OpenForum RSS: Cisco 1841 - 2 NAT'�

Cisco 1841 - 2 NAT'� (wertys)

Wed, 29 Apr 2009 06:33:42 GMT

>[�� ]
>route-map ISP permit 10
> match ip address ISP_1_source_IP
> set ip default next-hop ISP_1_GW
>route-map ISP permit 20
> match ip address ISP_2_source_IP
> set ip default next-hop ISP_2_GW
>...��
>
>�� ping 213.180.204.8 ...
>ip local policy route-map ISP

zxc � alex.krav �� !!!!!!!!!!

Cisco 1841 - 2 NAT'� (alex.krav)

Wed, 29 Apr 2009 04:19:38 GMT

>[�� ]
>Success rate is 0 percent (0/5)
>
>
>��
>
>ip route 0.0.0.0 0.0.0.0 Dialer1 100
>ip route 0.0.0.0 0.0.0.0 ISP 2 GW 50
>
>��
>

�� ޣ� �� . �� -�� .
�� . �� (�� PBR) �� :

route-map ISP permit 10
match ip address ISP_1_source_IP
set ip default next-hop ISP_1_GW
route-map ISP permit 20
match ip address ISP_2_source_IP
set ip default next-hop ISP_2_GW
...��

�� ping 213.180.204.8 ...
ip local policy route-map ISP

Cisco 1841 - 2 NAT'� (wertys)

Tue, 28 Apr 2009 14:33:55 GMT

>[�� ]
> set ip next-hop verify-availability xxx.xxx.xxx.xxx 20 track 123
>
>route-map NAT permit 20
> match ip address NAT-ALL
> set ip next-hop verify-availability xxx.xxx.xxx.xxx 10 track 123
> set ip next-hop verify-availability yyy.yyy.yyy.yyy 20 track 124
>
>
>��, � ��, ��
>http://www.certification.ru/cgi-bin/forum.cgi?action=thread&id=29370

�� , ��
ip route 0.0.0.0 0.0.0.0 Dialer1
ip route 0.0.0.0 0.0.0.0 ISP 2 GW

ping 213.180.204.8 source di1
Success rate is 100 percent (5/5), round-trip min/avg/max = 44/46/48 m

ping 213.180.204.8 source ISP 2 MY
Success rate is 0 percent (0/5)

��

ip route 0.0.0.0 0.0.0.0 Dialer1 100
ip route 0.0.0.0 0.0.0.0 ISP 2 GW 50

��

Cisco 1841 - 2 NAT'� (zxc)

Tue, 28 Apr 2009 12:10:00 GMT

��, � ��: �� ip sla

:-)

Cisco 1841 - 2 NAT'� (zxc)

Tue, 28 Apr 2009 12:04:35 GMT

>��
>�� ip sla �� ?

��:
�� track ��
�� route-map

1. �� track 123 � track 124 � �� NAT �� .
�� 50% �� 50%

ip route 0.0.0.0 0.0.0.0 Dialer1 20 track 123
ip route 0.0.0.0 0.0.0.0 ISP 2 GW 20 track 124

2. �� + �� sla, ��
�� :
route-map NAT permit 10
match ip address NAT
set ip next-hop verify-availability xxx.xxx.xxx.xxx 10 track 123
set ip next-hop verify-availability yyy.yyy.yyy.yyy 20 track 124

3. �� 20 �� , � �� -- ��, �� route-map �� :

route-map NAT permit 10
match ip address NAT-20IP
set ip next-hop verify-availability yyy.yyy.yyy.yyy 10 track 124
set ip next-hop verify-availability xxx.xxx.xxx.xxx 20 track 123

route-map NAT permit

Cisco 1841 - 2 NAT'� (wertys)

Tue, 28 Apr 2009 11:17:54 GMT

>[�� ]
>�� . �� , � ��
>�� VPN-��.
>�� .
>
>�� . �� . �� , ��
>-- ��.
>�� , ��
>� �� .
>��, � ��, �� NAT �� (�� 20 �� ).
>

�� , �� , �� ip sla �� ?

Cisco 1841 - 2 NAT'� (zxc)

Tue, 28 Apr 2009 10:04:56 GMT

>�� , �� VPN-�
>�� ospf � ��
>�� ospf, � ��
>��

�� . �� , � �� VPN-��.
�� .

�� . �� . �� , �� -- ��.
�� , �� .
��, � ��, �� NAT �� (�� 20 �� ).

Cisco 1841 - 2 NAT'� (wertys)

Tue, 28 Apr 2009 09:41:33 GMT

>[�� ]
>ip nat inside source list NAT interface Dialer0 vrf DSV overload
>ip nat inside source list NAT interface Vlan2 vrf ROSTELECOM overload
>!
>ip access-list extended NAT
> deny ip 192.168.1.0 0.0.0.255 192.168.0.0 0.0.255.255
> permit ip 192.168.1.0 0.0.0.255 any
> permit ip 192.168.0.0 0.0.0.255 any
>!
>no cdp run
>!

�� , �� VPN-� �� ospf � �� ospf, � ��

Cisco 1841 - 2 NAT'� (zxc)

Tue, 28 Apr 2009 09:30:28 GMT

��, �� .
�� -- cisco871
�� 1 -- ADSL, PPPoE (�� )
�� 2 -- FastEthernet (�� /30 �� )

�� , ��, �� . �� , �� ADSL.
�� -- DNS. � �� 5-��. �� (��-�� DNS �� ). �� , �� DNS ��.

�� (VRF+�� ) �� certification.ru

�� :
!
!
ip dhcp excluded-address 192.168.1.1
!
ip dhcp pool LAN
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 192.168.1.1
!
!
ip cef
ip domain name yourdomain.com
ip name-server vrf DSV 212.122.1.9
ip name-server vrf DSV 212.122.1.2
ip name-server vrf ROSTELECOM 208.67.222.22