ASA redundants冗余接口实验

<b>ASA redundants</b><b>冗余接口实验</b>

   ASA redundants冗余接口，可以把多条物理线路捆绑成一条逻辑的线路，增加带宽，提高可靠性，捆绑成一条逻辑线路后我们又通过在这个redundant口来划分子接口，其它配置基本上类似上次vlan-interface的实验配置。

Top如下：

<a target="_blank" href="http://blog.51cto.com/attachment/201105/230927591.png"></a>

需求：

1，把fa1/2-3的两条物理线路当做一条逻辑的物理通道去负载均衡的承载流量

2，让各VLAN之间完全通信

实现：

ASA(cloud):

Interface e0/0

No sh

Interfacee0/1

Interface redundant 1

Member-interface e0/0

Member-interface e0/1

Exit

Interface redundant 1.1

Vlan 2

Nameif inside1

Security-level 100

Ip add 192.168.1.1 255.255.255.0

Interface redundant 1.2

Nameif inside2

Ip add 192.168.2.1 255.255.255.0

Same-security-traffic permit inter-interface

SW:

Interface range fa1/0 -5

Interface range fa1/0 , fa1/5

Switchport mode access

Switchport access vlan 2

Interface range fa1/2 , fa1/4

Switchport access vlan 3

Interface range fa1/2 -3

Switchport trunk encapsulation dot1q

Switchport mode trunk

Switchport trunk allowed vlan all

各pc就不都说了，配静态默认或默认网关等方式来模拟PC。

测试：

R6#ping 192.168.2.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 8/19/44 ms

R6#ping 192.168.2.2

Sending 5, 100-byte ICMP Echos to 192.168.2.2, timeout is 2 seconds:

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/29/48 ms

R6#ping 192.168.1.2

Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/25/52 ms

R6#ping 192.168.1.3

Sending 5, 100-byte ICMP Echos to 192.168.1.3, timeout is 2 seconds:

Success rate is 100 percent (5/5), round-trip min/avg/max = 8/15/32 ms

R6#

小实验成功。

本文转自 Bruce_F5 51CTO博客，原文链接:http://blog.51cto.com/zenfei/565653