> ясно, тогда как разрешить такую задачу, с трафиком, который должен быть и
> туннелем, и генерится самой циской, кроме статики, vrf, или может есть
> что-то еще?Для теннелей можно использовать tunnel route-via INTERFACE mandatory.
Для локальной cisco -- статика + sla.
Но самое полноценное решение -- раскидать все подключения по VRF.
Пример:
!
ip vrf DSV
description DSV
!
ip vrf TTK
description TTK
!
!
interface Loopback11
description VRF TTK, OSPF
ip address 192.168.0.1 255.255.255.255
!
interface Loopback12
description VRF TTK, OSPF
ip address 192.168.0.2 255.255.255.255
!
interface Loopback21
description VRF DSV, OSPF
ip address 192.168.0.3 255.255.255.255
!
interface Loopback22
description VRF DSV, OSPF
ip address 192.168.0.4 255.255.255.255
!
interface Tunnel0
description DSV-DSV
ip address 10.0.0.42 255.255.255.252
ip mtu 1400
ip ospf cost 20
ip ospf 20 area 0
tunnel source Dialer0
tunnel destination xx.xx.xx.xx
tunnel key 10
tunnel vrf DSV
!
interface Tunnel1
description TTK-DSV
ip address 10.0.0.46 255.255.255.252
ip mtu 1400
ip ospf cost 10
ip ospf 20 area 0
tunnel source FastEthernet0/1.2
tunnel destination xx.xx.xx.xx
tunnel key 11
tunnel vrf TTK
!
interface Tunnel2
description DSV-RT
ip address 10.0.0.50 255.255.255.252
ip mtu 1400
ip ospf cost 40
ip ospf 20 area 0
tunnel source Dialer0
tunnel destination yy.yy.yy.yy
tunnel key 12
tunnel vrf DSV
!
interface Tunnel3
description TTK-RT
ip address 10.0.0.54 255.255.255.252
ip mtu 1400
ip ospf cost 30
ip ospf 20 area 0
tunnel source FastEthernet0/1.2
tunnel destination YY.YY.YY.YY
tunnel key 13
tunnel vrf TTK
!
interface Tunnel4
description WHS
ip address 10.6.0.1 255.255.255.252
ip mtu 1400
ip ospf cost 10
ip ospf 20 area 0
tunnel source Dialer0
tunnel destination сс.сс.сс.сс
tunnel route-via Dialer0 mandatory
tunnel vrf DSV
!
interface Tunnel11
description VRF TTK, OSPF
ip address 192.168.0.9 255.255.255.252
tunnel source Loopback11
tunnel destination 192.168.0.2
!
interface Tunnel12
description VRF TTK, OSPF
ip vrf forwarding TTK
ip address 192.168.0.10 255.255.255.252
ip nat inside
ip virtual-reassembly
tunnel source Loopback12
tunnel destination 192.168.0.1
!
interface Tunnel21
description VRF DSV, OSPF
ip address 192.168.0.13 255.255.255.252
tunnel source Loopback21
tunnel destination 192.168.0.4
!
interface Tunnel22
description VRF DSV, OSPF
ip vrf forwarding DSV
ip address 192.168.0.14 255.255.255.252
ip nat inside
ip virtual-reassembly
tunnel source Loopback22
tunnel destination 192.168.0.3
!
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.1
encapsulation dot1Q 1 native
ip address 10.0.6.1 255.255.255.0
!
interface FastEthernet0/0.10
description LAN
encapsulation dot1Q 10
ip address 192.168.78.1 255.255.255.0
ip directed-broadcast
ip accounting output-packets
ip flow ingress
ip flow egress
ip tcp adjust-mss 1428
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
!
interface FastEthernet0/1.2
description TTK
encapsulation dot1Q 2
ip vrf forwarding TTK
ip address zz.zz.zz.zz 255.255.255.252
ip nat outside
ip virtual-reassembly
!
interface FastEthernet0/1.3
description DSV xDSL
encapsulation dot1Q 3
ip vrf forwarding DSV
ip nat outside
ip nat enable
ip virtual-reassembly
pppoe enable group global
pppoe-client dial-pool-number 1
!
interface Dialer0
mtu 1492
ip vrf forwarding DSV
ip address negotiated
ip nat outside
ip nat enable
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer idle-timeout 0
dialer-group 1
ppp authentication chap callin
ppp chap hostname XXXXXXXXXXXXX
ppp chap password 0 XXXXXXXXXXX
!
router ospf 2 vrf DSV
log-adjacency-changes
passive-interface default
no passive-interface Tunnel22
network 192.168.0.12 0.0.0.3 area 0
default-information originate
!
router ospf 1 vrf TTK
log-adjacency-changes
passive-interface default
network 192.168.0.8 0.0.0.3 area 0
default-information originate metric 110 metric-type 1
!
router ospf 20
router-id 192.168.78.1
log-adjacency-changes
passive-interface default
no passive-interface Tunnel0
no passive-interface Tunnel1
no passive-interface Tunnel2
no passive-interface Tunnel3
no passive-interface Tunnel4
network 10.0.0.40 0.0.0.3 area 0
network 10.0.0.44 0.0.0.3 area 0
network 10.0.0.48 0.0.0.3 area 0
network 10.0.0.52 0.0.0.3 area 0
network 10.0.6.0 0.0.0.255 area 0
network 192.168.78.0 0.0.0.255 area 0
!
router ospf 10
log-adjacency-changes
redistribute connected
passive-interface default
no passive-interface Tunnel11
no passive-interface Tunnel21
network 192.168.0.8 0.0.0.3 area 0
network 192.168.0.12 0.0.0.3 area 0
!
ip route vrf DSV 0.0.0.0 0.0.0.0 Dialer0
ip route vrf TTK 0.0.0.0 0.0.0.0 ZZ.ZZ.ZZ.132
!
ip nat translation tcp-timeout 240
ip nat translation udp-timeout 60
ip nat inside source list NAT interface Dialer0 vrf DSV overload
ip nat inside source list NAT interface FastEthernet0/1.2 vrf TTK overload
!
ip access-list extended NAT
deny ip 192.168.78.0 0.0.0.255 192.168.0.0 0.0.255.255
permit ip 192.168.78.0 0.0.0.255 any
permit ip 192.168.0.0 0.0.0.255 any
!
