一 负载均衡配置#sysname L1000E-0102#interface Reth1 //配置冗余接口和sub地址description TO_VPNWGQ-S7506E-01ip address 192.168.105.28 255.255.255.240ip address 192.168.105.19 255.255.255.240 subip address 192.168.105.20 255.255.255.240 subip address 192.168.105.21 255.255.255.240 subip address 192.168.105.22 255.255.255.240 subip address 192.168.105.23 255.255.255.240 subip address 192.168.105.24 255.255.255.240 subip address 192.168.105.25 255.255.255.240 subip address 192.168.105.26 255.255.255.240 subip address 192.168.105.27 255.255.255.240 submember interface GigabitEthernet1/0/23 priority 100member interface GigabitEthernet2/0/23 priority 80ip last-hop hold#interface LoopBack0description router-idip address 192.168.105.252 255.255.255.255#interface LoopBack100description SSLVPN-virtual-ipip address 192.168.105.238 255.255.255.255#interface LoopBack101description IMC-virtual-ipip address 192.168.105.237 255.255.255.255#nqa template tcp t1 //配置nqa tcp模板#nqa template tcp t2#sticky-group group1 type address-port //配置基于源ip的持续性组ip sourcetimeout 600#loadbalance snat-pool snat //配置snat地址池并且配置为sub地址ip range start 192.168.105.19 end 192.168.105.27#server-farm sf-imc //配置实服务组负载均衡为源地址hashpredictor hash address sourceprobe t2#server-farm sf-ssl-8888probe t1#real-server imc-rs1 //配置实服务器地址ip address 192.168.104.5port 8080priority 8server-farm sf-imc#real-server imc-rs2ip address 192.168.104.6port 8080server-farm sf-imc#real-server ssl-rs1-8888ip address 192.168.105.29port 8888server-farm sf-ssl-8888#real-server ssl-rs2-8888ip address 192.168.105.30port 8888server-farm sf-ssl-8888#virtual-server imc type tcp //配置虚服务组port 8080virtual ip address 192.168.105.237default server-farm sf-imc sticky group1service enableconnection-sync enablesticky-sync enable#virtual-server ssl-vs1-8888 type tcpport 8888virtual ip address 192.168.105.238default server-farm sf-ssl-8888 sticky group1service enableconnection-sync enablesticky-sync enable#二 负载均衡状态查看L1000E-0102dis loadbalance snat-poolSNAT pool: snatDescription:IPv4 range:Start address End address192.168.105.19 192.168.105.27IPv6 range:Start address End address-- --L1000E-0102dis server-farmServer farm: sf-imcDescription:Predictor: Hash address source IPProximity: DisabledNAT: EnabledSNAT pool:Failed action: KeepActive threshold: DisabledSlow-online: DisabledSelected server: DisabledProbe information:Probe success criteria: AllProbe method:t2Total real server: 2Active real server: 2Real server list:Name State VPN-instance Address Port Weight Priorityimc-rs1 Active 192.168.104.5 8080 100 8imc-rs2 Active 192.168.104.6 8080 100 4Server farm: sf-ssl-8888Description:Predictor: Round robinProximity: DisabledNAT: EnabledSNAT pool:Failed action: KeepActive threshold: DisabledSlow-online: DisabledSelected server: DisabledProbe information:Probe success criteria: AllProbe method:t1Total real server: 2Active real server: 2Real server list:Name State VPN-instance Address Port Weight Priorityssl-rs1-8888 Active 192.168.105.29 8888 100 4ssl-rs2-8888 Active 192.168.105.30 8888 100 4L1000E-0102dis real-server briefReal server Address Port State VPN instance Server farmimc-rs1 192.168.104.5 8080 Active sf-imcimc-rs2 192.168.104.6 8080 Active sf-imcssl-rs1-8888 192.168.105.29 8888 Active sf-ssl-8888ssl-rs2-8888 192.168.105.30 8888 Active sf-ssl-8888L1000E-0102dis real-serverReal server: imc-rs1Description:State: ActiveVPN instance:Inherit VPN: EnableIPv4 address: 192.168.104.5IPv6 address: --Port: 8080Server farm: sf-imcWeight: 100Priority: 8Cost: 0Slow shutdown: DisabledConnection limit: --Rate limit:Connections: --Bandwidth: --Inbound bandwidth: --Outbound bandwidth: --Bandwidth busy:Max bandwidth: --Max inbound bandwidth: --Max outbound bandwidth: --Busy rate: 70Inbound busy rate: 70Outbound busy rate: 70Busy recovery rate: 60Inbound busy recovery rate: 60Outbound busy recovery rate: 60Probe information:Probe success criteria: AllProbe method Statet2 SucceededReal server: imc-rs2Description:State: ActiveVPN instance:Inherit VPN: EnableIPv4 address: 192.168.104.6IPv6 address: --Port: 8080Server farm: sf-imcWeight: 100Priority: 4Cost: 0Slow shutdown: DisabledConnection limit: --Rate limit:Connections: --Bandwidth: --Inbound bandwidth: --Outbound bandwidth: --Bandwidth busy:Max bandwidth: --Max inbound bandwidth: --Max outbound bandwidth: --Busy rate: 70Inbound busy rate: 70Outbound busy rate: 70Busy recovery rate: 60Inbound busy recovery rate: 60Outbound busy recovery rate: 60Probe information:Probe success criteria: AllProbe method Statet2 SucceededReal server: ssl-rs1-8888Description:State: ActiveVPN instance:Inherit VPN: EnableIPv4 address: 192.168.105.29IPv6 address: --Port: 8888Server farm: sf-ssl-8888Weight: 100Priority: 4Cost: 0Slow shutdown: DisabledConnection limit: --Rate limit:Connections: --Bandwidth: --Inbound bandwidth: --Outbound bandwidth: --Bandwidth busy:Max bandwidth: --Max inbound bandwidth: --Max outbound bandwidth: --Busy rate: 70Inbound busy rate: 70Outbound busy rate: 70Busy recovery rate: 60Inbound busy recovery rate: 60Outbound busy recovery rate: 60Probe information:Probe success criteria: AllProbe method Statet1 SucceededReal server: ssl-rs2-8888Description:State: ActiveVPN instance:Inherit VPN: EnableIPv4 address: 192.168.105.30IPv6 address: --Port: 8888Server farm: sf-ssl-8888Weight: 100Priority: 4Cost: 0Slow shutdown: DisabledConnection limit: --Rate limit:Connections: --Bandwidth: --Inbound bandwidth: --Outbound bandwidth: --Bandwidth busy:Max bandwidth: --Max inbound bandwidth: --Max outbound bandwidth: --Busy rate: 70Inbound busy rate: 70Outbound busy rate: 70Busy recovery rate: 60Inbound busy recovery rate: 60Outbound busy recovery rate: 60Probe information:Probe success criteria: AllProbe method Statet1 SucceededL1000E-0102dis virtual-server briefVirtual server State Type VPN instance Virtual address Portimc Active TCP 192.168.105.237/32 8080ssl-vs1-8888 Active TCP 192.168.105.238/32 8888L1000E-0102dis virtual-serverVirtual server: imcDescription:Type: TCPState: ActiveVPN instance:Virtual IPv4 address: 192.168.105.237/32Virtual IPv6 address: --Port: 8080Primary server farm: sf-imc (in use)Backup server farm:Sticky: group1LB policy:LB limit-policy:Connection limit: --Rate limit:Connections: --Bandwidth: --Inbound bandwidth: --Outbound bandwidth: --SSL server policy:Connection synchronization: EnabledSticky synchronization: EnabledBandwidth busy protection: DisabledInterface bandwidth statistics: DisabledRoute advertisement: DisabledVirtual server: ssl-vs1-8888Description:Type: TCPState: ActiveVPN instance:Virtual IPv4 address: 192.168.105.238/32Virtual IPv6 address: --Port: 8888Primary server farm: sf-ssl-8888 (in use)Backup server farm:Sticky: group1LB policy:LB limit-policy:Connection limit: --Rate limit:Connections: --Bandwidth: --Inbound bandwidth: --Outbound bandwidth: --SSL server policy:Connection synchronization: EnabledSticky synchronization: EnabledBandwidth busy protection: DisabledInterface bandwidth statistics: DisabledRoute advertisement: DisabledL1000E-0102