HC雙線出口配置

Documentserialnumber[UU89WT-UU98YT-LU8CB-UUUT-UUT108]

H3C雙互聯(lián)網(wǎng)接入負(fù)載分擔(dān)及備份【解決方案及配置實(shí)例】

n

version,AlphalOl1

#

sysnameH3C

bfdecho-source-ip

#

aclnumber3000

ruleOpermitipsource

aclnumber3001

ruleOpermitipsource

interface?EthernetO/l/O

portlink-moderoute

ipaddress

ippolicy-based-routeinternet

interface?EthernetO/l/1

port1ink-moderoute

ipaddress

interface?EthernetO/l/2

portlink-moderoute

ipaddress

n

po1icy-based-routeinternetpermitnode1

if-matchac13000

applyip-addressnext-hoptrackl

policy-based-routeinternetpermitnode2

if-matchac13001

applyip-addressnext-hoptrack2

n

iproute-statictrack1

iproute-statictrack2

[H3C-nqa-wanl-l]type?icmp-echo

[H3C-nqa-wanl-l-icmp-echo]destinationip

[H3C-nqa-wanl-l-icmp-echo]next-hop?

[H3C-nqa-wanl-l-icmp-echo]probecount3

[H3C-nqa-wanl-l-icmp-echo]probctimcout1000

[H3C-nqa-wan1-1-icmp-echo]frequency?10000

[H3C-nqa-wan1-1-icmp-echo]reactionIchecked-elementprobe-

fai1threshold-typeconsecutive6action-typetrigger-only

[H3C]nqaentrywan21

[H3C-nqa-wan2_1]type?icmp-echo

[H3C-nqa-wan2-l-icmp-echo]destinationip

[H3C-nqa-wan2-l-icmp-echo]next-hop?

[H3C-nqa-wan2-1-icmp-echo]frequency?10000

[H3C-nqa-wan2-l-icmp-echo]probecount3

[H3C-nqa-wan2-1-icmp-echo]probetimeout1000

[H3C-nqa-wan2-l-icmp-echo]reactionlchecked-elementprobe-

fai1threshold-typeconsecutive6action-typetrigger-only

[H3C-nqa-wan2-1-icmp-echo]quit

[H3C]nqaschedulewanllstart-timenowlifetimeforever

[H3C]nqaschedulewan21start-timenowlifetimeforever

[H3C]tracklnqaentrywanlIreactionl

[H3C]track2nqaentrywan2Ireactionl

2、配置ACL,對(duì)業(yè)務(wù)流量進(jìn)行劃分，以根據(jù)內(nèi)網(wǎng)主機(jī)單雙號(hào)進(jìn)行劃分為

例：

[H3C]ac1number3200

[H3C-acl-adv-3200]ruleOpermitipsource

[H3C-ac1-adv-3200]rule1OOOdenyip

[H3C-acl-adv-3200]quit

[H3C]ac1number3201

[H3C-ac1-adv-3201]ruleOpermitipsource

[H3C-acl-adv-3201]rule1OOOdenyip

3、配置策略路由，定義流量轉(zhuǎn)發(fā)規(guī)則，以雙號(hào)主機(jī)走WAN1,單號(hào)主機(jī)走

WAN2為例：

[H3C]policy-based-routewanpermitnode1

[H3C-pbr-wan-l]if-matchac13200

[H3C-pbr-wan-l]applyip-addressnext-hoptrack1

[H3C-pbr-wan-l]quit

[H3C]policy-based-routewanpermitnode2

[H3C-pbr-wan-2]if-matchac13201

[H3C-pbr-wan-2]applyip-addressnext-hoptrack2

4、在LAN□啟用策略路由轉(zhuǎn)發(fā)：

[H3C]interfaceVlan-interfacel

[H3C-Vlan-interfacel]ippolicy-based-routewan

5、配置默認(rèn)路由，當(dāng)任意WAN鏈路出現(xiàn)故障時(shí)，流量可以在另外一條鏈

路上進(jìn)行轉(zhuǎn)發(fā)：

[H3C]iproute-statictrack1preference60

[H3C]iproute-statictrack2preference100

2）

基于用戶負(fù)載分擔(dān)配置方法

MSR5006支持基于用戶負(fù)載分擔(dān)特性，可以根據(jù)接口帶寬將流量動(dòng)態(tài)進(jìn)行

負(fù)載分擔(dān)。配合自動(dòng)偵測(cè)特性可同時(shí)實(shí)現(xiàn)鏈路備份的功能，當(dāng)一條鏈路

出現(xiàn)故障時(shí)，流量自動(dòng)轉(zhuǎn)發(fā)到另外一條鏈路上。以其中一條WAN連接地

址為/24,網(wǎng)關(guān)為，另外一條WAN連接地址為/24,網(wǎng)關(guān)為為例，配置方

法如下：

1、自動(dòng)偵測(cè)的配置請(qǐng)參考上述說(shuō)明：

2、配置到兩個(gè)WAN接口的靜態(tài)默認(rèn)路由，并管理自動(dòng)偵測(cè)組：

3、啟用基于用戶負(fù)載分擔(dān)功能：

ipuser-based-sharingenab1e

ipuser-based-sharingroute

4、配置WAN□的負(fù)載分擔(dān)帶寬（兩個(gè)WAN接口負(fù)載分擔(dān)帶寬配置符合一

定比例即可，不需要與實(shí)際申請(qǐng)的物理帶寬一致）：

#

interface?EthernetO/0

portlink-moderoute

nat?outbound

ipaddress

load-bandwidth?1000

n

2.

以太網(wǎng)鏈路+PPPoE鏈路接入

1)

MSR配置方法

與以太網(wǎng)鏈路接入方式配置相似，只有部分地方需要進(jìn)行調(diào)整。同樣以

其中一條WAN連接地址為/24,網(wǎng)關(guān)為，另外一條WAN連接為PPPoE鏈

路，使用MSR2010做為網(wǎng)關(guān)設(shè)備為例，配置方法如下：

1、配置自動(dòng)偵測(cè)組，對(duì)WAN連接狀態(tài)進(jìn)行偵測(cè)：

[H3C]nqaagentenable

[H3C]nqaentr^^wanl1

[H3C-nqa-wan1-1]type?icmp-echo

[H3C-nqa-wanl-l-icmp-echo]destinationip

[H3C-nqa-wanl-l-icmp-echo]next-hop?

[H3C-nqa-wan1-1-icmp-echo]probecount5

[H3C-nqa-wan1-1-icmp-echo]probetimeoutl000

[H3C-nqa_wan1T-icmp-echo]frequcncy?10000

[H3C-nqa-wan1-1-icmp-echo]reaction1checked-elementprobe-

failthreshold-typeconsecutive6action-typetrigger-only

[113C]nqaschedu1ewan1Istart-timenowlifetimeforever

[H3C]track1nqaentrywan1Ireaction1

2、配置ACL,對(duì)業(yè)務(wù)流量進(jìn)行劃分，以根據(jù)內(nèi)網(wǎng)主機(jī)單雙號(hào)進(jìn)行劃分為

例：

[H3C]aclnumber3200

[H3C-ac1-adv-3200]ruleOpermitipsource

[H3C-ac1-adv-3200]rule1OOOdenyip

[H3C-acl-adv-3200]quit

[H3C]ac1number3201

[H3C-ac1-adv-3201]ruleOpermitipsource

[H3C-ac1-adv-3201]rulelOOOdenyip

3、配置策略路由，定義流量轉(zhuǎn)發(fā)規(guī)則，以雙號(hào)主機(jī)走WAN1,單號(hào)主機(jī)走

WAN2為例：

[H3C]policy-based-routewanpermitnodel

[H3C-pbr-wan-1]if-matchac13200

[H3C-pbr-wan-1]applyip-addressnext-hoptrack1

[H3C-pbr-wan-l]quit

[H3C]policy-based-routewanpermitnode2

[H3C-pbr-wan-2]if-matchac13201

[H3C-pbr-wan-2]applycutput-intei'facedialerO

4、在LAN□啟用策略路由轉(zhuǎn)發(fā)：

[H3C]interfaceVlan-interfacel

[H3C-Vlan-interfacel]ippolicy-based-routewan

5、配置默認(rèn)路由，當(dāng)任意WAN鏈路出現(xiàn)故障時(shí)，流量可以在另外一條鏈

路上進(jìn)行轉(zhuǎn)發(fā)：

[H3C]iproute-statictracklpreference60

[H3C]iproutc-staticdialcrOprcfcrencclOO

注：由于早期版本MSR系列網(wǎng)關(guān)策略路由、快速轉(zhuǎn)發(fā)和PPPoE撥號(hào)結(jié)合

存在問(wèn)題（此問(wèn)題在RI618Pli和E1711后的版本解決），當(dāng)WAN連接為

PPPoE連接時(shí)，使用策略路由需要關(guān)閉vlan接口的快轉(zhuǎn)功能，如下操

作：

[H3C]interfaceVlan-interface1

[H3C-Vlan-interfacel]undoipfast-forwarding

電信網(wǎng)通雙WAN接入

這是目前新建網(wǎng)絡(luò)中最流行的組網(wǎng)方式，用戶分別向電信和網(wǎng)通各申請(qǐng)

一條接入鏈路，配置路由使客戶機(jī)訪問(wèn)電信服務(wù)器走電信鏈路，訪問(wèn)網(wǎng)

通的服務(wù)器走網(wǎng)通鏈路，可以大大提高很多網(wǎng)絡(luò)應(yīng)用的訪問(wèn)速度，同時(shí)

兩條鏈路互為備份，也提高了網(wǎng)絡(luò)的可靠性。配置方法如下：

1）

MSR配置方法

以其中電信WAN連接地址為/24,網(wǎng)關(guān)為，另外網(wǎng)逋WAN連接地址為

/24,網(wǎng)關(guān)為為例，配置方法如下：

1、配置自動(dòng)偵測(cè)組，對(duì)WAN連接狀態(tài)進(jìn)行偵測(cè):

[1I3C]nqaagentenable

[H3C]nqaentr^^wanl1

[H3C-nqa-wan1-1]type?icmp-echo

[H3C-nqa-wan1-1-icmp-echo]destinationip

[H3C-nqa-wanl-l-icmp-ccho]next-hop?

[H3C-nqa-wan1-1-icmp-echo]probecount5

[H3C-nqa-wanl-l-icmp-echo]probetimeout1000

[H3C-nqa-wan1-1-icmp-echo]frequency?10000

[H3C-nqa-wan1-1-icmp-echo]reaction1checked-elementprobe-

failthreshold-typeconsecutive6action-typetrigger-only

[H3C]nqaentrywan21

[H3C-nqa-wan2-1]type?icmp-echo

[H3C-nqa-wan2-l-icmp-echo]destinationip

[H3C-nqa-wan2-1-icmp-echo]next-hop?

[H3C-nqa-wan2-1-icmp-echo]frequency?10000

[H3C-nqa-wan2-l-icmp-echo]p