公司有多条网络宽带,使用H3C中默认的负载均衡,有一个特定IP需要走指定的宽带,以保证业务的正常运行
运营商---防火墙---核心交换机---楼层交换机---客户端
(0)
策略路由可以实现,IP地址根据你实际情况改写就行了
或者参考指导手册https://www.h3c.com/cn/d_202203/1578055_30005_0.htm
路由器策略路由+NQA
track 1 nqa entry admin test1 reaction 1
#
track 2 nqa entry admin test2 reaction 2
#
policy-based-route pbr permit node 5
if-match acl 3001
apply next-hop 10.1.13.1 track 1
#
policy-based-route neiwang permit node 10
if-match acl 3002
apply next-hop 10.1.14.1 track 2
#
nqa entry admin test1
type icmp-echo
destination ip 10.1.35.1
frequency 1000
out interface g1/0/1
reaction 1 checked-element probe-fail threshold-type consecutive 3 action-type trigger-only
#
nqa entry admin test2
type icmp-echo
destination ip 10.1.36.1
frequency 1000
out interface g1/0/2
reaction 2 checked-element probe-fail threshold-type consecutive 3 action-type trigger-only
#
nqa entry admin test3
type icmp-echo
destination ip 202.98.5.68
frequency 1000
out interface Dialer3
reaction 3 checked-element probe-fail threshold-type consecutive 3 action-type trigger-only
#
nqa schedule admin test start-time now lifetime forever
nqa schedule admin test1 start-time now lifetime forever
#
interface NULL0
#
interface GigabitEthernet1/0/1
port link-mode route
combo enable copper
ip address 12.1.1.1 255.255.255.0
nat outbound
#
interface GigabitEthernet1/0/2
port link-mode route
combo enable copper
ip address 13.1.1.1 255.255.255.0
nat outbound
#
interface GigabitEthernet1/0/3
port link-mode route
combo enable copper
ip address 192.168.2.1 255.255.255.0
ip policy-based-route neiwang
#
acl advanced 3002
rule 0 permit ip source 10.10.1.0 0.0.0.255
#
acl advanced 3003
rule 0 permit ip source 10.1.20.0 0.0.0.255
#
(1)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
我是说,比如我公司内网IP有192.168.10.*、192.168.12.*等网网段,宽带有A、B、c三条宽带,是用防火墙自带的负载均衡功能,实现宽带资源有效利用,但是192.168.12.5这个IP一定要走B宽带,不能走其他宽带,你这边配置的哪个网段走哪个宽带吧
ACL匹配192.168.12.5 这个主机,policy-based-route pbr 节点里应用的ACL,apply next-hop 后面加你要让他走的宽带
ACL匹配192.168.12.5 这个主机,policy-based-route pbr 节点里应用的ACL,apply output-interface 后面加你要让他走的宽带
不用这么麻烦吧,直接rule 写低一点不就好了