ASA redundants備援接口實驗

<b>ASA redundants</b><b>備援接口實驗</b>

   ASA redundants備援接口，可以把多條實體線路捆綁成一條邏輯的線路，增加帶寬，提高可靠性，捆綁成一條邏輯線路後我們又通過在這個redundant口來劃分子接口，其它配置基本上類似上次vlan-interface的實驗配置。

Top如下：

<a target="_blank" href="http://blog.51cto.com/attachment/201105/230927591.png"></a>

需求：

1，把fa1/2-3的兩條實體線路當做一條邏輯的實體通道去負載均衡的承載流量

2，讓各VLAN之間完全通信

實作：

ASA(cloud):

Interface e0/0

No sh

Interfacee0/1

Interface redundant 1

Member-interface e0/0

Member-interface e0/1

Exit

Interface redundant 1.1

Vlan 2

Nameif inside1

Security-level 100

Ip add 192.168.1.1 255.255.255.0

Interface redundant 1.2

Nameif inside2

Ip add 192.168.2.1 255.255.255.0

Same-security-traffic permit inter-interface

SW:

Interface range fa1/0 -5

Interface range fa1/0 , fa1/5

Switchport mode access

Switchport access vlan 2

Interface range fa1/2 , fa1/4

Switchport access vlan 3

Interface range fa1/2 -3

Switchport trunk encapsulation dot1q

Switchport mode trunk

Switchport trunk allowed vlan all

各pc就不都說了，配靜态預設或預設網關等方式來模拟PC。

測試：

R6#ping 192.168.2.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 8/19/44 ms

R6#ping 192.168.2.2

Sending 5, 100-byte ICMP Echos to 192.168.2.2, timeout is 2 seconds:

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/29/48 ms

R6#ping 192.168.1.2

Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/25/52 ms

R6#ping 192.168.1.3

Sending 5, 100-byte ICMP Echos to 192.168.1.3, timeout is 2 seconds:

Success rate is 100 percent (5/5), round-trip min/avg/max = 8/15/32 ms

R6#

小實驗成功。

本文轉自 Bruce_F5 51CTO部落格，原文連結:http://blog.51cto.com/zenfei/565653