四川省住房与城乡建设厅网站管网搜索引擎营销
文章目录
- NQA配置介绍
- 实验说明
NQA配置介绍
- NQA配置
nqa entry admin testtype icmp-echo //配置NQA类型destination ip 10.1.0.1 //配置探测的目的IPsource ip 10.1.0.2 //配置探测的源IPfrequency 6000 //配置两次NQA探测的时间间隔history-record enable //历史探测记录history-record number 10 //历史探测记录10条probe count 3 //一次探测发送ICMP包个数probe timeout 2000 //探测超时时间//配置联动项3，连续探测3次失败，会联动协议进行切换reaction 3 checked-element probe-fail threshold-type consecutive 3 action-type trigger-only
# 配置track项1，关联NQA测试组（admin为管理员，test为为标签）的联动项3
track 1 nqa entry admin test reaction 3
# 激活NQA
nqa schedule admin test start-time now lifetime forever
- 如果要修改NQA的参数，需要先停止NQA
- 静态路由调用track
ip route-static 1.1.1.1 32 10.1.0.1 track 1ip route-static 1.1.1.1 32 10.1.0.1 preference 100
- 查看NQA状态
[H3C]dis track all
Track ID: 1State: PositiveDuration: 0 days 0 hours 1 minutes 38 secondsNotification delay: Positive 0, Negative 0 (in seconds)Tracked object:NQA entry: admin testReaction: 3Remote IP/URL: 10.1.0.1 Local IP: 10.1.0.2 Interface: --
[H3C]
- 如果状态为
NotReady，NQA则不生效，有可能是再配置NQA是，探测类型配置为了trap-only修改为trigger-only即可
trap-only:达到探测失败条件之后发traptrigger-only:达到失败条件后给其他协议发一个信号，达到联动
- 在中间互联的接口down或这探测报文无法通过时，6s后就会进行切换，保证路由从备路由走
实验说明
- SW1与SW2三层互联，主链路中间串联二层防火墙，备链路直接互通
- 配置如下
# SW1
interface LoopBack0ip address 1.1.1.1 255.255.255.255
interface Ten-GigabitEthernet1/0/49port link-mode routeip address 10.1.0.1 255.255.255.252
interface Ten-GigabitEthernet1/0/50port link-mode routeip address 10.1.0.5 255.255.255.252
# SW2
interface Ten-GigabitEthernet1/0/49port link-mode routeip address 10.1.0.2 255.255.255.252
interface Ten-GigabitEthernet1/0/50port link-mode routeip address 10.1.0.6 255.255.255.252
nqa entry admin testtype icmp-echodestination ip 10.1.0.1source ip 10.1.0.2frequency 6000history-record enablehistory-record number 10probe count 3probe timeout 2000reaction 3 checked-element probe-fail threshold-type consecutive 3 action-type trigger-only
#
track 1 nqa entry admin test reaction 3
#
nqa schedule admin test start-time now lifetime forever
#
ip route-static 1.1.1.1 32 10.1.0.1 track 1
ip route-static 1.1.1.1 32 10.1.0.1 preference 100
- 防火墙可以用二层交换机代替，可以通过断开中间设备与SW1互联的接口判断NQA是否生效
- 也可以在中间设备上配置ACL，禁止NQA的探测报文，再查看NQA是否切换
- 配置如下
acl advanced 3000rule 5 deny icmp source 10.1.0.2 0 destination 10.1.0.1
interface Ten-GigabitEthernet 1/0/49packet-filter 3000 outbound
- 已经完成切换，从备出口（XGE1/0/50）发出
[H3C]dis track all
Track ID: 1State: PositiveDuration: 0 days 0 hours 1 minutes 38 secondsNotification delay: Positive 0, Negative 0 (in seconds)Tracked object:NQA entry: admin testReaction: 3Remote IP/URL: 10.1.0.1 Local IP: 10.1.0.2 Interface: --
[H3C]dis ip routing-table Destinations : 17 Routes : 17Destination/Mask Proto Pre Cost NextHop Interface
0.0.0.0/32 Direct 0 0 127.0.0.1 InLoop0
1.1.1.1/32 Static 60 0 10.1.0.1 XGE1/0/49
127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0
127.0.0.0/32 Direct 0 0 127.0.0.1 InLoop0
127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0
127.255.255.255/32 Direct 0 0 127.0.0.1 InLoop0
10.1.0.0/30 Direct 0 0 10.1.0.2 XGE1/0/49
10.1.0.0/32 Direct 0 0 10.1.0.2 XGE1/0/49
10.1.0.2/32 Direct 0 0 127.0.0.1 InLoop0
10.1.0.3/32 Direct 0 0 10.1.0.2 XGE1/0/49
224.0.0.0/4 Direct 0 0 0.0.0.0 NULL0
224.0.0.0/24 Direct 0 0 0.0.0.0 NULL0
255.255.255.255/32 Direct 0 0 127.0.0.1 InLoop0
[H3C]%Jan 1 08:56:49:182 2013 H3C PING/6/PING_STATISTICS: Ping statistics for 10.1.0.1: 4 packet(s) transmitted, 0 packet(s) received, 100.0% packet loss.
[H3C]dis track all
Track ID: 1State: NegativeDuration: 0 days 0 hours 0 minutes 19 secondsNotification delay: Positive 0, Negative 0 (in seconds)Tracked object:NQA entry: admin testReaction: 3Remote IP/URL: 10.1.0.1 Local IP: 10.1.0.2 Interface: --
[H3C]dis ip routing-table Destinations : 17 Routes : 17Destination/Mask Proto Pre Cost NextHop Interface
0.0.0.0/32 Direct 0 0 127.0.0.1 InLoop0
1.1.1.1/32 Static 100 0 172.31.16.229 XGE1/0/50
127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0
127.0.0.0/32 Direct 0 0 127.0.0.1 InLoop0
127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0
127.255.255.255/32 Direct 0 0 127.0.0.1 InLoop0
10.1.0.0/30 Direct 0 0 10.1.0.2 XGE1/0/49
10.1.0.0/32 Direct 0 0 10.1.0.2 XGE1/0/49
10.1.0.2/32 Direct 0 0 127.0.0.1 InLoop0
10.1.0.3/32 Direct 0 0 10.1.0.2 XGE1/0/49
172.31.16.228/30 Direct 0 0 172.31.16.230 XGE1/0/50
172.31.16.228/32 Direct 0 0 172.31.16.230 XGE1/0/50
172.31.16.230/32 Direct 0 0 127.0.0.1 InLoop0
172.31.16.231/32 Direct 0 0 172.31.16.230 XGE1/0/50
224.0.0.0/4 Direct 0 0 0.0.0.0 NULL0
224.0.0.0/24 Direct 0 0 0.0.0.0 NULL0
255.255.255.255/32 Direct 0 0 127.0.0.1 InLoop0
[H3C]
以上内容均属原创，如有不详或错误，敬请指出。
本文链接： https://blog.csdn.net/qq_45668124/article/details/145835773
版权声明： 本博客所有文章除特别声明外，如需转载，请联系作者注明出处并附带本文链接！