我有一个 cisco 2921 路由器和 2 个 wan ip,由 2 个不同的 isp 通过 dhcp 提供。主连接现在是功能性的,我有一个带有 nat 的子网到这个 ip,但我想把第二个 ip 放到另一个子网。我放了这样一条路线:
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0
和另一个IP的第二条路线:
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/1
但是当我这样做时,第二个 ip 不起作用,那么我该如何解决这个问题呢?
配置:
ip dhcp excluded-address 10.28.11.1
ip dhcp excluded-address 10.28.12.1
!
ip dhcp pool vlan 11
import all
network 10.28.11.0 255.255.255.0
domain-name *****
default-router 10.28.11.1
dns-server 1.1.1.1 208.67.220.220
lease 3
!
ip dhcp pool vlan 12
import all
network 10.28.12.0 255.255.255.0
domain-name *****
dns-server 1.1.1.1 208.67.220.220
default-router 10.28.12.1
lease 3
!
!
!
no ip domain lookup
ip domain name LAN-***
no ipv6 cef
!
multilink bundle-name authenticated
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address dhcp
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address dhcp
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/2
i no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1/0
switchport access vlan 10
no ip address
!
interface GigabitEthernet0/1/1
switchport access vlan 11
no ip address
!
interface GigabitEthernet0/1/2
switchport access vlan 10
no ip address
!
interface GigabitEthernet0/1/3
switchport access vlan 12
no ip address
!
interface Vlan1
no ip address
!
interface Vlan10
ip address 10.28.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Vlan11
ip address 10.28.11.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Vlan12
ip address 10.28.12.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat inside source list 1 interface GigabitEthernet0/0 overload
ip nat inside source list 2 interface GigabitEthernet0/0 overload
ip nat inside source list 3 interface GigabitEthernet0/1 overload
ip nat inside source static tcp 10.28.10.50 80 ****** 80 extendable
ip nat inside source static tcp 10.28.10.50 443 ****** 443 extendable
ip nat inside source static udp 10.28.10.22 1194 ****** 1194 extendable
ip nat inside source static tcp 10.28.10.20 8006 ****** 8006 extendable
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/1
!
access-list 1 permit 10.28.11.0 0.0.0.255
access-list 2 permit 10.28.10.0 0.0.0.255
access-list 3 permit 10.28.12.0 0.0.0.255