OSPF进行网络负载
试验环境:
华为模拟器eNSP 核心交换机CE6800 出口交换机S5800
核心交换机和出口交换机规划vlan20和vlan30作为互联 规划vlan30模拟外网
核心交换机地址规划10.0.0.2/24 20.0.0.2/24
出口交换机规划地址10.0.0.1/24 20.0.0.1/24 30.0.0.1/20
pc地址 30.0.0.2/24 网关30.0.0.1/24
出口交换机配置:
出口交换机配置好后 不需要再变动
vlan batch 10 20 30
interface Vlanif10
ip address 10.0.0.1 255.255.255.0
interface Vlanif20
ip address 20.0.0.1 255.255.255.0
interface Vlanif30
ip address 30.0.0.1 255.255.255.0
interface GigabitEthernet0/0/1
port link-type access
port default vlan 10
interface GigabitEthernet0/0/2
port link-type access
port default vlan 20
interface GigabitEthernet0/0/3
port link-type access
port default vlan 30
interface LoopBack1
ip address 1.1.1.1 255.255.255.255
ospf 1 router-id 1.1.1.1
area 0.0.0.0
network 10.0.0.0 0.0.0.255
network 20.0.0.0 0.0.0.255
network 30.0.0.0 0.0.0.255
核心交换机配置:
1.将G1/0/0和G1/0/1接口转换为三层接口并配置地址及更改开销
interface GE1/0/0
undo portswitch
undo shutdown
ip address 10.0.0.2 255.255.255.0
interface GE1/0/1
undo portswitch
undo shutdown
ip address 20.0.0.2 255.255.255.0
2.配置ospf
interface LoopBack1
ip address 2.2.2.2 255.255.255.255
interface NULL0
ospf 1 router-id 2.2.2.2
area 0.0.0.0
network 10.0.0.0 0.0.0.255
network 20.0.0.0 0.0.0.255
3.更改接口的开销
interface GE1/0/0
ospf cost 50
interface GE1/0/1
ospf cost 10
根据所改开销流量会走右边
测试结果:
抓包出口交换机G0/0/3口
现在更改接口的开销来使流量走左边的线路
1.更改开销
interface GE1/0/0
undo portswitch
undo shutdown
ip address 10.0.0.2 255.255.255.0
ospf cost 5
interface GE1/0/1
undo portswitch
undo shutdown
ip address 20.0.0.2 255.255.255.0
ospf cost 10
测试结果
此时将G1/0/0接口的开销从50改为5 流量开始从左边链路走
真实网络环境下可在两条链路中分别透明部署一台防火墙或其他安全设备达到安全目的。本人在实验中发现CE6800每次配置完要重启才能让配置生效 ,不知道是版本BUG还是自己安装的问题 大家可以试。