问

F1000-950-AI track

NQA
Track

2023-03-02提问

0关注
0收藏，614浏览

zhiliao_8ol1w1

zhiliao_8ol1w1 零段

粉丝：0人关注：0人

问题描述：

nqa+track+策略路由不成功。电信断了之后不能快速切换到移动

lan口信息 vlan 9 IP 10.223.0.2

wan电信 49.87.119.18 网关 49.87.119.17

wan移动 221.181.138.128 网关 221.181.138.1

防火墙有2个wan口一个lan口。lan口设置策略路由让内网不同的网段分别走不同的wan口。

acl advanced 3202 description 移动外网 rule 5 permit ip source 10.223.203.0 0.0.0.255 rule 10 permit ip source 172.20.1.0 0.0.0.255 rule 15 permit ip source 10.223.201.243 0 rule 20 permit ip source 10.223.201.242 0 rule 25 permit ip source 10.223.64.0 0.0.0.255 rule 30 permit ip source 10.223.202.0 0.0.0.255 rule 35 permit ip source 10.223.209.0 0.0.0.255 rule 40 permit ip source 192.168.101.0 0.0.0.255

acl advanced 3201 description 电信外网 rule 0 permit ip source 10.223.208.0 0.0.0.255 rule 1 permit ip source 10.223.213.0 0.0.0.255 rule 5 permit ip source 10.223.209.0 0.0.0.255 rule 10 permit ip source 10.223.210.0 0.0.0.255 rule 15 permit ip source 10.223.211.0 0.0.0.255 rule 20 permit ip source 10.223.0.0 0.0.0.255 rule 25 permit ip source 10.223.212.0 0.0.0.255 rule 30 permit ip source 10.223.214.0 0.0.0.255 rule 35 permit ip source 10.223.201.101 0 rule 40 permit ip source 10.223.201.103 0 rule 55 permit ip source 10.223.64.0 0.0.0.255

wan口设置nqa+track

nqa entry reth1 1 type icmp-echo destination ip 221.181.138.1 frequency 10000 next-hop ip 221.181.138.1 probe count 3 probe timeout 1000 reaction 1 checked-element probe-fail threshold-type consecutive 6 action-type trap-only #

nqa entry reth2 1 type icmp-echo destination ip 49.87.119.17 frequency 10000 next-hop ip 49.87.119.17 probe count 3 probe timeout 1000 reaction 1 checked-element probe-fail threshold-type consecutive 6 action-type trigger-only #

nqa schedule reth1 1 start-time now lifetime forever nqa schedule reth2 1 start-time now lifetime forever

track 1 interface Route-Aggregation1 physical #

track 2 interface Route-Aggregation2 physical #

组网及组网描述：

lan口信息 vlan 9 IP 10.223.0.2

wan电信 49.87.119.18 网关 49.87.119.17

wan移动 221.181.138.128 网关 221.181.138.1

防火墙有2个wan口一个lan口。lan口设置策略路由让内网不同的网段分别走不同的wan口。

4 个回答

按时间按赞数

zhiliao_Ra

zhiliao_Ra 六段

粉丝：7人关注：0人

destination ip 221.181.138.1 目标地址配置目标更远一些，比如114.114.114.114

track 1 interface Route-Aggregation1 physical 这里接口不一定是down的，如果直连这里是UP，下一跳出的问题也是检测不到的

还有配置的路由贴上来看一下

policy-based-route shangwang permit node 0 if-match acl 3100 # policy-based-route shangwang permit node 1 if-match acl 3203 apply next-hop 221.181.138.1 direct # policy-based-route shangwang permit node 5 if-match acl 3201 apply next-hop 49.87.119.17 direct # policy-based-route shangwang permit node 10 if-match acl 3202 apply next-hop 221.181.138.1 direct

zhiliao_8ol1w1 发表时间：2023-03-02