{"id":7054,"date":"2022-04-22T14:51:57","date_gmt":"2022-04-22T21:51:57","guid":{"rendered":"https:\/\/www.xh86.me\/?p=7054"},"modified":"2022-04-22T14:51:57","modified_gmt":"2022-04-22T21:51:57","slug":"vrf-%e5%ad%90%e6%8e%a5%e5%8f%a3-nat%ef%bc%8c%e6%94%b9%e8%bf%9b%e5%a4%a7%e4%b8%8d%e5%a4%a7%ef%bc%9f","status":"publish","type":"post","link":"https:\/\/www.xh86.me\/?p=7054","title":{"rendered":"VRF + \u5b50\u63a5\u53e3 + NAT\uff0c\u6539\u8fdb\u5927\u4e0d\u5927\uff1f"},"content":{"rendered":"
\n
<\/section>\n

\u4e0a\u6b21\uff08\u907f\u514d\u8def\u7531\u6cc4\u9732\uff0cVPN\u5b9e\u4f8b\u6d41\u91cf\u600e\u4e48\u4e92\u901a\uff1f\uff09\u6211\u4eec\u7528\u5b50\u63a5\u53e3\u7684\u65b9\u5f0f\u662fVRF\u5185\u7684\u6d41\u91cf\u8fdb\u884c\u4e86\u6c47\u805a\uff0c\u786e\u5b9e\u5c11\u8003\u8651\u4e86\u4e00\u79cd\u60c5\u51b5\uff0c\u90a3\u5c31\u662f3\u4e2a\u5185\u7f51\u7f51\u5173\u79c1\u7f51\u7f51\u6bb5\u76f8\u540c\u7684\u573a\u666f\u3002\u6bd5\u7adf\u5728\u516c\u6709\u4e91\u573a\u666f\u4e2d\uff0c\u79df\u6237\u7684\u79c1\u7f51\u7f51\u6bb5\u91cd\u5408\u662f\u5e38\u4e8b\uff0c\u90a3\u600e\u4e48\u89e3\u51b3\u5462\uff1f<\/p>\n

\u5f88\u7b80\u5355\uff0c\u52a0\u4e2aNAT\u4e0d\u5c31\u89e3\u51b3\u4e86\u3002<\/p>\n

\n
\n
\n
<\/div><\/section>\n
\u7ec4\u7f51\u9700\u6c42<\/strong><\/span><\/section>\n
<\/div><\/section>\n<\/section>\n<\/section>\n<\/section>\n

RT1-RT3\u5206\u522b\u5bf9\u5e943\u4e2a\u5185\u7f51\u7f51\u5173\uff0c\u5185\u7f51\u7f51\u6bb5\u76f8\u540c\uff0c\u5747\u4e3a192.168.1.0\/24\u7f51\u6bb5\u3002\u7528\u6237\u6d41\u91cf\u5728POP\u4e0a\u901a\u8fc7VRF\u8fdb\u884c\u9694\u79bb\uff0c\u540c\u65f6\u9700\u8981\u7ecf\u8fc7GW\u8bbe\u5907\u8bbf\u95eeSRV\u670d\u52a1\u5668\u3002<\/p>\n

\n
\n
\n
<\/div><\/section>\n
\u7ec4\u7f51\u56fe<\/strong><\/span><\/section>\n
<\/div><\/section>\n<\/section>\n<\/section>\n<\/section>\n

VRF\u8def\u7531\u4e92\u901a\u7ec4\u7f51\u56fe\u3002<\/p>\n

<\/div><\/p>\n
\n
\n
\n
<\/div><\/section>\n
\u5b9e\u9a8c\u73af\u5883<\/strong><\/span><\/section>\n<\/section>\n<\/section>\n<\/section>\n

Windows 10\u4e13\u4e1a\u7248\uff081909-18363.1556\uff0c16 GB\u5185\u5b58\uff09<\/p>\n

HCL 3.0.1<\/p>\n

MSR 36-20\uff08Version 7.1.064, Release 0821P11\uff09<\/p>\n

\n
\n
\n
<\/div><\/section>\n
\u914d\u7f6e\u6b65\u9aa4<\/strong><\/span><\/section>\n
<\/div><\/section>\n<\/section>\n<\/section>\n<\/section>\n

\u9996\u5148\u6309\u7167\u7ec4\u7f51\u9700\u6c42\u548c\u7ec4\u7f51\u56fe\u6240\u793a\u914d\u7f6e\u5404\u63a5\u53e3\u7684IP\u5730\u5740\u548c\u63a9\u7801\uff0cPOP\u8bbe\u5907\u7684\u63a5\u53e3GE0\/1\u3001GE0\/2\u3001GE5\/0\u5206\u522b\u7ed1\u5b9aVPN\u5b9e\u4f8bRT1\u3001RT2\u548cRT3\u3002<\/p>\n

\u5bf9\u5e94\u7684\u5b50\u63a5\u53e3\u4e0b\u9762\u589e\u52a0nat outbound\u914d\u7f6e\u3002<\/p>\n

\u6574\u4f53\u6ca1\u6709\u4ec0\u4e48\u96be\u70b9\uff0c\u76f4\u63a5\u4e0a\u8bbe\u5907\u914d\u7f6e\uff1a<\/p>\n

\n
\n
\n
<\/div><\/section>\n
POP<\/strong><\/span><\/section>\n<\/section>\n<\/section>\n<\/section>\n
\n
#<\/span><\/span><\/code>sysname<\/span> POP<\/span><\/span><\/code>#<\/span><\/span><\/code>ip<\/span> vpn-instance RT1<\/span><\/span><\/code> route-distinguisher<\/span> 11:11<\/span><\/span><\/code> vpn-target<\/span> 11:11 import-extcommunity<\/span><\/span><\/code> vpn-target<\/span> 11:11 export-extcommunity<\/span><\/span><\/code>#<\/span><\/span><\/code>ip<\/span> vpn-instance RT2<\/span><\/span><\/code> route-distinguisher<\/span> 22:22<\/span><\/span><\/code> vpn-target<\/span> 22:22 import-extcommunity<\/span><\/span><\/code> vpn-target<\/span> 22:22 export-extcommunity<\/span><\/span><\/code>#<\/span><\/span><\/code>ip<\/span> vpn-instance RT3<\/span><\/span><\/code> route-distinguisher<\/span> 33:33<\/span><\/span><\/code> vpn-target<\/span> 33:33 import-extcommunity<\/span><\/span><\/code> vpn-target<\/span> 33:33 export-extcommunity<\/span><\/span><\/code>#<\/span><\/span><\/code>interface<\/span> GigabitEthernet0\/0<\/span><\/span><\/code> ip<\/span> binding vpn-instance RT1<\/span><\/span><\/code> ip<\/span> address 192.168.1.1 255.255.255.0<\/span><\/span><\/code>#<\/span><\/span><\/code>interface<\/span> GigabitEthernet0\/1<\/span><\/span><\/code> ip<\/span> binding vpn-instance RT2<\/span><\/span><\/code> ip<\/span> address 192.168.1.1 255.255.255.0<\/span><\/span><\/code>#<\/span><\/span><\/code>interface<\/span> GigabitEthernet0\/2<\/span><\/span><\/code> ip<\/span> binding vpn-instance RT3<\/span><\/span><\/code> ip<\/span> address 192.168.1.1 255.255.255.0<\/span><\/span><\/code>#<\/span><\/span><\/code>interface<\/span> GigabitEthernet5\/0.1<\/span><\/span><\/code> ip<\/span> binding vpn-instance RT1<\/span><\/span><\/code> ip<\/span> address 10.2.1.2 255.255.255.0<\/span><\/span><\/code> nat<\/span> outbound vpn-instance RT1<\/span><\/span><\/code> vlan-type<\/span> dot1q vid 10<\/span><\/span><\/code>#<\/span><\/span><\/code>interface<\/span> GigabitEthernet5\/0.2<\/span><\/span><\/code> ip<\/span> binding vpn-instance RT2<\/span><\/span><\/code> ip<\/span> address 10.2.2.2 255.255.255.0<\/span><\/span><\/code> nat<\/span> outbound vpn-instance RT2<\/span><\/span><\/code> vlan-type<\/span> dot1q vid 20<\/span><\/span><\/code>#<\/span><\/span><\/code>interface<\/span> GigabitEthernet5\/0.3<\/span><\/span><\/code> ip<\/span> binding vpn-instance RT3<\/span><\/span><\/code> ip<\/span> address 10.2.3.2 255.255.255.0<\/span><\/span><\/code> nat<\/span> outbound vpn-instance RT3<\/span><\/span><\/code> vlan-type<\/span> dot1q vid 30<\/span><\/span><\/code>#<\/span><\/span><\/code>ip<\/span> route-static vpn-instance RT1 0.0.0.0 0 10.2.1.1<\/span><\/span><\/code>ip<\/span> route-static vpn-instance RT2 0.0.0.0 0 10.2.2.1<\/span><\/span><\/code>ip<\/span> route-static vpn-instance RT3 0.0.0.0 0 10.2.3.1<\/span><\/span><\/code><\/pre>\n<\/section>\n
\n
\n
\n
<\/div><\/section>\n
GW<\/strong><\/span><\/section>\n<\/section>\n<\/section>\n<\/section>\n
\n
#<\/span><\/span><\/code>interface<\/span> GigabitEthernet0\/0<\/span>.1<\/span><\/span><\/code> ip address 10.2.1.1<\/span> 255.255.255.0<\/span><\/span><\/code> vlan-type dot1q vid 10<\/span><\/span><\/code>#<\/span><\/span><\/code>interface GigabitEthernet0\/0<\/span>.2<\/span><\/span><\/code> ip address 10.2.2.1<\/span> 255.255.255.0<\/span><\/span><\/code> vlan-type dot1q vid 20<\/span><\/span><\/code>#<\/span><\/span><\/code>interface GigabitEthernet0\/0<\/span>.3<\/span><\/span><\/code> ip address 10.2.3.1<\/span> 255.255.255.0<\/span><\/span><\/code> vlan-type dot1q vid 30<\/span><\/span><\/code>#<\/span><\/span><\/code>interface GigabitEthernet0\/1<\/span><\/span><\/code> ip address 10.3.1.2<\/span> 255.255.255.0<\/span><\/span><\/code> nat outbound<\/span><\/code><\/pre>\n<\/section>\n
\n
\n
\n
<\/div><\/section>\n
SRV<\/strong><\/span><\/section>\n<\/section>\n<\/section>\n<\/section>\n
\n
#<\/span><\/span><\/code>interface<\/span> GigabitEthernet0\/0<\/span><\/span><\/code> ip address 10.3.1.1<\/span> 255.255.255.0<\/span><\/span><\/code><\/pre>\n<\/section>\n
\n
\n
\n
<\/div><\/section>\n
\u9a8c\u8bc1\u914d\u7f6e<\/strong><\/span><\/section>\n
<\/div><\/section>\n<\/section>\n<\/section>\n<\/section>\n
\u6b64\u65f6\u6211\u4eec\u5148\u67e5\u770bPOP\u8bbe\u5907\u7684VRF\u8def\u7531\u8868\u4fe1\u606f\u3002<\/p>\n
<\/div><\/p>\n
\u5728\u67e5\u770bGW\u8bbe\u5907\u7684\u8def\u7531\u8868\u4fe1\u606f\uff0c\u56e0\u4e3a\u5728POP\u8bbe\u5907\u4e0a\u5f00\u542f\u4e86NAT\uff0c\u6240\u4ee5GW\u8bbe\u5907\u4e0a\u4e5f\u5c31\u4e0d\u9700\u8981\u6dfb\u52a0\u9759\u6001\u8def\u7531\u4e86\uff0c\u914d\u7f6e\u91cf\u6709\u6240\u964d\u4f4e\u3002<\/p>\n
<\/div><\/p>\n
\u5206\u522b\u4eceRT1-RT3\u8bbe\u5907\u4e0aPING\u6d4bSRV\u8bbe\u5907\uff0c\u67e5\u770b\u8fde\u901a\u6027\u3002<\/p>\n
<\/div><\/p>\n
\u8bbf\u95ee\u90fd\u662f\u6b63\u5e38\u7684\u3002<\/p>\n
<\/div><\/p>\n
\u770b\u4e00\u4e0b\u8f6c\u53d1\u8def\u5f84\u3002<\/p>\n
<\/div><\/p>\n
\u548c\u4e0a\u6b21\u7684\u65b9\u6848\u5bf9\u6bd4\u4e00\u4e0b\uff0c\u53ef\u4ee5\u53d1\u73b0\u4eca\u5929\u7684\u65b9\u6848\u6709\u4e24\u4e2a\u6539\u8fdb\u7684\u5730\u65b9\u3002<\/p>\n
1\u3001\u914d\u7f6e\u540c\u6837\u662f\u4e3b\u8981\u96c6\u4e2d\u5728POP\u8bbe\u5907\u4e0a\uff0c\u8fd9\u6b21GW\u8bbe\u5907\u4e0a\u4e0d\u9700\u8981\u589e\u52a0\u56de\u7a0b\u8def\u7531\u4e86\uff0c\u5de5\u4f5c\u91cf\u6709\u5c11\u91cf\u51cf\u5c11\u3002<\/p>\n
2\u3001\u4e4b\u524d\u7684\u4e24\u4e2a\u65b9\u6848\u90fd\u9700\u8981\u589e\u52a0\u9650\u5236\u7b56\u7565\u9650\u5236\u4e92\u8bbf\uff0c\u800c\u4f7f\u7528\u4e86NAT\u4e4b\u540e\uff0c\u4e0d\u9700\u8981\u518d\u505a\u989d\u5916\u7684\u9650\u5236\uff0c\u5bf9\u4e8e\u79c1\u7f51\u7f51\u6bb5\u662f\u76f8\u540c\u7684\u8fd8\u662f\u4e0d\u540c\u7684\u4e5f\u4e0d\u518d\u5173\u6ce8\u3002<\/p>\n
\u4e0d\u8fc7\u6709\u4e00\u4e2a\u914d\u7f6e\u7684\u5173\u952e\u70b9\u9700\u8981\u6ce8\u610f\uff0c\u4f60\u53ef\u80fd\u4e5f\u53d1\u73b0\u4e86\uff0c\u914d\u7f6eNAT\u7684\u547d\u4ee4\u662fnat outbound vpn-instance RT1\uff0c\u589e\u52a0VPN\u5b9e\u4f8b\u540d\u79f0\u7528\u4e8e\u6307\u5b9a\u5730\u5740\u7ec4\u4e2d\u7684\u5730\u5740\u6240\u5c5e\u7684VPN\u5b9e\u4f8b\u3002\u5982\u679c\u4e0d\u6307\u5b9aVPN\u5b9e\u4f8b\u540d\u79f0\uff0c\u5219\u8868\u793a\u5730\u5740\u7ec4\u4e2d\u7684\u5730\u5740\u4e0d\u5c5e\u4e8e\u4efb\u4f55\u4e00\u4e2aVPN\u5b9e\u4f8b\uff0c\u4e5f\u5c31\u662fNAT\u4f1a\u8bdd\u5728\u5168\u5c40\u8868\u9879\u4e2d\uff0c\u62a5\u6587\u53ef\u4ee5\u51fa\u53bb\uff0c\u4f46\u56de\u5c31\u56de\u4e0d\u6765\u4e86\u3002<\/strong>\u901a\u8fc7debug\u53ef\u4ee5\u770b\u5230\u3002<\/p>\n
<\/div><\/p>\n
\u5f53\u7136\uff0cNAT\u6307\u5b9aVPN\u5b9e\u4f8b\u4e5f\u53ef\u4ee5\u5b9e\u73b0\u6d41\u91cf\u7684\u8de8VRF\u4e92\u8bbf<\/strong>\uff0c\u8fd9\u4e0d\u662f\u672c\u6b21\u7814\u7a76\u7684\u91cd\u70b9\uff0c\u5c31\u4e0d\u518d\u8d58\u8ff0\u4e86<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
\u4e0a\u6b21\uff08\u907f\u514d\u8def\u7531\u6cc4\u9732\uff0cVPN\u5b9e\u4f8b\u6d41\u91cf\u600e\u4e48\u4e92\u901a\uff1f\uff09\u6211\u4eec\u7528\u5b50\u63a5\u53e3\u7684\u65b9\u5f0f\u662fVRF\u5185\u7684\u6d41\u91cf\u8fdb\u884c\u4e86\u6c47\u805a\uff0c\u786e\u5b9e\u5c11\u8003\u8651\u4e86\u4e00\u79cd\u60c5 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19,2],"tags":[],"class_list":["post-7054","post","type-post","status-publish","format-standard","hentry","category-19","category-network"],"_links":{"self":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/7054","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7054"}],"version-history":[{"count":1,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/7054\/revisions"}],"predecessor-version":[{"id":7832,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/7054\/revisions\/7832"}],"wp:attachment":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7054"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7054"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7054"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}