H3C 路由器智能选路NQA策略
本篇介绍H3C产品的NQA配置，配置NQA联动检测线路是否故障来达到智能切换线路。
NQA概念：
NQA（Network Quality Analyzer，网络质量分析）通过发送测试报文，对网络性能、网络提供的服务及服务质量进行分析，并为用户提供网络性能和服务质量的参数。利用NQA 的测试结果，用户可以及时了解网络的性能状况，针对不同的网络性能进行相应处理并对网络故障进行诊断和定位。
拓扑图：
某企业网关有电信和联通两条线路，要求上网线路优先走电信线路，如果电信线路故障时，要快速切换到联通线路，保障网络正常。
我这里采用ospf协议先将模拟公网环境搭建完毕再配置企业网络。
电信路由器配置：
[H3C]sysname DX
[DX]interface GigabitEthernet 0/1
[DX-GigabitEthernet0/1]ip address 98.98.100.1 24
[DX-GigabitEthernet0/1]interface GigabitEthernet 0/2
[DX-GigabitEthernet0/2]ip address 110.78.211.1 24
[DX-GigabitEthernet0/2]quit
[DX]ospf 1
[DX-ospf-1]area 0
[DX-ospf-1-area-0.0.0.0]network 98.98.100.1 0.0.0.0
[DX-ospf-1-area-0.0.0.0]network 110.78.211.1 0.0.0.0
[DX-ospf-1-area-0.0.0.0]quit
[DX-ospf-1]quit
联通路由器配置：
[H3C]sysname LT
[LT]interface GigabitEthernet 0/1
[LT-GigabitEthernet0/1]ip address 61.78.200.1 24
[LT-GigabitEthernet0/1]interface GigabitEthernet 0/2
[LT-GigabitEthernet0/2]ip address 44.92.6.1 24
[LT-GigabitEthernet0/2]quit
[LT]ospf 1
[LT-ospf-1]area 0
[LT-ospf-1-area-0.0.0.0]network 61.78.200.1 0.0.0.0
[LT-ospf-1-area-0.0.0.0]network 44.92.6.1 0.0.0.0
[LT-ospf-1-area-0.0.0.0]quit
[LT-ospf-1]quit
公网路由器配置：
[H3C]sysname GW
[GW]interface GigabitEthernet 0/1
[GW-GigabitEthernet0/1]ip address 110.78.211.2 24
[GW-GigabitEthernet0/1]interface GigabitEthernet 0/2
[GW-GigabitEthernet0/2]ip address 44.92.6.2 24
[GW-GigabitEthernet0/2]quit
[GW]interface LoopBack 0
[GW-LoopBack0]ip address 114.114.114.114 32
[GW-LoopBack0]quit
[GW]ospf 1
[GW-ospf-1]area 0
[GW-ospf-1-area-0.0.0.0]network 110.78.211.2 0.0.0.0
[GW-ospf-1-area-0.0.0.0]network 44.92.6.2 0.0.0.0
[GW-ospf-1-area-0.0.0.0]quit
[GW-ospf-1]import-route direct #重注入直连路由
[GW-ospf-1]quit
企业路由器配置：
[H3C]interface LoopBack 0
[H3C-LoopBack0]ip address 172.16.10.254 24
[H3C-LoopBack0]quit
[H3C]interface LoopBack 1
[H3C-LoopBack1]ip address 172.16.20.254 24
[H3C-LoopBack1]quit
[H3C]interface GigabitEthernet 0/1
[H3C-GigabitEthernet0/1]ip address 98.98.100.2 24
[H3C-GigabitEthernet0/1]interface GigabitEthernet 0/2
[H3C-GigabitEthernet0/2]ip address 61.78.200.2 24
[H3C-GigabitEthernet0/2]quit
[H3C]interface GigabitEthernet 0/1
[H3C-GigabitEthernet0/1]nat outbound #配置两个线路的easy nat
[H3C-GigabitEthernet0/1]quit
[H3C]interface GigabitEthernet 0/2
[H3C-GigabitEthernet0/2]nat outbound
[H3C-GigabitEthernet0/2]quit
#下面开始配置NQA
[H3C]nqa entry admin test
[H3C-nqa-admin-test]type icmp-echo
[H3C-nqa-admin-test-icmp-echo]destination ip 114.114.114.114 #配置测试类型，指定测试目的ip
[H3C-nqa-admin-test-icmp-echo]next-hop ip 98.98.100.1 #在交换机有多个出口时指定走哪条出口，也可以配置一条32位静态路由代替。
[H3C-nqa-admin-test-icmp-echo]probe count 5
[H3C-nqa-admin-test-icmp-echo]probe timeout 200
[H3C-nqa-admin-test-icmp-echo]frequency 1000 #一次NQA测试中探测的次数为5，探测超时200毫秒，探测时间间隔1000毫秒
[H3C-nqa-admin-test-icmp-echo]reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only #配置一个判断状态，连续失败5次触发联动
[H3C-nqa-admin-test-icmp-echo]history-record enable
[H3C-nqa-admin-test-icmp-echo]history-record number 10 #开启NQA历史保存记录，并配置一个测试组中保存的最大历史记录数为10
[H3C-nqa-admin-test-icmp-echo]quit
[H3C]nqa schedule admin test start-time now lifetime forever #启动测试
[H3C]undo nqa schedule admin test #修改NQA配置需要先关闭测试
[H3C]display nqa history admin test #NQA目前工作正常
NQA entry (admin admin, tag test) history records:
Index Response Status Time
200 3 Succeeded 2021-03-12 13:42:13.9
199 3 Succeeded 2021-03-12 13:42:13.9
198 3 Succeeded 2021-03-12 13:42:13.9
197 3 Succeeded 2021-03-12 13:42:13.9
196 3 Succeeded 2021-03-12 13:42:13.9
195 4 Succeeded 2021-03-12 13:42:13.9
194 3 Succeeded 2021-03-12 13:42:13.9
193 3 Succeeded 2021-03-12 13:42:13.9
192 4 Succeeded 2021-03-12 13:42:13.9
191 3 Succeeded 2021-03-12 13:42:13.9
[H3C]track 1 nqa entry admin test reaction 1 #配置track联动项目调用NQA
[H3C-track-1]quit
[H3C]display track all
Track ID: 1
State: Positive #Positive表示状态正常，NotReady表示无效值，Negative表示状态异常
Duration: 0 days 0 hours 0 minutes 43 seconds
Tracked object type: NQA
Notification delay: Positive 0, Negative 0 (in seconds)
Tracked object:
NQA entry: admin test
Reaction: 1
Remote IP/URL: 114.114.114.114
Local IP: --
Interface: --
[H3C]ip route-static 0.0.0.0 0 98.98.100.1 track 1 preference 40 #配置高优先级和检测线路是否正常。
[H3C]ip route-static 0.0.0.0 0 61.78.200.1 #备份线路
验证测试：
[H3C]display ip routing-table 114.114.114.114 #目前上网线路走的是电信线路。
Summary count : 1
Destination/Mask Proto Pre Cost NextHop Interface
0.0.0.0/0 Static 40 0 98.98.100.1 GE0/1
-----------------------------------------------------------------------------------------------
#通过把公网路由器的GigabitEthernet0/1手动shutdown后，发现如下路由器已经自动切换备份线路。
[H3C]%Mar 12 14:01:12:323 2021 H3C NQA/6/NQA_ENTRY_PROBE_RESULT: Reaction entry 1 of NQA entry admin-name admin operation-tag test: probe-fail.
[H3C]display track all
Track ID: 1
State: Negative
Duration: 0 days 0 hours 0 minutes 6 seconds
Tracked object type: NQA
Notification delay: Positive 0, Negative 0 (in seconds)
Tracked object:
NQA entry: admin test
Reaction: 1
Remote IP/URL: 114.114.114.114
Local IP: --
Interface: --
[H3C]display ip routing-table 114.114.114.114
Summary count : 1
Destination/Mask Proto Pre Cost NextHop Interface
0.0.0.0/0 Static 60 0 61.78.200.1 GE0/2
-----------------------------------------------------------------------------------------------
#通过把公网路由器的GigabitEthernet0/1手动undo shutdown后，稍等片刻发现如下路由器已经自动切换主线路。
[H3C]%Mar 12 14:04:56:312 2021 H3C NQA/6/NQA_ENTRY_PROBE_RESULT: Reaction entry 1 of NQA entry admin-name admin operation-tag test: probe-pass.
[H3C]display track all
Track ID: 1
State: Positive
Duration: 0 days 0 hours 0 minutes 49 seconds
Tracked object type: NQA
Notification delay: Positive 0, Negative 0 (in seconds)
Tracked object:
NQA entry: admin test
Reaction: 1
Remote IP/URL: 114.114.114.114
Local IP: --
Interface: --
[H3C]display ip routing-table 114.114.114.114
Summary count : 1
Destination/Mask Proto Pre Cost NextHop Interface
0.0.0.0/0 Static 40 0 98.98.100.1 GE0/1
4559
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
