[POC]A10 LLB智能选路实验备忘录

以下拓扑在Home LAB环境下模拟常见企业网架构,能有效验证LLB的各项功能点:

FW使用openSense,edge使用A10,TOP/Client使用Windows Server 2012 R2(均部署DNS角色);

分别将3.3.3.0/24地址段加入CTC/CMC/CUC的class-list库中,验证从FW起点的选路验证。

如果均不在CMC/CUC/CTC地址库中,则遵循策略中的随机选路原则。

如果从Client起点进行验证,则会看到如下效果:Client>FW>LLB-A10>edge>TOP。

LLB-A10的完整配置:

LLB-11-Active-affinity-def-vMaster[1/1]#sh running-config 
!Current configuration: 3848 bytes      
!Configuration last updated at 08:43:48 GMT Sun Mar 15 2020
!Configuration last saved at 09:35:14 GMT Sun Mar 15 2020
!64-bit Advanced Core OS (ACOS) version 4.1.4-GR1-P2, build 151 (Sep-09-2019,15:47)
!
vrrp-a common 
  device-id 1 
  set-id 1 
  enable 
!
device-context 1
  vcs enable 
!
device-context 2
  vcs enable 
!
vcs floating-ip 1.1.1.2 255.255.255.0 
!
vcs device 1 
  priority 250 
  interfaces management 
  interfaces ve 1001 
  affinity-vrrp-a-vrid 0 
  enable 
!
vcs device 2 
  priority 200 
  interfaces management 
  interfaces ve 1001 
  affinity-vrrp-a-vrid 0 
  enable 
!
!
system resource-usage nat-pool-addr-count 2000 
!
terminal idle-timeout 60 
!
class-list class-cmc 
  223.96.100.0/24 
  223.96.110.0/24 
!
class-list class-ctc 
  122.227.231.0/24 
  122.227.230.0/24 
  8.8.8.8/32 
  3.3.3.0/24 
!
class-list class-cuc 
  60.12.220.0/24 
  60.12.221.0/24 
!
ip dns primary 122.227.231.250 
!
vlan 1/1001 
  tagged ethernet 3
  router-interface ve 1001 
  name heartBeat 
!
vlan 1/2001 
  untagged ethernet 2
  router-interface ve 2001 
!
vlan 1/3001 
  tagged ethernet 1
  router-interface ve 3001 
!
vlan 1/3002 
  tagged ethernet 1
  router-interface ve 3002 
!
vlan 1/3003 
  tagged ethernet 1
  router-interface ve 3003 
!
vlan 2/1001 
  tagged ethernet 3
  router-interface ve 1001 
!
vlan 2/2001 
  untagged ethernet 2
  router-interface ve 2001 
!
vlan 2/3001 
  tagged ethernet 1
  router-interface ve 3001 
!
vlan 2/3002 
  tagged ethernet 1
  router-interface ve 3002 
!
vlan 2/3003 
  tagged ethernet 1
  router-interface ve 3003 
!
device-context 1
  hostname LLB-11 
!
device-context 2
  hostname LLB-12 
!
device-context 1
  interface management 
    ip address 192.168.0.11 255.255.255.0 
    ip default-gateway 192.168.0.254 
!
device-context 2
  interface management 
    ip address 192.168.0.12 255.255.255.0 
    ip default-gateway 192.168.0.254 
!
interface ethernet 1/1 
  enable 
!
interface ethernet 1/2 
  enable 
!
interface ethernet 1/3 
  enable 
!
interface ethernet 2/1 
  enable 
!
interface ethernet 2/2 
  enable 
!
interface ethernet 2/3 
  enable 
!
interface ve 1/1001 
  name heartBeat 
  ip address 1.1.1.11 255.255.255.0 
!
interface ve 1/2001 
  name donwLink 
  ip address 172.22.99.1 255.255.255.0 
  ip allow-promiscuous-vip 
!
interface ve 1/3001 
  name CTC 
  ip address 122.227.231.1 255.255.255.0 
!
interface ve 1/3002 
  name CUC 
  ip address 60.12.220.1 255.255.255.0 
!
interface ve 1/3003 
  name CMC 
  ip address 223.96.100.1 255.255.255.0 
!
interface ve 2/1001 
  name heartBeat 
  ip address 1.1.1.12 255.255.255.0 
!
interface ve 2/2001 
  name downLink 
  ip address 172.22.99.2 255.255.255.0 
!
interface ve 2/3001 
  name CTC 
  ip address 122.227.231.2 255.255.255.0 
!
interface ve 2/3002 
  name CUC 
  ip address 60.12.220.2 255.255.255.0 
!
interface ve 2/3003 
  name CMC 
  ip address 223.96.100.2 255.255.255.0 
!
vrrp-a vrid 0 
  floating-ip 122.227.231.82 
  floating-ip 60.12.220.168 
  floating-ip 172.22.99.3 
  device-context 1
    blade-parameters 
      priority 250 
      tracking-options 
        trunk 1 priority-cost 60 
        gateway 172.22.99.254 priority-cost 100 
  device-context 2
    blade-parameters 
      priority 200 
      tracking-options 
        trunk 1 priority-cost 60 
        gateway 172.22.99.254 priority-cost 100 
!
ip nat pool cmc-nat 223.96.100.4 223.96.100.6 netmask /24 ip-rr 
!
ip nat pool ctc-nat 122.227.231.4 122.227.231.6 netmask /24 ip-rr 
!
ip nat pool ctc-nat1 122.227.232.1 122.227.232.3 netmask /24 
!
ip nat pool cuc-nat 60.12.220.4 60.12.220.6 netmask /24 ip-rr 
!
ip nat pool-group cmc-pool 
  member cmc-nat 
!
ip nat pool-group ctc-pool 
  member ctc-nat1 
!
ip nat pool-group cuc-pool 
  member cuc-nat 
!
device-context 1
  enable-management service ssh 
    ve 1001
    ve 2001
!
device-context 2
  enable-management service ssh 
    ve 1001
    ve 2001
!
device-context 1
  ip route 0.0.0.0 /0 122.227.231.251 
  ip route 0.0.0.0 /0 223.96.100.250 20 
  ip route 0.0.0.0 /0 60.12.220.250 10 
!
device-context 1
  ip route 10.0.0.0 /8 172.22.99.10 
!
device-context 1
  ip route 172.22.0.0 /16 172.22.99.10 
!
device-context 2
  ip route 0.0.0.0 /0 122.227.231.251 
  ip route 0.0.0.0 /0 60.12.220.254 10 
  ip route 0.0.0.0 /0 223.96.100.254 20 
!
slb resource-usage client-ssl-template-count 8192 
slb resource-usage conn-reuse-template-count 4096 
slb resource-usage fast-tcp-template-count 4096 
slb resource-usage fast-udp-template-count 4096 
slb resource-usage http-template-count 4096 
slb resource-usage nat-pool-addr-count 2000 
slb resource-usage persist-cookie-template-count 4096 
slb resource-usage persist-srcip-template-count 4096 
slb resource-usage proxy-template-count 4096 
slb resource-usage real-port-count 16384 
slb resource-usage real-server-count 8192 
slb resource-usage server-ssl-template-count 8192 
slb resource-usage service-group-count 8192 
slb resource-usage stream-template-count 4096 
slb resource-usage virtual-port-count 8192 
slb resource-usage virtual-server-count 4096 
slb resource-usage health-monitor-count 1024 
!
health monitor check-ctc-baidu 
  method external program ext-ping arguments "ve3001 122.227.231.251" 
!
health monitor check-cuc-baidu 
  method external program ext-ping arguments "ve3002 60.12.220.250" 
!
health monitor check-cmc-baidu 
  method external program ext-ping arguments "ve3003 223.96.100.250" 
!
health monitor check-ctc-taobao 
  method external program ext-ping arguments "ve3001 122.227.231.251" 
!
health monitor check-cuc-taobao 
  method external program ext-ping arguments "ve3002 60.12.220.250" 
!
health monitor check-cmc-taobao 
  method external program ext-ping arguments "ve3003 223.96.100.250" 
!
health monitor check-ctc 
  method compound sub check-ctc-baidu sub check-ctc-taobao or
!
health monitor check-cuc 
  method compound sub check-cuc-baidu sub check-cuc-taobao or
!       
health monitor check-cmc 
  method compound sub check-cmc-baidu sub check-cmc-taobao or
!
slb template port ctc-snat-temp 
  source-nat ctc-pool 
!
slb template port cuc-snat-temp 
  source-nat cuc-pool 
!
slb template port cmc-snat-temp 
  source-nat cmc-pool 
!
slb server gw-cmc 223.96.100.250 
  health-check check-cmc 
  port 0 tcp 
    template port cmc-snat-temp 
    health-check-disable 
  port 0 udp 
    template port cmc-snat-temp 
    health-check-disable 
  port 10 tcp 
!
slb server gw-ctc 122.227.231.251 
  health-check check-ctc 
  port 0 tcp 
    template port ctc-snat-temp 
    health-check-disable 
  port 0 udp 
    template port ctc-snat-temp 
    health-check-disable 
!
slb server gw-cuc 60.12.220.250 
  health-check check-cuc 
  port 0 tcp 
    template port cuc-snat-temp 
    health-check-disable 
  port 0 udp 
    template port cuc-snat-temp 
    health-check-disable 
!
slb service-group gw-all-tcp tcp 
  method src-ip-hash 
  health-check-disable 
  member gw-cmc 0 
  member gw-ctc 0 
  member gw-cuc 0 
!
slb service-group gw-all-udp udp 
  health-check-disable 
  member gw-cmc 0 
  member gw-ctc 0 
  member gw-cuc 0 
!
slb service-group gw-cmc-tcp tcp 
  health-check-disable 
  member gw-cmc 0 
    priority 15 
  member gw-ctc 0 
    priority 10 
  member gw-cuc 0 
    priority 5 
!
slb service-group gw-cmc-udp udp 
  health-check-disable 
  member gw-cmc 0 
    priority 15 
  member gw-ctc 0 
    priority 10 
  member gw-cuc 0 
    priority 5 
!
slb service-group gw-ctc-tcp tcp 
  health-check-disable 
  member gw-cmc 0 
    priority 10 
  member gw-ctc 0 
    priority 15 
  member gw-cuc 0 
    priority 5 
!
slb service-group gw-ctc-udp udp 
  health-check-disable 
  member gw-cmc 0 
    priority 10 
  member gw-ctc 0 
    priority 15 
  member gw-cuc 0 
    priority 5 
!
slb service-group gw-cuc-tcp tcp 
  health-check-disable 
  member gw-cmc 0 
    priority 5 
  member gw-ctc 0 
    priority 10 
  member gw-cuc 0 
    priority 15 
!
slb service-group gw-cuc-udp udp 
  health-check-disable 
  member gw-cmc 0 
    priority 5 
  member gw-ctc 0 
    priority 10 
  member gw-cuc 0 
    priority 15 
!
slb template persist destination-ip p-dip 
!
slb template tcp temp-tcp-60s 
  idle-timeout 60 
  reset-fwd 
  reset-rev 
!
slb template udp temp-udp-60s 
  idle-timeout 60 
!
slb virtual-server llb-out 0.0.0.0 
  port 0 others 
    clientip-sticky-nat 
    aflex llb-out-udp 
    service-group gw-all-udp 
    template persist destination-ip p-dip 
    template udp temp-udp-60s 
    no-dest-nat 
  port 0 tcp 
    clientip-sticky-nat 
    aflex llb-out-tcp 
    service-group gw-all-tcp 
    template persist destination-ip p-dip 
    template tcp temp-tcp-60s 
    no-dest-nat 
  port 0 udp 
    clientip-sticky-nat 
    aflex llb-out-udp 
    service-group gw-all-udp 
    template persist destination-ip p-dip 
    template udp temp-udp-60s 
    no-dest-nat 
!
sflow setting local-collection 
!
sflow collector ip 127.0.0.1 6343 
!
!
end
!Current config commit point for partition 0 is 0 & config mode is classical-mode
LLB-11-Active-affinity-def-vMaster[1/1]# 
发布日期:
分类:A10 标签: