基于策略路由的双出双入边界路由设计与实现

Policy routing planning and design of campus network connected with two ISPs

园区网双出口接入互联网络可以达到资源互补的目的,实现这个目标的关键在于为连接两个ISP的路由器上正确地规划路由。本文从园区网的典型需求个案分析入手,研究了如何通过在边缘路由器上构造访问控制列表和策略路由来分配流量并进行地址转换。还特别分析了由于地址转换以及进出数据包路径不一致带来的外部用户无法正常访问内部服务器的问题,并给出了解决办法。

The campus network connected to two ISPs at the same time can achieve the purpose of sharing resources effectively. The key to achieving the purpose lies in a reasonable designing of the routing in routers connected with two ISPs. Based on a case study of the typical requirement of a campus network, this article makes a research on how to allocate flow and shift the IP to realize NAT through building ACL and strategic routing in boundary router. In addition, the paper illustrates the problem that the servers in campus network are unable to be visited because of the NAT and the inconsistent way of the input and outflow of data packages, and gives a so- lution to the problem.