Implementation of link load balancing: fixed IP address and VPN Environment

I. User Network Structure

1. the user has two fixed IP addresses in the initial status. The public network goes online, and one Telecom is moved one by one.

2. the VPN device has been connected to three public network ports, in which China Telecom is directly connected to the WAN port of the VPN device, and the mobile line is divided into two lines through a switch, connect to the WAN1 and WAN2 ports of the VPN device.

3. the LAN port address is 192.168.111.1.

4. Establish a VPN channel with the WAN2 port and the foreign CISCO router.

5. There is an email server in the Intranet. The user maps the port on the WAN port and the WAN1 port for the public network users to use.

Ii. User Requirements

1. When an intranet user accesses the Internet, the bandwidth of the two public lines is relatively random, which often causes excessive congestion on one line. Two schemes for balanced utilization of public network bandwidth are required.

2. The created VPN channel cannot be interrupted. You must ensure that the operation is uninterrupted for 24 hours.

3. For the company's intranet mail server, port ing is required on both public lines to serve the Internet user groups on different lines.

Iii. Solution

1. Add a link load balancing device in the solution, connect the network cables connected to the WAN port and WAN1 port of the VPN device to the link Load Balancing Device. The line of the WAN2 port on the VPN device is retained without affecting the established VPN channel.

2. Configure the LAN port address of the link Server Load balancer device to 192.168.111.1. The LAN port address of the original VPN is changed to 192.168.111.2.

3. Add a static route on the Link Server Load balancer device. If the target address is a foreign company network, the system automatically jumps to the LAN port of the VPN to use the established VPN channel.

4. Configure two IP addresses for the email server and map them to the two public network ports of the link Server Load balancer device. In addition, in the Policy Routing of The Link Server Load balancer device, assign two IP addresses of the email server to access the Internet using the mapped port.

5. Finally, configure the load policy on the Link Server Load balancer device. Other computers on the Intranet access the Internet through two Internet lines on average through the load policy to achieve line balancing.

4. network topology after completion