R2:为公网接入点,为了保证能一天24小时公司的网络能上INTERNET,现接入两家供应商的线路来连接INTERNET,

即然接入了两家供应商线路,当然希望两条线路能同时启用做到负载均衡的目的,当一条线路出了问题,客户端还可以走另一条线路出到INTERNET,现在要在R2路由器上做相关设置以达到我们所需求.以下是在R2上的配置如下:

R2#show run 
Building configuration...

Current configuration : 1449 bytes 
! 
version 12.4 
service timestamps debug datetime msec 
service timestamps log datetime msec 
no service password-encryption 
! 
hostname R2 
! 
boot-start-marker 
boot-end-marker 
! 
no aaa new-model 
memory-size iomem 5 
! 
ip cef 
!

interface Serial0/0 
 ip address 150.17.232.2 255.255.254.0 
 ip nat inside 
 ip virtual-reassembly 
 serial restart-delay 0 
! 
interface Serial0/1 
 ip address 192.168.2.1 255.255.255.0 
 ip nat outside 
 ip virtual-reassembly 
 serial restart-delay 0 
! 
interface Serial0/2 
 ip address 172.16.20.1 255.255.0.0 
 ip nat outside 
 ip virtual-reassembly 
 serial restart-delay 0 
! 
ip http server 
no ip http secure-server 
! 
ip nat inside source route-map isp1 interface Serial0/1 overload 
ip nat inside source route-map isp2 interface Serial0/2 overload 
! 
access-list 100 permit ip 150.17.232.0 0.0.0.255 192.168.2.0 0.0.0.255 
access-list 101 permit ip 150.17.232.0 0.0.0.255 any 
! 
route-map isp2 permit 10 
 match ip address 101 
 match interface Serial0/2 
! 
route-map isp1 permit 10 
 match ip address 100 
 match interface Serial0/1 
! 
control-plane 
! 
line con 0 
 exec-timeout 0 0 
 logging synchronous 
line aux 0 
line vty 0 4 
 login

问:用router-map 与直接用PAT它们之间有什么区别?

是不是用router-map能够自动做负载均衡,而用PAT则只能走一条线路呢?

第一种方法用router-map来配置

ip nat inside source route-map isp1 interface Serial0/1 overload 
ip nat inside source route-map isp2 interface Serial0/2 overload 
! 
access-list 100 permit ip 150.17.232.0 0.0.0.255 192.168.2.0 0.0.0.255 
access-list 101 permit ip 150.17.232.0 0.0.0.255 any 
! 
route-map isp2 permit 10 
 match ip address 101 
 match interface Serial0/2 
! 
route-map isp1 permit 10 
 match ip address 100 
 match interface Serial0/1

第二种方法直接用PAT来做转换配置

ip nat inside source list 100 interface Serial0/1 overload 
ip nat inside source list 101 interface Serial0/2 overload 
! 
access-list 100 permit ip 150.17.232.0 0.0.0.255 192.168.2.0 0.0.0.255 
access-list 101 permit ip 150.17.232.0 0.0.0.255 any 
!

以上两种配置在客户端PING ISP1和ISP2都能通过 
R2#show ip nat translations 
Pro Inside global      Inside local       Outside local      Outside global 
icmp 172.16.20.1:6     150.17.232.1:6     172.16.20.2:6      172.16.20.2:6 
icmp 192.168.2.1:7     150.17.232.1:7     192.168.2.2:7      192.168.2.2:7

     本文转自allanhi 51CTO博客，原文链接：http://blog.51cto.com/allanfan/217602，如需转载请自行联系原作者