华为QUIDWAY系列路由器的负载均衡配置

作者:邓聪聪

华为系列路由器的负载均衡NQA联动侦测配置案例：

需求：该局域网，IP地址（末位奇数）走联通，IP地址（末位偶数）走电信当某个运营商不可达时，自动切换。通过NQA来确定运营商是否可达。，并与流行为、静态路由联动，实现自动切换。默认路由走联通，当联通不可达切至电信（配置的路由优先级，华为交换机静态路由默认优先级为60）

配置详情：

内网核心路由器配置；

<Huawei>dis cu 
[V200R003C00]
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
 clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
 drop illegal-mac alarm
#
 set cpu-usage threshold 80 restore 75
#
bfd
#
acl number 2000  
 description To-Unicom
 rule 10 permit source 192.168.0.0 0.0.0.255 
acl number 2001  
 description To-Telecom
 rule 10 permit source 192.168.1.0 0.0.0.255 
#
acl number 3000  
 description NAT
 rule 10 permit ip source 192.168.0.0 0.0.1.255 
#
traffic classifier DX operator and
 if-match acl 2001
traffic classifier LT operator and
 if-match acl 2000
#
traffic behavior DX
 redirect ip-nexthop 20.1.1.1 track nqa test DX
traffic behavior LT
 redirect ip-nexthop 10.1.1.1 track nqa test LT
#
traffic policy load
 classifier LT behavior LT
 classifier DX behavior DX
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ip address 10.1.1.2 255.255.255.252 
 nat outbound 3000
#
interface GigabitEthernet0/0/1
 ip address 20.1.1.2 255.255.255.252 
 nat outbound 3000
#
interface GigabitEthernet0/0/2
 ip address 10.16.0.1 255.255.255.252 
 traffic-policy load inbound
#
interface NULL0
#
bfd lt bind peer-ip 10.1.1.1 interface GigabitEthernet0/0/0 source-ip 10.1.1.2 o
ne-arm-echo
 discriminator local 1
 min-echo-rx-interval 200
 commit
#
ip route-static 0.0.0.0 0.0.0.0 20.1.1.1 preference 150
ip route-static 0.0.0.0 0.0.0.0 10.1.1.1 track nqa test LT
ip route-static 192.168.0.0 255.255.254.0 10.16.0.2
ip route-static 202.106.0.30 255.255.255.255 10.1.1.1
ip route-static 219.141.140.10 255.255.255.255 20.1.1.1
#
nqa test-instance test DX 
 test-type icmp
 destination-address ipv4 219.141.140.10
 frequency 5
 probe-count 2
 start now
nqa test-instance test LT 
 test-type icmp
 destination-address ipv4 202.106.0.30
 frequency 5
 probe-count 1
 start now
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
<Huawei>

内网汇聚设备配置；

[Huawei]dis cu 
#
sysname Huawei
#
vlan batch 10 100
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
drop-profile default
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password simple admin
 local-user admin service-type http
#
interface Vlanif1
 ip address 192.168.0.1 255.255.254.0
#
interface Vlanif10
 ip address 10.16.0.2 255.255.255.252
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface GigabitEthernet0/0/3
 port link-type access
 port default vlan 10
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet0/0/5
#
interface GigabitEthernet0/0/6
#
interface GigabitEthernet0/0/7
#
interface GigabitEthernet0/0/8
#
interface GigabitEthernet0/0/9
#
interface GigabitEthernet0/0/10
#
interface GigabitEthernet0/0/11
#
interface GigabitEthernet0/0/12
#
interface GigabitEthernet0/0/13
#
interface GigabitEthernet0/0/14
#
interface GigabitEthernet0/0/15
#
interface GigabitEthernet0/0/16
#
interface GigabitEthernet0/0/17
#
interface GigabitEthernet0/0/18
#
interface GigabitEthernet0/0/19
#
interface GigabitEthernet0/0/20
#
interface GigabitEthernet0/0/21
#
interface GigabitEthernet0/0/22
#
interface GigabitEthernet0/0/23
#
interface GigabitEthernet0/0/24
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 10.16.0.1
#
user-interface con 0
user-interface vty 0 4
#
return
[Huawei]

模拟运营商配置 unicom；

<Huawei>dis cu 
#
sysname Huawei
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#
 local-user admin service-type http
#
firewall zone Local
 priority 16
#
interface Ethernet0/0/0
#
interface Ethernet0/0/1
#
interface Serial0/0/0
 link-protocol ppp
#
interface Serial0/0/1
 link-protocol ppp
#
interface Serial0/0/2
 link-protocol ppp
#
interface Serial0/0/3
 link-protocol ppp
#
interface GigabitEthernet0/0/0
 ip address 1.1.1.1 255.255.255.252
#
interface GigabitEthernet0/0/1
 ip address 10.1.1.1 255.255.255.252
#
interface GigabitEthernet0/0/2
#
interface GigabitEthernet0/0/3
#
wlan
#
interface NULL0
#
interface LoopBack1
 ip address 202.106.0.30 255.255.255.255
#
interface LoopBack12
 ip address 202.106.0.100 255.255.255.255
#
ospf 1
 import-route direct
 area 0.0.0.0
  network 1.1.1.0 0.0.0.3
  network 202.106.0.0 0.0.0.255
#
user-interface con 0
user-interface vty 0 4
user-interface vty 16 20
#
return
<Huawei>

模拟运营商配置 telecom；

<Huawei>dis cu 
#
sysname Huawei
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#
 local-user admin service-type http
#
firewall zone Local
 priority 16
#
interface Ethernet0/0/0
#
interface Ethernet0/0/1
#
interface Serial0/0/0
 link-protocol ppp
#
interface Serial0/0/1
 link-protocol ppp
#
interface Serial0/0/2
 link-protocol ppp
#
interface Serial0/0/3
 link-protocol ppp
#
interface GigabitEthernet0/0/0
 ip address 1.1.1.2 255.255.255.252
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
 ip address 20.1.1.1 255.255.255.252
#
interface GigabitEthernet0/0/3
#
wlan
#
interface NULL0
#
interface LoopBack1
 ip address 219.141.140.10 255.255.255.255
#
ospf 1
 import-route direct
 area 0.0.0.0
  network 1.1.1.0 0.0.0.3
#
nqa test-instance test 1
 test-type icmp
 destination-address ipv4 1.1.1.1
 frequency 5
 probe-count 1
 start now
#
user-interface con 0
user-interface vty 0 4
user-interface vty 16 20
#
return
<Huawei>

模拟故障；修改unicom的 interface GigabitEthernet0/0/1端口配置，使其互联不可达，但链路状态依然up。

故障前路由表状态；

        0.0.0.0/0   Static  60   0          RD   10.1.1.1        GigabitEthernet
0/0/0
       10.1.1.0/30  Direct  0    0           D   10.1.1.2        GigabitEthernet
0/0/0
       10.1.1.2/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/0
       10.1.1.3/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/0
      10.16.0.0/30  Direct  0    0           D   10.16.0.1       GigabitEthernet
0/0/2
      10.16.0.1/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/2
      10.16.0.3/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/2
       20.1.1.0/30  Direct  0    0           D   20.1.1.2        GigabitEthernet
0/0/1
       20.1.1.2/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/1
       20.1.1.3/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/1
      127.0.0.0/8   Direct  0    0           D   127.0.0.1       InLoopBack0
      127.0.0.1/32  Direct  0    0           D   127.0.0.1       InLoopBack0
127.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
    192.168.0.0/23  Static  60   0          RD   10.16.0.2       GigabitEthernet
0/0/2
   202.106.0.30/32  Static  60   0          RD   10.1.1.1        GigabitEthernet
0/0/0
 219.141.140.10/32  Static  60   0          RD   20.1.1.1        GigabitEthernet
0/0/1
255.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0

故障后路由表状态；

        0.0.0.0/0   Static  150  0          RD   20.1.1.1        GigabitEthernet
0/0/1
       10.1.1.0/30  Direct  0    0           D   10.1.1.2        GigabitEthernet
0/0/0
       10.1.1.2/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/0
       10.1.1.3/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/0
      10.16.0.0/30  Direct  0    0           D   10.16.0.1       GigabitEthernet
0/0/2
      10.16.0.1/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/2
      10.16.0.3/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/2
       20.1.1.0/30  Direct  0    0           D   20.1.1.2        GigabitEthernet
0/0/1
       20.1.1.2/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/1
       20.1.1.3/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/1
      127.0.0.0/8   Direct  0    0           D   127.0.0.1       InLoopBack0
      127.0.0.1/32  Direct  0    0           D   127.0.0.1       InLoopBack0
127.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
    192.168.0.0/23  Static  60   0          RD   10.16.0.2       GigabitEthernet
0/0/2
   202.106.0.30/32  Static  60   0          RD   10.1.1.1        GigabitEthernet
0/0/0
 219.141.140.10/32  Static  60   0          RD   20.1.1.1        GigabitEthernet
0/0/1
255.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0

配置验证：

display ip routing-table #用于查看当前设备的路由表状态

display nqa results test-instance test LT #用于验证NQA的状态

posted @ 2018-01-31 17:59 邓聪聪阅读(3566) 评论(0) 编辑收藏举报

刷新页面返回顶部

邓聪聪

https://www.cnblogs.com/dengcongcong/

华为QUIDWAY系列路由器的负载均衡配置

公告