H3C MSR路由器出口双线负载均衡

# MSR路由器出口双线负载均衡

需求：
采用双出口NQA + 路由 + Track检测实现负载均衡

## 拓扑：

![](/media/202207/2022-07-01_145243_054954.png)

## 配置

**核心交换机配置：**
```shell
# 配置vlan 1地址
interface Vlan-interface1
ip address 192.168.0.1 255.255.255.0
quit
# 配置dhcp
dhcp enable
# 配置地址池
dhcp server ip-pool vlan1
gateway-list 192.168.0.1
network 192.168.0.0 mask 255.255.255.0
dns-list 114.114.114.114
quit
# 配置接口地址
interface GigabitEthernet1/0/3
port link-mode route
combo enable fiber
ip address 10.0.0.2 255.255.255.252
quit
# 配置路由
ip route-static 0.0.0.0 0 10.0.0.1
```
**网关gateway配置:**
```shell
# 配置接口地址
interface GigabitEthernet0/0
ip address 10.0.0.1 255.255.255.252
#
interface GigabitEthernet0/1
 port link-mode route
 combo enable copper
 ip address 100.1.1.1 255.255.255.252
#
interface GigabitEthernet0/2
 port link-mode route
 combo enable copper
 ip address 200.1.1.1 255.255.255.252
#
# 配置回指路由
ip route-static 192.168.0.0 24 10.0.0.2
```

**外网Internet路由器配置：**
```shell
# 接口地址配置
interface GigabitEthernet0/0
 port link-mode route
 combo enable copper
 ip address 100.1.1.2 255.255.255.252
#
interface GigabitEthernet0/2
 port link-mode route
 combo enable copper
 ip address 200.1.1.2 255.255.255.252
#
interface LoopBack0
 ip address 192.168.1.1 255.255.255.0

# 路由指向
 ip route-static 192.168.0.0 24 100.1.1.1
 ip route-static 192.168.0.0 24 200.1.1.1
```

## NQA、Track、路由联动配置
```shell
# 创建两个实例分别检测两条线路
# NQA admin dia0
nqa entry admin dia0           # 创建一个管理员为admin ，标记为dia0的实例
 type icmp-echo                # 实例类型为icmp-echo
  destination ip 100.1.1.2     # 目的地址是100.1.1.2
  frequency 5000               # 频率为5000毫秒一次
  history-record enable        # 开启查看NQA历史探测功能
  history-record number 10     # 历史保留10次记录
  probe count 10               # 每次探测10次
  probe timeout 500            # 每次超时500毫秒
  reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only # reaction 1 可以配置多项，consecutive 连续5次失败，发送其他检测模块消息为track调用

# NQA admin dia1
nqa entry admin dia1
 type icmp-echo
  destination ip 200.1.1.2
  frequency 5000
  history-record enable
  history-record number 10
  probe count 10
  probe timeout 500
  reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only

# Track配置
# 分别创建两个track实例调用不同的nqa实例
track 1 nqa entry admin dia0 reaction 1        # 第一个实例调用dia0的reaction 1
track 2 nqa entry admin dia1 reaction 1        # 第一个实例调用dia1的reaction 1

# 创建路由绑定track实例
 ip route-static 0.0.0.0 0 100.1.1.2 track 1
 ip route-static 0.0.0.0 0 200.1.1.2 track 2

# 启动NQA
 nqa schedule admin dia0 start-time now lifetime forever      # 启动NQA，持续时间永久
 nqa schedule admin dia1 start-time now lifetime forever      # 启动NQA，持续时间永久
```
查看状态：
```shell
# 查看nqa历史以及状态
dis nqa history
[Gateway]dis nqa history admin dia0
NQA entry (admin admin, tag dia0) history records:
Index      Response     Status           Time
5960       1            Succeeded        2022-07-01 14:47:25.0
5959       1            Succeeded        2022-07-01 14:47:25.0
5958       1            Succeeded        2022-07-01 14:47:25.0
5957       1            Succeeded        2022-07-01 14:47:25.0
5956       1            Succeeded        2022-07-01 14:47:25.0
5955       1            Succeeded        2022-07-01 14:47:25.0
5954       1            Succeeded        2022-07-01 14:47:25.0
5953       1            Succeeded        2022-07-01 14:47:25.0
5952       1            Succeeded        2022-07-01 14:47:25.0
5951       1            Succeeded        2022-07-01 14:47:25.0
#

[Gateway]dis nqa result admin dia0
NQA entry (admin admin, tag dia0) test results:
    Send operation times: 10             Receive response times: 10
    Min/Max/Average round trip time: 1/1/1
    Square-Sum of round trip time: 10
    Last succeeded probe time: 2022-07-01 14:47:45.0
  Extended results:
    Packet loss ratio: 0%
    Failures due to timeout: 0
    Failures due to internal error: 0
    Failures due to other errors: 0

## 查看Track状态
# Positive代表ICMP联通性正常，下面有时间。
[Gateway]dis track 1
Track ID: 1
  State: Positive
  Duration: 0 days 0 hours 26 minutes 39 seconds
  Tracked object type: NQA
  Notification delay: Positive 0, Negative 0 (in seconds)
  Tracked object:
    NQA entry: admin dia0
    Reaction: 1
    Remote IP/URL: 100.1.1.2
    Local IP: --
    Interface: --
# 在外网internet路由器关闭端口，显示Negative状态，时间过去7秒了，掉线。然后关联的路由会及时切换
[Gateway]dis track 1
Track ID: 1
  State: Negative
  Duration: 0 days 0 hours 0 minutes 7 seconds
  Tracked object type: NQA
  Notification delay: Positive 0, Negative 0 (in seconds)
  Tracked object:
    NQA entry: admin dia0
    Reaction: 1
    Remote IP/URL: 100.1.1.2
    Local IP: --
    Interface: --
## 路由状态会及时切换
[Gateway]dis ip routing-table

Destinations : 18       Routes : 18

Destination/Mask   Proto   Pre Cost        NextHop         Interface
0.0.0.0/0          Static  60  0           200.1.1.2       GE0/2
0.0.0.0/32         Direct  0   0           127.0.0.1       InLoop0
10.0.0.0/30        Direct  0   0           10.0.0.1        GE0/0
10.0.0.0/32        Direct  0   0           10.0.0.1        GE0/0
10.0.0.1/32        Direct  0   0           127.0.0.1       InLoop0
10.0.0.3/32        Direct  0   0           10.0.0.1        GE0/0
127.0.0.0/8        Direct  0   0           127.0.0.1       InLoop0
127.0.0.0/32       Direct  0   0           127.0.0.1       InLoop0
127.0.0.1/32       Direct  0   0           127.0.0.1       InLoop0
127.255.255.255/32 Direct  0   0           127.0.0.1       InLoop0
192.168.0.0/24     Static  60  0           10.0.0.2        GE0/0
200.1.1.0/30       Direct  0   0           200.1.1.1       GE0/2
200.1.1.0/32       Direct  0   0           200.1.1.1       GE0/2
200.1.1.1/32       Direct  0   0           127.0.0.1       InLoop0
200.1.1.3/32       Direct  0   0           200.1.1.1       GE0/2
224.0.0.0/4        Direct  0   0           0.0.0.0         NULL0
224.0.0.0/24       Direct  0   0           0.0.0.0         NULL0
255.255.255.255/32 Direct  0   0           127.0.0.1       InLoop0

```
开启负载均衡。
```shell
# 开启全局负载均衡
ip load-sharing mode per-flow global
# 通过终端ping -r 目的地址进行测试路径
```