• 全部
  • 经验案例
  • 典型配置
  • 技术公告
  • FAQ
  • 漏洞说明
  • 全部
  • 全部
  • 大数据引擎
  • 知了引擎
产品线
搜索
取消
案例类型
发布者
是否解决
是否官方
时间
搜索引擎
匹配模式
高级搜索

路由器恢复出厂设置,核心交换机配置需要怎么更改

2021-09-05提问
  • 1关注
  • 1收藏,1891浏览
粉丝:0人 关注:0人

问题描述:


学校网络,出口为三条线路。之前厂家工程师配置的路由器,利用truck让不同地址段的设备通过不同出口上网。现在学校发展新增不少业务,原有的策略的负载不是很平均。现在想要把路由器恢复出厂重新调,直接利用路由器内部的动态负载均衡策略。但是路由器的配置有点复杂,有些地方不是很明白所以不敢下手。现在把两个设备的配置发上来让各位大神帮我看看,如果我把路由器恢复出厂设置了,核心交换机需要修改什么配置。



最佳答案

粉丝:48人 关注:1人

看配置是路由器是通过pbr的方式做的出口负载,同时三个出口都关联了track及默认路由的主备负载分担,建议只调整路由器中的acl,将内网流量做的平均一些,其余的配置可以不动。

暂无评论

2 个回答
真凉水泡馍 知了小白
粉丝:0人 关注:0人

文件不知道怎么回事上传不上来,我把配置发到这里,这个是路由器的配置

[Internet-Roter]dis cur
#
version 7.1.064, Release 0809P28
#
sysname Internet-Roter
#
clock timezone Beijing add 08:00:00
clock protocol ntp
#
telnet server enable
telnet server acl 2000
#
track 1 nqa entry admin pppoe0591 reaction 1
#
track 2 nqa entry admin pppoe0309 reaction 1
#
track 3 nqa entry admin zx reaction 1
#
ospf 10 router-id 10.255.255.1
default-route-advertise always
import-route direct
area 0.0.0.0
network 172.255.255.1 0.0.0.0
#
dialer-group 10 rule ip permit
#
ip unreachables enable
ip ttl-expires enable
#
lldp global enable
#
password-recovery enable
#
vlan 1
#
object-group service FW
0 service tcp destination eq 12306
#
policy-based-route pbr permit node 10
if-match acl 3010
apply next-hop 192.168.2.1 track 1
#
policy-based-route pbr permit node 20
if-match acl 3020
apply default-output-interface Dialer10 track 2
#
nqa entry admin pppoe0309
type icmp-echo
destination ip 124.114.148.193
frequency 100
reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only
source interface GigabitEthernet0/2
#
nqa entry admin pppoe0591
type icmp-echo
destination ip 192.168.2.1
frequency 100
reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only
source ip 192.168.2.2
#
nqa entry admin zx
type icmp-echo
destination ip 124.114.148.193
frequency 100
reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only
source ip 124.114.148.204
#
nqa schedule admin pppoe0309 start-time now lifetime forever
nqa schedule admin pppoe0591 start-time now lifetime forever
nqa schedule admin zx start-time now lifetime forever
#
controller Cellular0/0
#
interface Aux0
#
interface Dialer10
description PPPOE-02989630309
mtu 1492
ppp chap password cipher $c$3$Q/h/VAWedjXcpQsRvsUb2CENMldtVwxFhA==
ppp chap user 02989630309
ppp ipcp dns admit-any
ppp ipcp dns request
ppp pap local-user 02989630309 password cipher $c$3$UXyswfQHWA0i+m9IgQlCInpgBoKoEv14bA==
dialer bundle enable
dialer-group 10
dialer timer idle 0
dialer timer autodial 10
ip address ppp-negotiate
tcp mss 1200
nat outbound 3000
#
interface NULL0
#
interface GigabitEthernet0/0
port link-mode route
description PPPOE-02989630591
ip address 192.168.2.2 255.255.255.0
nat outbound 3000
#
interface GigabitEthernet0/1
port link-mode route
description DianXin-ZhuanXin
ip address 113.200.75.79 255.255.255.128
nat outbound 3000
nat server protocol tcp global current-interface 10000 inside 192.168.5.2 88
#
interface GigabitEthernet0/2
port link-mode route
description PPPOE-02989630309
pppoe-client dial-bundle-number 10
#
interface GigabitEthernet0/3
port link-mode route
ip address 172.255.255.1 255.255.255.252
ospf network-type p2p
ip policy-based-route pbr
#
interface GigabitEthernet0/27
port link-mode route
#
interface GigabitEthernet0/4
port link-mode bridge
#
interface GigabitEthernet0/5
port link-mode bridge
#
interface GigabitEthernet0/6
port link-mode bridge
#
interface GigabitEthernet0/7
port link-mode bridge
#
interface GigabitEthernet0/8
port link-mode bridge
#
interface GigabitEthernet0/9
port link-mode bridge
#
interface GigabitEthernet0/10
port link-mode bridge
#
interface GigabitEthernet0/11
port link-mode bridge
#
interface GigabitEthernet0/12
port link-mode bridge
#
interface GigabitEthernet0/13
port link-mode bridge
#
interface GigabitEthernet0/14
port link-mode bridge
#
interface GigabitEthernet0/15
port link-mode bridge
#
interface GigabitEthernet0/16
port link-mode bridge
#
interface GigabitEthernet0/17
port link-mode bridge
#
interface GigabitEthernet0/18
port link-mode bridge
#
interface GigabitEthernet0/19
port link-mode bridge
#
interface GigabitEthernet0/20
port link-mode bridge
#
interface GigabitEthernet0/21
port link-mode bridge
#
interface GigabitEthernet0/22
port link-mode bridge
#
interface GigabitEthernet0/23
port link-mode bridge
#
interface GigabitEthernet0/24
port link-mode bridge
#
interface GigabitEthernet0/25
port link-mode bridge
#
interface GigabitEthernet0/26
port link-mode bridge
#
object-policy ip Local-Local
rule 0 pass counting
#
object-policy ip Local-Trust
rule 0 pass counting
#
object-policy ip Local-Untrust
rule 0 pass counting
#
object-policy ip Trust-Local
rule 0 pass counting
#
object-policy ip Trust-Trust
rule 0 pass counting
#
object-policy ip Trust-Untrust
rule 0 pass counting
#
object-policy ip Untrust-Local
rule 1 pass service FW counting
#
security-zone name Local
#
security-zone name Trust
import interface GigabitEthernet0/3
#
security-zone name DMZ
#
security-zone name Untrust
import interface Dialer10
import interface GigabitEthernet0/0
import interface GigabitEthernet0/1
import interface GigabitEthernet0/2
#
security-zone name Management
#
zone-pair security source Local destination Local
object-policy apply ip Local-Local
#
zone-pair security source Local destination Trust
object-policy apply ip Local-Trust
#
zone-pair security source Local destination Untrust
object-policy apply ip Local-Untrust
#
zone-pair security source Trust destination Local
object-policy apply ip Trust-Local
#
zone-pair security source Trust destination Trust
object-policy apply ip Trust-Trust
#
zone-pair security source Trust destination Untrust
object-policy apply ip Trust-Untrust
#
zone-pair security source Untrust destination Local
object-policy apply ip Untrust-Local
#
scheduler logfile size 16
#
line class aux
user-role network-admin
#
line class tty
user-role network-operator
#
line class vty
user-role network-operator
#
line aux 0
user-role network-admin
#
line vty 0 63
authentication-mode scheme
user-role network-admin
user-role network-operator
#
ip route-static 0.0.0.0 0 192.168.2.1 preference 100
ip route-static 0.0.0.0 0 Dialer10 preference 150
ip route-static 0.0.0.0 0 113.200.75.79 track 3
#
ssh server enable
ssh server acl 2000
ssh server port 12306
#
ntp-service enable
ntp-service unicast-server 114.118.7.161
#
acl basic 2000
#
acl advanced 3000
rule 0 permit ip
#
acl advanced 3010
description PPPOE-02989630591
rule 0 permit ip source 172.16.15.0 0.0.0.255
rule 5 permit ip source 172.16.10.0 0.0.1.255
#
acl advanced 3020
description PPPOE-02989630309
rule 0 permit ip source 172.16.25.0 0.0.0.255
rule 5 permit ip source 172.16.20.0 0.0.1.255
#
undo password-control aging enable
undo password-control length enable
undo password-control composition enable
undo password-control history enable
password-control length 6
password-control login-attempt 3 exceed lock-time 2
password-control update-interval 0
password-control login idle-time 0
undo password-control complexity user-name check
undo password-control change-password first-login enable
#
domain system
#
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name level-1
description Predefined level-1 role
#
role name level-2
description Predefined level-2 role
#
role name level-3
description Predefined level-3 role
#
role name level-4
description Predefined level-4 role
#
role name level-5
description Predefined level-5 role
#
role name level-6
description Predefined level-6 role
#
role name level-7
description Predefined level-7 role
#
role name level-8
description Predefined level-8 role
#
role name level-9
description Predefined level-9 role
#
role name level-10
description Predefined level-10 role
#
role name level-11
description Predefined level-11 role
#
role name level-12
description Predefined level-12 role
#
role name level-13
description Predefined level-13 role
#
role name level-14
description Predefined level-14 role
#
user-group system
#
local-user admin class manage
password hash $h$6$sGroRoGq4B66eR2a$YkYOT9bArmr7g0X+fp4JICfkwLcG895UXnK41IEOcQkRGcvUy7u/wvQg/bYhDMtPtlxc59zAw4pR8MFPJQU28g==
service-type ftp
service-type ssh telnet terminal http https
authorization-attribute user-role level-15
authorization-attribute user-role network-admin
authorization-attribute user-role network-operator
#
local-user administrator class manage
password hash $h$6$WfKzihwapC8ahsPt$9IwBomC/sTuTsnEfep+tfFn9ExXs0k2XdtWD6uB9BCAVl1BDP0dKJ/sKbYHYuVyxn2XqI9IFd1SueW5WZ652gQ==
service-type ssh telnet terminal
authorization-attribute user-role level-15
authorization-attribute user-role network-admin
authorization-attribute user-role network-operator
#
ip http acl 2000
ip https acl 2000
ip http enable
ip https enable
#
wlan global-configuration
#
wlan ap-group default-group
vlan 1
#
return

暂无评论

ACL 四段
粉丝:0人 关注:1人

在更改前先备份下来,防止配置出错造成损失。具体内容需要参考拓扑等信息。

暂无评论

编辑答案

你正在编辑答案

如果你要对问题或其他回答进行点评或询问,请使用评论功能。

分享扩散:

提出建议

    +

亲~登录后才可以操作哦!

确定

亲~检测到您登陆的账号未在http://hclhub.h3c.com进行注册

注册后可访问此模块

跳转hclhub

你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作

举报

×

侵犯我的权益 >
对根叔社区有害的内容 >
辱骂、歧视、挑衅等(不友善)

侵犯我的权益

×

泄露了我的隐私 >
侵犯了我企业的权益 >
抄袭了我的内容 >
诽谤我 >
辱骂、歧视、挑衅等(不友善)
骚扰我

泄露了我的隐私

×

您好,当您发现根叔知了上有泄漏您隐私的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您认为哪些内容泄露了您的隐私?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)

侵犯了我企业的权益

×

您好,当您发现根叔知了上有关于您企业的造谣与诽谤、商业侵权等内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到 pub.zhiliao@h3c.com 邮箱,我们会在审核后尽快给您答复。
  • 1. 您举报的内容是什么?(请在邮件中列出您举报的内容和链接地址)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
  • 3. 是哪家企业?(营业执照,单位登记证明等证件)
  • 4. 您与该企业的关系是?(您是企业法人或被授权人,需提供企业委托授权书)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

抄袭了我的内容

×

原文链接或出处

诽谤我

×

您好,当您发现根叔知了上有诽谤您的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您举报的内容以及侵犯了您什么权益?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

对根叔社区有害的内容

×

垃圾广告信息
色情、暴力、血腥等违反法律法规的内容
政治敏感
不规范转载 >
辱骂、歧视、挑衅等(不友善)
骚扰我
诱导投票

不规范转载

×

举报说明