转载至:华为QUIDWAY系列路由器的负载均衡配置 - 走看看
华为系列路由器的负载均衡NQA联动侦测配置案例:
需求:该局域网,IP地址(末位奇数)走联通,IP地址(末位偶数)走电信当某个运营商不可达时,自动切换。通过NQA来确定运营商是否可达。,并与流行为、静态路由联动,实现自动切换。默认路由走联通,当联通不可达切至电信(配置的路由优先级,华为交换机静态路由默认优先级为60)
配置详情:
内网核心路由器配置;
<Huawei>dis cu
[V200R003C00]
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
drop illegal-mac alarm
#
set cpu-usage threshold 80 restore 75
#
bfd
#
acl number 2000
description To-Unicom
rule 10 permit source 192.168.0.0 0.0.0.255
acl number 2001
description To-Telecom
rule 10 permit source 192.168.1.0 0.0.0.255
#
acl number 3000
description NAT
rule 10 permit ip source 192.168.0.0 0.0.1.255
#
traffic classifier DX operator and
if-match acl 2001
traffic classifier LT operator and
if-match acl 2000
#
traffic behavior DX
redirect ip-nexthop 20.1.1.1 track nqa test DX
traffic behavior LT
redirect ip-nexthop 10.1.1.1 track nqa test LT
#
traffic policy load
classifier LT behavior LT
classifier DX behavior DX
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ip address 10.1.1.2 255.255.255.252
nat outbound 3000
#
interface GigabitEthernet0/0/1
ip address 20.1.1.2 255.255.255.252
nat outbound 3000
#
interface GigabitEthernet0/0/2
ip address 10.16.0.1 255.255.255.252
traffic-policy load inbound
#
interface NULL0
#
bfd lt bind peer-ip 10.1.1.1 interface GigabitEthernet0/0/0 source-ip 10.1.1.2 o
ne-arm-echo
discriminator local 1
min-echo-rx-interval 200
commit
#
ip route-static 0.0.0.0 0.0.0.0 20.1.1.1 preference 150
ip route-static 0.0.0.0 0.0.0.0 10.1.1.1 track nqa test LT
ip route-static 192.168.0.0 255.255.254.0 10.16.0.2
ip route-static 202.106.0.30 255.255.255.255 10.1.1.1
ip route-static 219.141.140.10 255.255.255.255 20.1.1.1
#
nqa test-instance test DX
test-type icmp
destination-address ipv4 219.141.140.10
frequency 5
probe-count 2
start now
nqa test-instance test LT
test-type icmp
destination-address ipv4 202.106.0.30
frequency 5
probe-count 1
start now
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
<Huawei>
内网汇聚设备配置;
[Huawei]dis cu
#
sysname Huawei
#
vlan batch 10 100
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
drop-profile default
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http
#
interface Vlanif1
ip address 192.168.0.1 255.255.254.0
#
interface Vlanif10
ip address 10.16.0.2 255.255.255.252
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface GigabitEthernet0/0/3
port link-type access
port default vlan 10
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet0/0/5
#
interface GigabitEthernet0/0/6
#
interface GigabitEthernet0/0/7
#
interface GigabitEthernet0/0/8
#
interface GigabitEthernet0/0/9
#
interface GigabitEthernet0/0/10
#
interface GigabitEthernet0/0/11
#
interface GigabitEthernet0/0/12
#
interface GigabitEthernet0/0/13
#
interface GigabitEthernet0/0/14
#
interface GigabitEthernet0/0/15
#
interface GigabitEthernet0/0/16
#
interface GigabitEthernet0/0/17
#
interface GigabitEthernet0/0/18
#
interface GigabitEthernet0/0/19
#
interface GigabitEthernet0/0/20
#
interface GigabitEthernet0/0/21
#
interface GigabitEthernet0/0/22
#
interface GigabitEthernet0/0/23
#
interface GigabitEthernet0/0/24
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 10.16.0.1
#
user-interface con 0
user-interface vty 0 4
#
return
[Huawei]
模拟运营商配置 unicom;
<Huawei>dis cu
#
sysname Huawei
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#
local-user admin service-type http
#
firewall zone Local
priority 16
#
interface Ethernet0/0/0
#
interface Ethernet0/0/1
#
interface Serial0/0/0
link-protocol ppp
#
interface Serial0/0/1
link-protocol ppp
#
interface Serial0/0/2
link-protocol ppp
#
interface Serial0/0/3
link-protocol ppp
#
interface GigabitEthernet0/0/0
ip address 1.1.1.1 255.255.255.252
#
interface GigabitEthernet0/0/1
ip address 10.1.1.1 255.255.255.252
#
interface GigabitEthernet0/0/2
#
interface GigabitEthernet0/0/3
#
wlan
#
interface NULL0
#
interface LoopBack1
ip address 202.106.0.30 255.255.255.255
#
interface LoopBack12
ip address 202.106.0.100 255.255.255.255
#
ospf 1
import-route direct
area 0.0.0.0
network 1.1.1.0 0.0.0.3
network 202.106.0.0 0.0.0.255
#
user-interface con 0
user-interface vty 0 4
user-interface vty 16 20
#
return
<Huawei>
模拟运营商配置 telecom;
<Huawei>dis cu
#
sysname Huawei
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#
local-user admin service-type http
#
firewall zone Local
priority 16
#
interface Ethernet0/0/0
#
interface Ethernet0/0/1
#
interface Serial0/0/0
link-protocol ppp
#
interface Serial0/0/1
link-protocol ppp
#
interface Serial0/0/2
link-protocol ppp
#
interface Serial0/0/3
link-protocol ppp
#
interface GigabitEthernet0/0/0
ip address 1.1.1.2 255.255.255.252
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
ip address 20.1.1.1 255.255.255.252
#
interface GigabitEthernet0/0/3
#
wlan
#
interface NULL0
#
interface LoopBack1
ip address 219.141.140.10 255.255.255.255
#
ospf 1
import-route direct
area 0.0.0.0
network 1.1.1.0 0.0.0.3
#
nqa test-instance test 1
test-type icmp
destination-address ipv4 1.1.1.1
frequency 5
probe-count 1
start now
#
user-interface con 0
user-interface vty 0 4
user-interface vty 16 20
#
return
<Huawei>
模拟故障;修改unicom的 interface GigabitEthernet0/0/1端口配置,使其互联不可达,但链路状态依然up。
故障前路由表状态;
0.0.0.0/0 Static 60 0 RD 10.1.1.1 GigabitEthernet
0/0/0
10.1.1.0/30 Direct 0 0 D 10.1.1.2 GigabitEthernet
0/0/0
10.1.1.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/0
10.1.1.3/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/0
10.16.0.0/30 Direct 0 0 D 10.16.0.1 GigabitEthernet
0/0/2
10.16.0.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/2
10.16.0.3/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/2
20.1.1.0/30 Direct 0 0 D 20.1.1.2 GigabitEthernet
0/0/1
20.1.1.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/1
20.1.1.3/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/1
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
192.168.0.0/23 Static 60 0 RD 10.16.0.2 GigabitEthernet
0/0/2
202.106.0.30/32 Static 60 0 RD 10.1.1.1 GigabitEthernet
0/0/0
219.141.140.10/32 Static 60 0 RD 20.1.1.1 GigabitEthernet
0/0/1
255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
故障后路由表状态;
0.0.0.0/0 Static 150 0 RD 20.1.1.1 GigabitEthernet
0/0/1
10.1.1.0/30 Direct 0 0 D 10.1.1.2 GigabitEthernet
0/0/0
10.1.1.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/0
10.1.1.3/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/0
10.16.0.0/30 Direct 0 0 D 10.16.0.1 GigabitEthernet
0/0/2
10.16.0.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/2
10.16.0.3/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/2
20.1.1.0/30 Direct 0 0 D 20.1.1.2 GigabitEthernet
0/0/1
20.1.1.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/1
20.1.1.3/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/1
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
192.168.0.0/23 Static 60 0 RD 10.16.0.2 GigabitEthernet
0/0/2
202.106.0.30/32 Static 60 0 RD 10.1.1.1 GigabitEthernet
0/0/0
219.141.140.10/32 Static 60 0 RD 20.1.1.1 GigabitEthernet
0/0/1
255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
配置验证:
display ip routing-table #用于查看当前设备的路由表状态
display nqa results test-instance test LT #用于验证NQA的状态