双出口互备份方案(PBR技术).docVIP

双出口，负载平衡，互备份方案（需NAT转换） 说明：出口下分别接不同VLAN 4个VLAN分别通过两个trunk口连接到ISP。为了节约地址，ISP处使用了桥接（BVI）技术。 要求：vlan2和vlan3默认走tele出口，vlan4和vlan5默认走cnc出口。Tele出口中断后vlan2和vlan3的用户能够自动切换到cnc出口。反之亦然。 使用技术：NAT PBR 注意：在做ip nat inside souce route-map xxx时根据顺序匹配原则将备份出口的nat写在默认出口的nat前面。这样在默认出口正常的情况下，nat转换将使用默认出口的IP。当默认出口中断的情况下能实现自动nat转换切换。 拓扑如下： 配置如下： ISP(router) Building configuration... Current configuration : 2546 bytes ! version 12.3 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname isp ! boot-start-marker boot-end-marker ! no aaa new-model ip subnet-zero ! ip ssh break-string ! no voice hpi capture buffer no voice hpi capture destination ! bridge irb ! interface FastEthernet0/0 no ip address duplex auto speed auto ! interface FastEthernet0/0.2 encapsulation dot1Q 2 no cdp enable bridge-group 1 ! interface FastEthernet0/0.3 encapsulation dot1Q 3 no cdp enable bridge-group 1 ! interface FastEthernet0/1 no ip address duplex auto speed auto ! interface FastEthernet0/1.4 encapsulation dot1Q 4 bridge-group 2 ! interface FastEthernet0/1.5 encapsulation dot1Q 5 bridge-group 2 ! interface Ethernet1/0 no ip address shutdown half-duplex ! interface Ethernet1/1 ip address ip nat outside full-duplex ! interface Ethernet1/2 ip address ip nat outside full-duplex ! interface Ethernet1/3 no ip address shutdown half-duplex ! interface BVI1 ip address ip nat inside ip policy route-map pbr_ab ! interface BVI2 ip address ip nat inside ip policy route-map pbr_cd ! ip nat pool 20 netmask ip nat pool 10 netmask ip nat inside source route-map ab pool 10 overload ip nat inside source route-map cd pool 20 overload ip nat inside source route-map nat_ab pool 10 overload ip nat inside source route-map nat_cd pool 20 overload ip http server no ip http secure-server ip classless ! ! access-list 10 permit 55 access-list 20 permit 55 ! route-map ab permit 10 match ip address 20 match interfa