kjh00n의 기록저장소

Gateway / Link 이중화 실습 본문

보안 장비 운용

Gateway / Link 이중화 실습

kjh00n 2025. 1. 27. 12:25

내가 한거

PC1
ip 10.10.10.1 255.255.255.0 10.10.10.254

PC2
ip 20.20.20.1 255.255.255.0 20.20.20.254

R1
conf t
int fa 0/0
ip addr 10.10.10.100 255.255.255.0
no shu
int fa 0/1
ip addr 30.30.30.1 255.255.255.0
no shu
int fa 0/0
vrrp 1 ip 10.10.10.254
vrrp 1 priority 120
vrrp 1 timers advertise 5
exit
int fa 0/0
vrrp 1 track 1 decrement 30
vrrp 1 preempt delay minimum 5
router ospf 1
network 10.10.10.0 0.0.0.255 area 1
network 30.30.30.0 0.0.0.255 area 1

R2
conf t
int fa 0/0
ip addr 10.10.10.200 255.255.255.0
no shu
int fa 0/1
ip addr 40.40.40.2 255.255.255.0
no shu
int fa 0/0
vrrp 1 ip 10.10.10.254
vrrp 1 priority 110
vrrp 1 timers advertise 5
exit
router ospf 1
network 10.10.10.0 0.0.0.255 area 1
network 40.40.40.0 0.0.0.255 area 1

R3
conf t
int fa 0/0
ip addr 30.30.30.3 255.255.255.0
no shu
int fa 0/1
ip addr 40.40.40.3 255.255.255.0
no shu
int fa 1/0
ip addr 100.100.100.3 255.255.255.0
no shu
int fa 2/0
ip addr 200.200.200.3 255.255.255.0
no shu
ip sla 1
icmp-echo 100.100.100.4 source-ip 100.100.100.3
timeout 3000
frequency 4
exit
ip sla schedule 1 life forever start-time now
track 1 rtr 1 reachability
ip route 20.20.20.0 255.255.255.0 100.100.100.4 track 1
ip route 20.20.20.0 255.255.255.0 200.200.200.4 100
router ospf 1
network 30.30.30.0 0.0.0.255 area 1
network 40.40.40.0 0.0.0.255 area 1
network 100.100.100.0 0.0.0.255 area 1
network 200.200.200.0 0.0.0.255 area 1

R4
conf t
int fa 0/0
ip addr 20.20.20.254 255.255.255.0
no shu
int fa 1/0
ip addr 100.100.100.4 255.255.255.0
no shu
int fa 2/0
ip addr 200.200.200.4 255.255.255.0
no shu
ip sla 2
icmp-echo 100.100.100.3 source-ip 100.100.100.4
timeout 3000
frequency 4
exit
ip sla schedule 2 life forever start-time now
track 2 rtr 2 reachability
ip route 10.10.10.0 255.255.255.0 100.100.100.3 track 2
ip route 10.10.10.0 255.255.255.0 200.200.200.3 100
router ospf 1
network 20.20.20.0 0.0.0.255 area 1
network 100.100.100.0 0.0.0.255 area 1
network 200.200.200.0 0.0.0.255 area 1

 

R3와 R4의 주경로에서는 서로 장애 감지 여부를 확인하기 위해 icmp-echo를 보내면서 상태를 확인하고 있음
R1의 주경로와 R3와 R4의 주경로를 통해서 PC1에서 PC2로 PING 통신이 가능한 모습
R1의 주경로와 R3와 R4의 보조경로로 PING통신을 진행 (R3의 주경로는 Shutdonw진행함)


강사님 풀이

PC1
ip 10.10.10.1 255.255.255.0 10.10.10.254
PC2
ip 20.20.20.1 255.255.255.0 20.20.20.254

R1
conf t
track 1 int fa 0/1 line-protocol
int fa 0/0
ip addr 10.10.10.100 255.255.255.0
vrrp 1 ip 10.10.10.254
vrrp 1 priority 120
vrrp 1 timer advertise 5
vrrp 1 track 1 decrement 30
vrrp 1 preempt delay minimum 5
no shu
int fa 0/1
ip addr 30.30.30.1 255.255.255.0
no shu
router ospf 1
network 10.10.10.0 0.0.0.255 area 1
network 30.30.30.0 0.0.0.255 area 1
ip route 0.0.0.0 0.0.0.0 30.30.30.2

R2
conf t
int fa 0/0
ip addr 10.10.10.200 255.255.255.0
vrrp 1 ip 10.10.10.254
vrrp 1 priority 100
vrrp 1 timer advertise 5
no shu
int fa 0/1
ip addr 40.40.40.1 255.255.255.0
no shu
router ospf 1
network 10.10.10.0 0.0.0.255 area 1
network 40.40.40.0 0.0.0.255 area 1
ip route 0.0.0.0 0.0.0.0 40.40.40.2

R3
conf t
int fa 0/0
ip addr 30.30.30.2 255.255.255.0
no shu
int fa 0/1
ip addr 40.40.40.2 255.255.255.0
no shu
int fa 1/0
ip addr 100.100.100.1 255.255.255.0
no shu
int fa 2/0
ip addr 200.200.200.1 255.255.255.0
no shu
router ospf 1
network 30.30.30.0 0.0.0.255 area 1
network 40.40.40.0 0.0.0.255 area 1
exit
ip sla 1
icmp-echo 100.100.100.2 source-ip 100.100.100.1
timeout 3000
frequency 4
exit
ip sla schedule 1 life forever start-time now
track 1 rtr 1 reachability
ip route 20.20.20.0 255.255.255.0 100.100.100.2 track 1
ip route 20.20.20.0 255.255.255.0 200.200.200.2 100


R4
conf t
int fa 0/0
ip addr 20.20.20.254 255.255.255.0
no shu
int fa 1/0
ip addr 100.100.100.2 255.255.255.0
no shu
int fa 2/0
ip addr 200.200.200.2 255.255.255.0
no shu
ip sla 1
icmp-echo 100.100.100.1 source-ip 100.100.100.2
timeout 3000
frequency 4
exit
ip sla schedule 1 life forever start-time now
track 1 rtr 1 reachability
ip route 10.10.10.0 255.255.255.0 100.100.100.1 track 1
ip route 10.10.10.0 255.255.255.0 200.200.200.1 100

'보안 장비 운용' 카테고리의 다른 글

Gateway 이중화  (0) 2025.01.27
Link 이중화  (0) 2025.01.27
PVST 실습  (0) 2025.01.24
이중화 (Redundancy)  (0) 2025.01.24
로드 밸런싱  (0) 2025.01.24