Konfigurasaun Dual ISP (Internet Service Provider) Failover husi Cisco ho objetivu atu garante koneksaun internet kontinua lao no la problema wainhira ISP ida falha no hanesan plano reserva ida ne'ebé suporta operasaun rede nian wainhira hetan problema ho koneksaun husi internet principal.
Konfigurasaun Dual ISP Failover ne'e oferece seguransa adisionál ba rede empresa nian, assegurando kontinuidade negócio nian mesmo iha emergência koneksaun.
Operasaun IP SLA ne'e normalmente utiliza atu assegura kualidade servisu entre pontos terminais, teste regularmente koneksaun essensiál sira, no proativamente deteta no responde ba problemas rede antes impacto ba usuário sira. Ita bele haree estatísticas IP SLA ba kada operasaun atu analiza detallu sobre kona-ba rede Up Down(Lakon Mosu)
IP SLA fornece ferramenta ida ne'ebé valiozu ida ba administrador rede atu mantem, otimiza, no assegura performance no reliabilidade iha ambiente rede komplexu.
1. Configure ISP1
ISP1(config)#interface gigabitEthernet 1/0
ISP1(config-if)#ip address 15.1.1.2 255.255.255.252
ISP1(config-if)#no shutdown
ISP1(config-if)#exit
ISP1(config)#
!
ISP1(config)#interface lo1
ISP1(config-if)#ip address 8.8.8.8 255.255.255.255
ISP1(config-if)#exit
!
interface Loopback10
ip address 1.1.1.1 255.255.255.255
!
Konfigurasaun iha ISP2
interface Loopback1
ip address 8.8.8.8 255.255.255.255
!
!
interface GigabitEthernet1/0
ip address 16.1.1.2 255.255.255.252
negotiation auto
!
=========================
Verifika ISP2
ISP2#sh ip interface brief | exclude un
Interface IP-Address OK? Method Status Protocol
GigabitEthernet1/0 16.1.1.2 YES manual up up
Loopback1 8.8.8.8 YES manual up up
!
Configurasaun iha R1
===========================================================
interface GigabitEthernet1/0
description Connected_TO_ISP1
ip address 15.1.1.1 255.255.255.252
ip nat outside
negotiation auto
!
interface GigabitEthernet2/0
description connected_TO_ISP2
ip address 16.1.1.1 255.255.255.252
ip nat outside
negotiation auto
!
interface GigabitEthernet3/0
description Conneted_TO_LAN
ip address 10.1.1.100 255.255.255.0
ip nat inside
negotiation auto
!
Verifika R1
R1#sh ip int br | exclude un
Interface IP-Address OK? Method Status Protocol
GigabitEthernet1/0 15.1.1.1 YES manual up up
GigabitEthernet2/0 16.1.1.1 YES manual up up
GigabitEthernet3/0 10.1.1.100 YES manual up up
!
2. Kria ACL
R1(config)#ip access-list standard NAT
R1(config-std-nacl)#permit 10.1.1.0 0.0.0.255
R1(config-std-nacl)#exit
R1(config)#
Verika ACL
Standard IP access list NAT
10 permit 10.1.1.0, wildcard bits 0.0.0.255
3.Kria ROUTE-MAP ISP1 iha R1
R1(config)#route-map ISP1 permit 10
R1(config-route-map)#match ip address NAT
R1(config-route-map)#match interface gigabitEthernet 1/0
R1(config-route-map)#exit
Kria ROUTE-MAP ISP2 iha R1
===============================
R1(config)#route-map ISP2 permit 10
R1(config-route-map)#match ip address NAT
R1(config-route-map)#match interface gigabitEthernet 2/0
R1(config-route-map)#exit
Verifika Route MAP
R1#sh route-map
route-map ISP2, permit, sequence 10
Match clauses:
ip address (access-lists): NAT
interface GigabitEthernet2/0
Set clauses:
Policy routing matches: 0 packets, 0 bytes
route-map ISP1, permit, sequence 10
Match clauses:
ip address (access-lists): NAT
interface GigabitEthernet1/0
Set clauses:
Policy routing matches: 0 packets, 0 bytes
R1#
4. Konfigura IP NAT
ip nat inside source route-map ISP1 interface GigabitEthernet1/0 overload
ip nat inside source route-map ISP2 interface GigabitEthernet2/0 overload
5. Koko teste Ping ba 8.8.8.8 Parece seidauk Repply tamba sei dauk configura ip default ROute
R1#ping 8.8.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
6. Kria tan int lo10 iha ISP1
ISP1(config)#interface lo10
ISP1(config-if)#ip address 1.1.1.1 255.255.255.255
exi
7. Kria IP SLA 1 iha R1
R1(config)#ip sla 1
R1(config-ip-sla)#icmp-echo 1.1.1.1 source-interface gigabitEthernet 1/0
R1(config-ip-sla-echo)#timeout 5000
R1(config-ip-sla-echo)#frequency 5
R1(config-ip-sla-echo)#exit
!
R1(config)#ip sla schedule 1 life forever start-time now
8. Kria IP STATIC ROUTE iha R1
R1(config)#ip route 1.1.1.1 255.255.255.255 gigabitEthernet 1/0 15.1.1.2
koko teste ping ba 1.1.1.1
R1#ping 1.1.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/24/32 ms
9. Kria IP DEFAULT ROUTE
R1(config)#ip route 0.0.0.0 0.0.0.0 15.1.1.2 track 1
R1#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
1.0.0.0/32 is subnetted, 1 subnets
S 1.1.1.1 [1/0] via 15.1.1.2, GigabitEthernet1/0
is directly connected, GigabitEthernet1/0
10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 10.1.1.0/24 is directly connected, GigabitEthernet3/0
L 10.1.1.100/32 is directly connected, GigabitEthernet3/0
15.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 15.1.1.0/30 is directly connected, GigabitEthernet1/0
L 15.1.1.1/32 is directly connected, GigabitEthernet1/0
16.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 16.1.1.0/30 is directly connected, GigabitEthernet2/0
L 16.1.1.1/32 is directly connected, GigabitEthernet2/0
R1#
Vefika IPS sla
R1#sh ip sla summary
IPSLAs Latest Operation Summary
Codes: * active, ^ inactive, ~ pending
ID Type Destination Stats Return Last
(ms) Code Run
-----------------------------------------------------------------------
*1 icmp-echo 1.1.1.1 RTT=32 OK 3 seconds ago
10. Kria track 1 ip sla iha R1
R1(config)#track 1 ip sla 1 reachability
R1(config-track)#exit
verifica ip track
R1#sh track 1
Track 1
IP SLA 1 reachability
Reachability is Up
1 change, last change 00:01:01
Latest operation return code: OK
Latest RTT (millisecs) 44
Tracked by:
STATIC-IP-ROUTING 0
R1#
koko verifika fali IP default route iha R1
R1#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 15.1.1.2 to network 0.0.0.0
S* 0.0.0.0/0 [1/0] via 15.1.1.2
1.0.0.0/32 is subnetted, 1 subnets
S 1.1.1.1 [1/0] via 15.1.1.2, GigabitEthernet1/0
is directly connected, GigabitEthernet1/0
10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 10.1.1.0/24 is directly connected, GigabitEthernet3/0
L 10.1.1.100/32 is directly connected, GigabitEthernet3/0
15.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 15.1.1.0/30 is directly connected, GigabitEthernet1/0
L 15.1.1.1/32 is directly connected, GigabitEthernet1/0
16.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 16.1.1.0/30 is directly connected, GigabitEthernet2/0
L 16.1.1.1/32 is directly connected, GigabitEthernet2/0
R1#
koko test ping ba 8.8.8.8
R1#ping 8.8.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/28/44 ms
koko test ping husi LAN
R1#ping 8.8.8.8 source gigabitEthernet 3/0
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
Packet sent with a source address of 10.1.1.100
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/32/44 ms
R1#
PC1> tracer 8.8.8.8
trace to 8.8.8.8, 8 hops max, press Ctrl+C to stop
1 10.1.1.100 15.245 ms 15.828 ms 15.050 ms
2 *15.1.1.2 45.875 ms (ICMP type:3, code:3, Destination port unreachable)
PC1>
11. Konfigura File OVer
R1(config)#ip route 0.0.0.0 0.0.0.0 16.1.1.2 10
verifica ip route (file over)
R1#sh run | section route
ip nat inside source route-map ISP1 interface GigabitEthernet1/0 overload
ip nat inside source route-map ISP2 interface GigabitEthernet2/0 overload
ip route 0.0.0.0 0.0.0.0 15.1.1.2 track 1
ip route 0.0.0.0 0.0.0.0 16.1.1.2 10
ip route 1.1.1.1 255.255.255.255 GigabitEthernet1/0
ip route 1.1.1.1 255.255.255.255 GigabitEthernet1/0 15.1.1.2
route-map ISP2 permit 10
match ip address NAT
match interface GigabitEthernet2/0
route-map ISP1 permit 10
match ip address NAT
match interface GigabitEthernet1/0
R1#
Koko teste File over antes Hamate ISP1
PC1> tracer 8.8.8.8
trace to 8.8.8.8, 8 hops max, press Ctrl+C to stop
1 10.1.1.100 15.234 ms 15.051 ms 15.381 ms
2 *15.1.1.2 60.387 ms (ICMP type:3, code:3, Destination port unreachable)
PC1>
Depois de Hamate ISP1 traffic liu husi ip 16.1.1.2
PC1> tracer 8.8.8.8
trace to 8.8.8.8, 8 hops max, press Ctrl+C to stop
1 10.1.1.100 15.502 ms 15.262 ms 15.613 ms
2 *16.1.1.2 45.520 ms (ICMP type:3, code:3, Destination port unreachable)
PC1>
PC1>
depois de ISP1 DOWN
R1(config-if)#do sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 16.1.1.2 to network 0.0.0.0
S* 0.0.0.0/0 [10/0] via 16.1.1.2
10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 10.1.1.0/24 is directly connected, GigabitEthernet3/0
L 10.1.1.100/32 is directly connected, GigabitEthernet3/0
16.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 16.1.1.0/30 is directly connected, GigabitEthernet2/0
L 16.1.1.1/32 is directly connected, GigabitEthernet2/0
R1(config-if)#
se kuando ISP1 moris fila fali trafic switch Automaticaly ba fali iha ISP1
R1(config-if)#do sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 15.1.1.2 to network 0.0.0.0
S* 0.0.0.0/0 [1/0] via 15.1.1.2
1.0.0.0/32 is subnetted, 1 subnets
S 1.1.1.1 [1/0] via 15.1.1.2, GigabitEthernet1/0
is directly connected, GigabitEthernet1/0
10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 10.1.1.0/24 is directly connected, GigabitEthernet3/0
L 10.1.1.100/32 is directly connected, GigabitEthernet3/0
15.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 15.1.1.0/30 is directly connected, GigabitEthernet1/0
L 15.1.1.1/32 is directly connected, GigabitEthernet1/0
16.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 16.1.1.0/30 is directly connected, GigabitEthernet2/0
L 16.1.1.1/32 is directly connected, GigabitEthernet2/0
R1(config-if)#
12.Kria Network Automation iha R1 hodi Delete Automatic ip nat
R1(config)#event manager applet clear_nat
R1(config-applet)#event track 1 state down
R1(config-applet)#action 1.0 cli command enable
R1(config-applet)#action 1.5 cli command "clear ip nat translation *"
R1(config-applet)#exit
!
R1#clear ip nat translation *
13. Koko Hamate fali ISP1 ho ISP2 hodi halo Komparasaun.
Failover TEST
1. Wainhira la iha failha iha Link entre ISP1 ho R1 QUando ita show ip route iha R1 trafiku liu ISP1 (S* 0.0.0.0/0 [1/0] via 15.1.1.2 )
R1#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 15.1.1.2 to network 0.0.0.0
S* 0.0.0.0/0 [1/0] via 15.1.1.2
1.0.0.0/32 is subnetted, 1 subnets
S 1.1.1.1 [1/0] via 15.1.1.2, GigabitEthernet1/0
is directly connected, GigabitEthernet1/0
10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 10.1.1.0/24 is directly connected, GigabitEthernet3/0
L 10.1.1.100/32 is directly connected, GigabitEthernet3/0
15.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 15.1.1.0/30 is directly connected, GigabitEthernet1/0
L 15.1.1.1/32 is directly connected, GigabitEthernet1/0
16.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 16.1.1.0/30 is directly connected, GigabitEthernet2/0
L 16.1.1.1/32 is directly connected, GigabitEthernet2/0
R1#
2. Se wainhira iha Failansu entre Link R1 to ISP1 automatikamente Trafiku sei liu husi ISP2 S* 0.0.0.0/0 [10/0] via 16.1.1.2
R1(config-if)#do sh ip route
R1(config-if)#do sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 16.1.1.2 to network 0.0.0.0
S* 0.0.0.0/0 [10/0] via 16.1.1.2
10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 10.1.1.0/24 is directly connected, GigabitEthernet3/0
L 10.1.1.100/32 is directly connected, GigabitEthernet3/0
16.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 16.1.1.0/30 is directly connected, GigabitEthernet2/0
L 16.1.1.1/32 is directly connected, GigabitEthernet2/0
R1(config-if)#
3. Se Wainhira Link entre R1 to ISP1 moris autmaticamente Trafiku sei liu ba iha ISP1 (*Apr 12 10:31:29.711: %TRACKING-5-STATE: 1 ip sla 1 reachability Down->Up )
R1(config)#do sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 15.1.1.2 to network 0.0.0.0
S* 0.0.0.0/0 [1/0] via 15.1.1.2
1.0.0.0/32 is subnetted, 1 subnets
S 1.1.1.1 [1/0] via 15.1.1.2, GigabitEthernet1/0
is directly connected, GigabitEthernet1/0
10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 10.1.1.0/24 is directly connected, GigabitEthernet3/0
L 10.1.1.100/32 is directly connected, GigabitEthernet3/0
15.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 15.1.1.0/30 is directly connected, GigabitEthernet1/0
L 15.1.1.1/32 is directly connected, GigabitEthernet1/0
16.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 16.1.1.0/30 is directly connected, GigabitEthernet2/0
L 16.1.1.1/32 is directly connected, GigabitEthernet2/0
Obg tamba Visita ona.
Tidak ada komentar:
Posting Komentar