本帖最后由 junnyang 于 2018-4-26 10:47 编辑 Topology:
IOSV-1 配置如下:
track 1 ip sla 1 reachability
!
track 2 ip sla 2 reachability
!
!
interface GigabitEthernet0/1
ip address 12.1.1.1 255.255.255.0
ip nat outside
!
interface GigabitEthernet0/2
ip address 13.1.1.1 255.255.255.0
ip nat outside
!
interface GigabitEthernet0/3
ip address 14.1.1.1 255.255.255.0
ip nat inside
ip policy route-map test
ip nat inside source route-map nat interfaceGigabitEthernet0/1 overload
ip nat inside source route-map nat1 interfaceGigabitEthernet0/2 overload
ip route 2.2.2.2 255.255.255.255 12.1.1.2
ip route 3.3.3.3 255.255.255.255 13.1.1.3
ip route 4.4.0.0 255.255.0.0 14.1.1.4
!
ip access-list extended test
permit tcp host 4.4.0.4 any
permit udp host 4.4.0.4 any
permit icmp host 4.4.0.4 any
ip access-list extended test1
permit tcp host 4.4.1.4 any
permit udp host 4.4.1.4 any
permit icmp host 4.4.1.4 any
!
ip sla 1
icmp-echo 2.2.2.2 source-interface GigabitEthernet0/1 (使用SLA1 监控ISP1可达性)
frequency 10
ip sla schedule 1 life forever start-time now
ip sla 2
icmp-echo 3.3.3.3 source-interface GigabitEthernet0/2 (使用SLA 监控ISP2可达性)
frequency 10
ip sla schedule 2 life forever start-time now
!
route-map test permit 10
match ip address test
set ip next-hop verify-availability 12.1.1.2 1 track 1
set ip next-hop verify-availability 13.1.1.3 2 track 2
!
route-map test permit 20
match ip address test1
set ip next-hop verify-availability 13.1.1.3 1 track 2
set ip next-hop verify-availability 12.1.1.2 2 track 1
!
route-map nat1 permit 10
match ip address test test1
match interface GigabitEthernet0/2
!
route-map nat permit 10
match ip address test test1
match interface GigabitEthernet0/1