问题背景
客户开通了两条外网线路,但这两条线路同属一家运营商且是同一段地址,客户想都接入网关设备为内网用户提供上网服务。
模拟组网逻辑拓扑
解决方法
通过实例隔离实现同网段双线接入,并实现映射地址双线灵活配置。
配置脚本
模拟运营商
#
interface Vlan-interface1
ip address 100.100.0.1 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-mode bridge
combo enable fiber
#
interface GigabitEthernet1/0/2
port link-mode bridge
combo enable fiber
#
模拟出口网关
#
ip vpn-instance a
#
ip vpn-instance b
#
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip binding vpn-instance a
ip address 100.100.0.2 255.255.255.0
nat outbound vpn-instance a
nat server protocol icmp global 100.100.0.4 vpn-instance a inside 192.168.10.2
#
interface GigabitEthernet0/1
port link-mode route
combo enable copper
ip binding vpn-instance b
ip address 100.100.0.3 255.255.255.0
nat outbound vpn-instance b
#
interface GigabitEthernet0/2
port link-mode route
combo enable copper
ip address 192.168.10.1 255.255.255.0
#
ip route-static 0.0.0.0 0 vpn-instance a 100.100.0.1
ip route-static 0.0.0.0 0 vpn-instance b 100.100.0.1
ip route-static vpn-instance a 0.0.0.0 0 100.100.0.1
ip route-static vpn-instance b 0.0.0.0 0 100.100.0.1
#
测试结果
终端测试
运营商映射测试