ASA redundants冗餘接口實驗

 

ASA redundants 冗餘接口實驗

   ASA redundants冗餘接口，能夠把多條物理線路捆綁成一條邏輯的線路，增長帶寬，提升可靠性，捆綁成一條邏輯線路後咱們又經過在這個redundant口來劃分子接口，其它配置基本上相似上次vlan-interface的實驗配置。

Top以下：

 

需求：

1，把fa1/2-3的兩條物理線路當作一條邏輯的物理通道去負載均衡的承載流量

2，讓各VLAN之間徹底通訊

實現：

ASA(cloud):

Interface e0/0

No sh

Interfacee0/1

No sh

Interface redundant 1

No sh

Member-interface e0/0

Member-interface e0/1

Exit

Interface redundant 1.1

No sh

Vlan 2

Nameif inside1

Security-level 100

Ip add 192.168.1.1 255.255.255.0

Interface redundant 1.2

No sh

Nameif inside2

Security-level 100

Ip add 192.168.2.1 255.255.255.0

Exit

Same-security-traffic permit inter-interface

 

SW:

Interface range fa1/0 -5

No sh

Interface range fa1/0 , fa1/5

No sh

Switchport mode access

Switchport access vlan 2

Interface range fa1/2 , fa1/4

Switchport access vlan 3

Exit

Interface range fa1/2 -3

No sh

Switchport trunk encapsulation dot1q

Switchport mode trunk

Switchport trunk allowed vlan all

Exit

 

 

各pc就不都說了，配靜態默認或默認網關等方式來模擬PC。

測試：

 

R6#ping 192.168.2.1

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 8/19/44 ms

R6#ping 192.168.2.2

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.2.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/29/48 ms

R6#ping 192.168.1.2

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/25/52 ms

R6#ping 192.168.1.3

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.3, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 8/15/32 ms

R6#

小實驗成功。