场景描述:A地vpn设备做出口使用,B地vpn设备旁挂交换机
现实现A、B两地专线和vpn自动切换
A地:10.11.0.0/16 B地:10.24.0.0/16
配置完 nqa后测试发现中断【shutdown】B端专线接口可以自动给换到vpn且互通
测试中断【shutdown】A端专线接口可以切换到vpn但是不通,查看原因发现B端交换机vpn路由未生效,这是什么原因?
B端Nqa检测:
[H3C]ip route-static 10.11.0.0 16 10.11.2.3 track 2
[H3C]nqa entry admin aaa
[H3C-nqa-admin-aaa-icmp-echo]destination ip 192.168.100.252
[H3C-nqa-admin-aaa-icmp-echo]reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only
[H3C]nqa schedule admin aaa start-time now lifetime forever
[H3C]track 2 nqa entry admin aaa reaction 1
A端Nqa检测:
[H3C]ip route-static 10.24.0.0 16 10.24.2.3 track 2
[H3C]nqa entry admin aaa
[H3C-nqa-admin-aaa-icmp-echo]destination ip 192.168.100.251
[H3C-nqa-admin-aaa-icmp-echo]reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only
[H3C]nqa schedule admin aaa start-time now lifetime forever
[H3C]track 2 nqa entry admin aaa reaction 1
问题:
测试:中断【shutdown】B端专线接口可以自动给换到vpn,互通 中断【shutdown】A端专线接口可以切换到vpn但是不通,B端交换机vpn路由不生效,这是什么原因?
(0)
最佳答案
您好,请知:
NQA切换后不生效,以下是排查要点,请参考:
1、检查B端的设备互联配置是否可互通。
2、检查与B端局域网的路由是否可达。
3、以下是NQA的配置参考命令,可对比下:
[SW2]nqa agent enable
[SW2]nqa entry weijianing ninglihua
[SW2-nqa-weijianing-ninglihua]type icmp-echo
[SW2-nqa-weijianing-ninglihua-icmp-echo]source int GigabitEthernet 1/0/1
[SW2-nqa-weijianing-ninglihua-icmp-echo]destination ip 10.0.0.2
[SW2-nqa-weijianing-ninglihua-icmp-echo]frequency 100000
[SW2-nqa-weijianing-ninglihua-icmp-echo]probe timeout 30
[SW2-nqa-weijianing-ninglihua-icmp-echo]next-hop 10.0.0.2
[SW2-nqa-weijianing-ninglihua-icmp-echo] history-record enable
[SW2-nqa-weijianing-ninglihua-icmp-echo]history-record number 50
[SW2-nqa-weijianing-ninglihua-icmp-echo]probe count 10
[SW2-nqa-weijianing-ninglihua-icmp-echo]probe timeout 30
[SW2-nqa-weijianing-ninglihua-icmp-echo]reaction 1 checked-element probe-fail threshold-type consecutive 1 action-type trigger-only
[SW2-nqa-weijianing-ninglihua-icmp-echo]route-option bypass-route
[SW2]track 1 nqa entry weijianing ninglihua reaction 1
[SW2]nqa schedule weijianing ninglihua start-time now lifetime forever
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论