双出口策略路由加nat配置 (2)

1、实验实现出口双线，电信流量走电信，网通流量走网通，并且双线互相备份。R2为电信PE R3为网通PE R4模拟内网PCR2与R3直接用静态或动态路由自己选，确保R2与R3直接LO网段能互访就行，用来测试（比如去电信的线路段了，走网通依然能访问 电信lo段）R1配置文件（出口网关设备）interface FastEthernet0/0 ip nat outside ip virtual-reassembly duplex auto speed auto!interface FastEthernet0/1 ip nat outside ip virtual-reassembly duplex aut

2、o speed auto!interface FastEthernet1/0 ip nat inside ip virtual-reassembly ip policy route-map ruijie duplex auto speed auto!ip http serverno ip http secure-serverip nat inside source route-map isp1 interface FastEthernet0/1 overload -符合route-map isp1的走0/1接口进行地址转换ip nat inside source route-map isp2

3、interface FastEthernet0/0 overload -符合route-map isp2的走0/0接口进行地址转换!access-list 101 permit ip any .255 -被route-map ruijie引用匹配去电信lo段的目的地址access-list 102 deny ip any .255 -被route-map ruijie 引用匹配去往网通及其他lo段的目的地址access-list 102 permit ip any any!route-map ruijie permit 10 match ip

4、 address 101 -去电信的流量优先走电信的线路，如果电信线路down走网通线路!route-map ruijie permit 20 match ip address 102 -去网通的流量优先走网通线路，网通线路down走电信线路!route-map isp2 permit 10 match interface FastEthernet0/0 -route-map isp1 isp2 用来匹配 route-map选路以后出接口的情况，在被nat引用来选择地址转换!route-map isp1 permit 10 match interface FastEthernet0/1R2配置

5、文件（模拟电信）interface Loopback0!interface FastEthernet0/0 duplex auto speed auto!interface FastEthernet0/1 duplex auto speed auto!interface FastEthernet1/0 no ip address shutdown duplex auto speed auto!R3配置文件（模拟网通）!interface Loopback0!interface FastEthernet0/0 duplex auto speed auto!interface FastEthernet0/1 duplex auto speed auto!R4配置文件interface FastEthernet0/0 duplex auto speed au