学校网络,出口为三条线路。之前厂家工程师配置的路由器,利用truck让不同地址段的设备通过不同出口上网。现在学校发展新增不少业务,原有的策略的负载不是很平均。现在想要把路由器恢复出厂重新调,直接利用路由器内部的动态负载均衡策略。但是路由器的配置有点复杂,有些地方不是很明白所以不敢下手。现在把两个设备的配置发上来让各位大神帮我看看,如果我把路由器恢复出厂设置了,核心交换机需要修改什么配置。
(0)
最佳答案
看配置是路由器是通过pbr的方式做的出口负载,同时三个出口都关联了track及默认路由的主备负载分担,建议只调整路由器中的acl,将内网流量做的平均一些,其余的配置可以不动。
(0)
文件不知道怎么回事上传不上来,我把配置发到这里,这个是路由器的配置
[Internet-Roter]dis cur
#
version 7.1.064, Release 0809P28
#
sysname Internet-Roter
#
clock timezone Beijing add 08:00:00
clock protocol ntp
#
telnet server enable
telnet server acl 2000
#
track 1 nqa entry admin pppoe0591 reaction 1
#
track 2 nqa entry admin pppoe0309 reaction 1
#
track 3 nqa entry admin zx reaction 1
#
ospf 10 router-id 10.255.255.1
default-route-advertise always
import-route direct
area 0.0.0.0
network 172.255.255.1 0.0.0.0
#
dialer-group 10 rule ip permit
#
ip unreachables enable
ip ttl-expires enable
#
lldp global enable
#
password-recovery enable
#
vlan 1
#
object-group service FW
0 service tcp destination eq 12306
#
policy-based-route pbr permit node 10
if-match acl 3010
apply next-hop 192.168.2.1 track 1
#
policy-based-route pbr permit node 20
if-match acl 3020
apply default-output-interface Dialer10 track 2
#
nqa entry admin pppoe0309
type icmp-echo
destination ip 124.114.148.193
frequency 100
reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only
source interface GigabitEthernet0/2
#
nqa entry admin pppoe0591
type icmp-echo
destination ip 192.168.2.1
frequency 100
reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only
source ip 192.168.2.2
#
nqa entry admin zx
type icmp-echo
destination ip 124.114.148.193
frequency 100
reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only
source ip 124.114.148.204
#
nqa schedule admin pppoe0309 start-time now lifetime forever
nqa schedule admin pppoe0591 start-time now lifetime forever
nqa schedule admin zx start-time now lifetime forever
#
controller Cellular0/0
#
interface Aux0
#
interface Dialer10
description PPPOE-02989630309
mtu 1492
ppp chap password cipher $c$3$Q/h/VAWedjXcpQsRvsUb2CENMldtVwxFhA==
ppp chap user 02989630309
ppp ipcp dns admit-any
ppp ipcp dns request
ppp pap local-user 02989630309 password cipher $c$3$UXyswfQHWA0i+m9IgQlCInpgBoKoEv14bA==
dialer bundle enable
dialer-group 10
dialer timer idle 0
dialer timer autodial 10
ip address ppp-negotiate
tcp mss 1200
nat outbound 3000
#
interface NULL0
#
interface GigabitEthernet0/0
port link-mode route
description PPPOE-02989630591
ip address 192.168.2.2 255.255.255.0
nat outbound 3000
#
interface GigabitEthernet0/1
port link-mode route
description DianXin-ZhuanXin
ip address 113.200.75.79 255.255.255.128
nat outbound 3000
nat server protocol tcp global current-interface 10000 inside 192.168.5.2 88
#
interface GigabitEthernet0/2
port link-mode route
description PPPOE-02989630309
pppoe-client dial-bundle-number 10
#
interface GigabitEthernet0/3
port link-mode route
ip address 172.255.255.1 255.255.255.252
ospf network-type p2p
ip policy-based-route pbr
#
interface GigabitEthernet0/27
port link-mode route
#
interface GigabitEthernet0/4
port link-mode bridge
#
interface GigabitEthernet0/5
port link-mode bridge
#
interface GigabitEthernet0/6
port link-mode bridge
#
interface GigabitEthernet0/7
port link-mode bridge
#
interface GigabitEthernet0/8
port link-mode bridge
#
interface GigabitEthernet0/9
port link-mode bridge
#
interface GigabitEthernet0/10
port link-mode bridge
#
interface GigabitEthernet0/11
port link-mode bridge
#
interface GigabitEthernet0/12
port link-mode bridge
#
interface GigabitEthernet0/13
port link-mode bridge
#
interface GigabitEthernet0/14
port link-mode bridge
#
interface GigabitEthernet0/15
port link-mode bridge
#
interface GigabitEthernet0/16
port link-mode bridge
#
interface GigabitEthernet0/17
port link-mode bridge
#
interface GigabitEthernet0/18
port link-mode bridge
#
interface GigabitEthernet0/19
port link-mode bridge
#
interface GigabitEthernet0/20
port link-mode bridge
#
interface GigabitEthernet0/21
port link-mode bridge
#
interface GigabitEthernet0/22
port link-mode bridge
#
interface GigabitEthernet0/23
port link-mode bridge
#
interface GigabitEthernet0/24
port link-mode bridge
#
interface GigabitEthernet0/25
port link-mode bridge
#
interface GigabitEthernet0/26
port link-mode bridge
#
object-policy ip Local-Local
rule 0 pass counting
#
object-policy ip Local-Trust
rule 0 pass counting
#
object-policy ip Local-Untrust
rule 0 pass counting
#
object-policy ip Trust-Local
rule 0 pass counting
#
object-policy ip Trust-Trust
rule 0 pass counting
#
object-policy ip Trust-Untrust
rule 0 pass counting
#
object-policy ip Untrust-Local
rule 1 pass service FW counting
#
security-zone name Local
#
security-zone name Trust
import interface GigabitEthernet0/3
#
security-zone name DMZ
#
security-zone name Untrust
import interface Dialer10
import interface GigabitEthernet0/0
import interface GigabitEthernet0/1
import interface GigabitEthernet0/2
#
security-zone name Management
#
zone-pair security source Local destination Local
object-policy apply ip Local-Local
#
zone-pair security source Local destination Trust
object-policy apply ip Local-Trust
#
zone-pair security source Local destination Untrust
object-policy apply ip Local-Untrust
#
zone-pair security source Trust destination Local
object-policy apply ip Trust-Local
#
zone-pair security source Trust destination Trust
object-policy apply ip Trust-Trust
#
zone-pair security source Trust destination Untrust
object-policy apply ip Trust-Untrust
#
zone-pair security source Untrust destination Local
object-policy apply ip Untrust-Local
#
scheduler logfile size 16
#
line class aux
user-role network-admin
#
line class tty
user-role network-operator
#
line class vty
user-role network-operator
#
line aux 0
user-role network-admin
#
line vty 0 63
authentication-mode scheme
user-role network-admin
user-role network-operator
#
ip route-static 0.0.0.0 0 192.168.2.1 preference 100
ip route-static 0.0.0.0 0 Dialer10 preference 150
ip route-static 0.0.0.0 0 113.200.75.79 track 3
#
ssh server enable
ssh server acl 2000
ssh server port 12306
#
ntp-service enable
ntp-service unicast-server 114.118.7.161
#
acl basic 2000
#
acl advanced 3000
rule 0 permit ip
#
acl advanced 3010
description PPPOE-02989630591
rule 0 permit ip source 172.16.15.0 0.0.0.255
rule 5 permit ip source 172.16.10.0 0.0.1.255
#
acl advanced 3020
description PPPOE-02989630309
rule 0 permit ip source 172.16.25.0 0.0.0.255
rule 5 permit ip source 172.16.20.0 0.0.1.255
#
undo password-control aging enable
undo password-control length enable
undo password-control composition enable
undo password-control history enable
password-control length 6
password-control login-attempt 3 exceed lock-time 2
password-control update-interval 0
password-control login idle-time 0
undo password-control complexity user-name check
undo password-control change-password first-login enable
#
domain system
#
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name level-1
description Predefined level-1 role
#
role name level-2
description Predefined level-2 role
#
role name level-3
description Predefined level-3 role
#
role name level-4
description Predefined level-4 role
#
role name level-5
description Predefined level-5 role
#
role name level-6
description Predefined level-6 role
#
role name level-7
description Predefined level-7 role
#
role name level-8
description Predefined level-8 role
#
role name level-9
description Predefined level-9 role
#
role name level-10
description Predefined level-10 role
#
role name level-11
description Predefined level-11 role
#
role name level-12
description Predefined level-12 role
#
role name level-13
description Predefined level-13 role
#
role name level-14
description Predefined level-14 role
#
user-group system
#
local-user admin class manage
password hash $h$6$sGroRoGq4B66eR2a$YkYOT9bArmr7g0X+fp4JICfkwLcG895UXnK41IEOcQkRGcvUy7u/wvQg/bYhDMtPtlxc59zAw4pR8MFPJQU28g==
service-type ftp
service-type ssh telnet terminal http https
authorization-attribute user-role level-15
authorization-attribute user-role network-admin
authorization-attribute user-role network-operator
#
local-user administrator class manage
password hash $h$6$WfKzihwapC8ahsPt$9IwBomC/sTuTsnEfep+tfFn9ExXs0k2XdtWD6uB9BCAVl1BDP0dKJ/sKbYHYuVyxn2XqI9IFd1SueW5WZ652gQ==
service-type ssh telnet terminal
authorization-attribute user-role level-15
authorization-attribute user-role network-admin
authorization-attribute user-role network-operator
#
ip http acl 2000
ip https acl 2000
ip http enable
ip https enable
#
wlan global-configuration
#
wlan ap-group default-group
vlan 1
#
return
(0)
暂无评论
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论