernet1/0

ip address 35.1.1.3 255.255.255.0

speed 100

full-duplex

!

router bgp 300

no synchronization

bgp router-id 3.3.3.3

bgp log-neighbor-changes

network 13.1.1.0 mask 255.255.255.0

network 23.1.1.0 mask 255.255.255.0

neighbor 35.1.1.5 remote-as 500

no auto-summary

R4配置：

interface FastEthernet0/0

ip address 24.1.1.4 255.255.255.0

speed 100

full-duplex

!

interface FastEthernet0/1

ip address 14.1.1.4 255.255.255.0

speed 100

full-duplex

!

interface FastEthernet1/0

ip address 45.1.1.4 255.255.255.0

speed 100

full-duplex

!

router bgp 400

no synchronization

bgp router-id 4.4.4.4

bgp log-neighbor-changes

network 14.1.1.0 mask 255.255.255.0

network 24.1.1.0 mask 255.255.255.0

neighbor 45.1.1.5 remote-as 500

no auto-summary

R5配置：

interface FastEthernet0/0

ip address 35.1.1.5 255.255.255.0

speed 100

full-duplex

!

interface FastEthernet0/1

ip address 45.1.1.5 255.255.255.0

speed 100

full-duplex

!

interface FastEthernet1/0

ip address 59.1.1.5 255.255.255.0

duplex auto

speed auto

!

router bgp 500

no synchronization

bgp router-id 5.5.5.5

bgp log-neighbor-changes

network 59.1.1.0 mask 255.255.255.0

neighbor 35.1.1.3 remote-as 300

neighbor 45.1.1.4 remote-as 400

no auto-summary

R9配置：

interface FastEthernet0/0

ip address 59.1.1.9 255.255.255.0

duplex auto

speed auto

!

ip route 0.0.0.0 0.0.0.0 59.1.1.5

验证：

























连通性：









如果服务器是内部的那么R9的配置可以改变为（内部不可路由192.168.100.9对外的可路由地址是59.1.1.100 ，内部不可路由192.168.200.9对外的可路由地址是59.1.1.200 ）