公司租用2条宽带,电信和联通,防火墙为2台F1070做堆叠,使用策略路由实现192.168.12.0网段走电信出口,192.168.13.0网段走联通出口,电信为主线路,其中一条连有问题,流量切换到另一台。
已经配置好策略路由+NQA+track,能给匹配网段进行上网。
现在问题:
1.手动down联通出口,13网段没网 ,不会切换到电信线路上。
2.手动删除掉联通的策略路由,13网段也不会走电信的默认路由。
下边的配置信息,请问这种情况怎么处理。
track 7 nqa entry admin dianxin reaction 1
#
track 8 nqa entry admin dianxintong reaction 2
#
acl advanced 3000
description DianXin-policy-based-route
rule 0 permit ip source 192.168.12.0 0.0.0.255
# acl advanced 3001
description DianXin-policy-based-route
rule 0 permit ip source 192.168.13.0 0.0.0.255
#
policy-based-route pbr-traffic permit node 1
if-match acl 3000 apply
next-hop 106.120.15.123 track 7
#
policy-based-route pbr-traffic permit node 2
if-match acl 3001
apply next-hop 219.238.205.112 track 8
#
nqa entry admin dianxin type icmp-echo
destination ip 223.5.5.5 frequency 100
history-record enable
next-hop ip 106.120.15.124
reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only
#
nqa entry admin liantong
type icmp-echo
destination ip 223.5.5.5
frequency 100
history-record enable
next-hop ip 219.238.205.113
reaction 2 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only
#
interface Reth1
description TO-DianXin
ip address 106.120.15.123 255.255.255.240
member interface GigabitEthernet1/0/6 priority 255
member interface GigabitEthernet2/0/6 priority 50
tcp mss 1024 ip last-hop hold
nat outbound 3999
#
interface Reth2
description To-DianXinTong
ip address 219.238.205.112 255.255.255.248
member interface GigabitEthernet1/0/2 priority 255
member interface GigabitEthernet2/0/2 priority 50
ip last-hop hold
nat outbound 3999
#
interface Reth3 description To-NeiWang
ip address 172.30.254.1 255.255.255.248
member interface GigabitEthernet1/0/10 priority 255
member interface GigabitEthernet2/0/10 priority 50
ip policy-based-route pbr-traffic
#
ip route-static 0.0.0.0 0 219.238.205.161 preference 90
ip route-static 0.0.0.0 0 106.120.15.145 track 7
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论