双出口策略路由加nat配置.docVIP

实验实现出口双线，电信流量走电信，网通流量走网通，并且双线互相备份。。 电信分配给我的ip 网通分配给我的ip R2为电信PE R3为网通PE R4模拟内网PC R2与R3直接用静态或动态路由自己选，确保R2与R3直接LO网段能互访就行，用来测试（比如去电信的线路段了，走网通依然能访问 电信lo段） R1配置文件（出口网关设备） interface FastEthernet0/0 ip address ip nat outside ip virtual-reassembly duplex auto speed auto ! interface FastEthernet0/1 ip address ip nat outside ip virtual-reassembly duplex auto speed auto ! interface FastEthernet1/0 ip address ip nat inside ip virtual-reassembly ip policy route-map ruijie duplex auto speed auto ! ! ! ip http server no ip http secure-server ip nat inside source route-map isp1 interface FastEthernet0/1 overload --符合route-map isp1的走0/1接口进行地址转换 ip nat inside source route-map isp2 interface FastEthernet0/0 overload --符合route-map isp2的走0/0接口进行地址转换 ! access-list 101 permit ip any 55 ----被route-map ruijie引用匹配去电信lo段的目的地址 access-list 102 deny ip any 55 ----------被route-map ruijie 引用匹配去往网通及其他lo段的目的地址 access-list 102 permit ip any any ! ! route-map ruijie permit 10 match ip address 101 ----去电信的流量 set ip default next-hop 优先走电信的线路，如果电信线路down走网通线路 ! route-map ruijie permit 20 match ip address 102 ----去网通的流量 set ip default next-hop 优先走网通线路，网通线路down走电信线路 ! route-map isp2 permit 10 match interface FastEthernet0/0 -------route-map isp1 isp2 用来匹配 route-map选路以后出接口的情况，在被nat引用来选择地址转换 ! route-map isp1 permit 10 match interface FastEthernet0/1 R2配置文件（模拟电信） interface Loopback0 ip address 55 ! interface FastEthernet0/0 ip address duplex auto speed auto ! interface FastEthernet0/1 ip address duplex auto speed auto ! interface FastEthernet1/0 no ip address shutdown duplex auto speed auto ! ip route R3配置文件（模拟网通） ! interface Loopback0 ip address ! interface FastEthernet0/0 ip address duplex auto speed auto ! interface FastEthernet0/1 ip address duplex auto speed auto ! ip route R4配置文件 interface