网通光纤+电信ADSL双ISP线路cisco2811配置分析

网通光纤+电信ADSL双ISP线路cisco2811配置分析

---

vpdn enable
!
vpdn-group 1
request-dialin
protocol pppoe
l2tp tunnel receive-window 1024
!
!
!
!
username cisco privilege 15 secret 5 $1$FLR0$NgFyV2FXlrfO7K31.Vz6X.
archive
log config
hidekeys
!
!
!
!
!
interface FastEthernet0/0
ip address 220.249.20.41 255.255.255.0
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
pppoe enable
pppoe-client dial-pool-number 1
no cdp enable
!
interface FastEthernet0/1/0
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface Dialer1
mtu 1492
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
no ip mroute-cache
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication pap chap callin
ppp chap hostname
ppp chap password 0 88888888
ppp pap sent-username password 0 88888888
!
no ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 220.249.20.1
ip route 0.0.0.0 0.0.0.0 Dialer1 permanent
!
!
ip http server
ip nat inside source route-map adsl interface Dialer1 overload
ip nat inside source route-map wangtong interface FastEthernet0/0 overload
ip nat inside source static tcp 192.168.1.2 20 220.249.20.55 20 extendable
ip nat inside source static tcp 192.168.1.2 21 220.249.20.55 21 extendable
ip nat inside source static tcp 192.168.1.2 80 220.249.20.55 80 extendable
ip nat inside source static tcp 192.168.1.2 3389 220.249.20.55 3389 extendable
!
logging trap debugging
logging 192.168.1.2
access-list 1 permit 192.168.1.0 0.0.0.255
route-map wangtong permit 10
match ip address 1
match interface FastEthernet0/0
!
route-map adsl permit 10
match ip address 1
match interface Dialer1
!
以上配置是想实现双线路负载均衡.内网用户较少时,网络很正常,用户流量增加后,路由器CPU就达到50%.内网打开网页很慢,外部访问WEB服务器也很慢,PING掉包严重.
请大家帮忙分析原因:是策略路由配置不正确?还是路由器性能不足?~~~~~~