¹ÌÅ©·Îƽ CCR1036/CCR1072 NAT ÆÛÆ÷¸Õ½º ¾î´ÀÁ¤µµ ³ª¿À³ª¿ä?

   Á¶È¸ 3865   Ãßõ 0    

Cisco ISR 4000 시리즈를 쓰고 있는데 처리량이 부족해서 업그레이드를 하려고 합니다.

Cisco ASR 1000 시리즈로 업글하면 되긴 할텐데, 미크로틱도 한번 고려해 보고 싶습니다.

요구사항은 대략 3Gbps, acl rule 300 lines, 300,000 translation entries 입니다.

감사합니다.


현재 nat stat입니다. 속도는 1Gbps 살짝 안나오네요.

#sh ip nat statistics 
Total active translations: 110182 (2 static, 110180 dynamic; 110182 extended)
Outside interfaces:
  GigabitEthernet0/0/0, GigabitEthernet1/0/0.15, GigabitEthernet1/0/0.4001
Inside interfaces: 
  GigabitEthernet1/0/0.2105, GigabitEthernet1/0/0.2205, Tunnel114, Tunnel119
  Tunnel124, Tunnel127, Tunnel211, Tunnel315, Tunnel316
Hits: 574071367313  Misses: 228119910
Expired translations: 227735628
Dynamic mappings:
-- Inside Source
[Id: 11] route-map nat-dev-outside interface GigabitEthernet0/0/0 refcount 109933
[Id: 2] access-list nat-staff-outside interface GigabitEthernet0/0/0 refcount 241
nat-limit statistics:
 max entry: max allowed 0, used 0, missed 0
In-to-out drops: 1025308  Out-to-in drops: 1955421
Pool stats drop: 0  Mapping stats drop: 1
Port block alloc fail: 6167
IP alias add fail: 0
Limit entry add fail: 0
¶óÀÌÄ« 2021-06
Cisco 1800 ¹®ºÎ ¹Þ¾Æ¼­ °øºÎÇÏ´Â ÁßÀε¥ ¤¾¤¾ °í»ýÇϽʴϴÙ
Å볪¹« 2021-06
Ȥ½Ã ISR4K ¾î¶² Àåºñ¸¦ ¾²°í °è½Å°¡¿ä? Boost License Àû¿ëÇصµ ¸ðÀÚ¶ó½Å°¡¿ä?
°¨»çÇÕ´Ï´Ù. ÀÌ ÀÚ·á´Â ºÃ¾ú´Âµ¥ nat/acl rule¿¡ °üÇÑ Å×½ºÆ® Á¤º¸´Â ¾ø´õ¶ó±¸¿ä.
ÀÎÅͳݿ¡µµ ¸î°³ ã¾ÆºÃ´Âµ¥ static nat À§ÁÖ¿©¼­, ´Ù½Ã Áú¹® ´Ù½Ã µå·È½À´Ï´Ù.
¹Ú¹®Çü 2021-06
https://www.reddit.com/r/mikrotik/comments/jo0vhj/ccr_1072_as_nat_gateway/

ÀÚ·á°¡ °ÅÀÇ ¾ø³×¿ä..

ÀçÀÏ ÁÁÀº °ÍÀº µ¥¸ð°¡ °¡´ÉÇÏ¸é µ¥¸ð¸¦ ÇÏ°í BMT Çغ¸´Â °ÍÀÌ°ÚÁÒ..

1036Àº 1G Æ÷Æ®ÀÌÁö¸¸ 1072´Â 10GÆ÷Æ®·Î µÇ¾î ÀÖ½À´Ï´Ù..
ISR4431¿¡ booster license´Â ¾ø½À´Ï´Ù. ¾²¸é ´õ ³ª¾ÆÁö±ä ÇÒ°Í °°±ä ÇÕ´Ï´Ù¸¸, ¾ó¸¶³ª ÁÁ¾ÆÁúÁöµµ ¸ð¸£°í, ¶óÀ̼¾½ºµµ ²Ï³ª ºñ½Î¼­ ²¨·ÁÁö³×¿ä.
Â÷¶ó¸® ÇâÈÄ È®Àå »ý°¢Çؼ­ »óÀ§ ±ÞÀ¸·Î »õ·Î »ç·Á°í ÇÕ´Ï´Ù.

CSR1036Àº Å×½ºÆ® °â Çؼ­ ÀÌ¹Ì ÇÑ´ë »çµÎ±ä Çߴµ¥, Router OS´Â óÀ½À̶ó BMT Á÷Á¢ ÇÏ°í´Â Àִµ¥ ½Ã°£ÀÌ ²Ï °É¸®³×¿ä.
Å볪¹« 2021-06
ISR4K¿¡ Base/Perf. ¶óÀ̼±½º »óÅ¿¡¼­ °¢ ±â´Éº°·Î ÃÖ´ë ¼Óµµ¸¦ Á¦ÇÑÇØ ³õÀº »óŶó Boost License¿¡¼­´Â ÀÌ ±â´ÉÀ» Á¦ÇÑÇϱ⠶§¹®¿¡ ¾î¶² ¼­ºñ½º¸¸ ¾²´À³Ä¿¡ µû¶ó ´Þ¶óÁö°ÚÁö¸¸ ÇÑ µÎ°³ Á¤µµ¸¸ ¾´´Ù¸é ¼Óµµ Çâ»óÀÌ ºÐ¸íÈ÷ ÀÖÀ»°Ì´Ï´Ù.

ÀÌ¹Ì CCR1036À» ±¸ÀÔÇϽŠ»óÅÂ´Ï º°·Î Àǹ̴ ¾øÀ¸½Ã°ÚÁö¸¸ ±×·¡µµ ÇÑ ¹ø ¿Ã·Áº¾´Ï´Ù.

¾Æ·¡ Boost License´Â Onboard¿¡ ³»ÀåµÈ ÀÎÅÍÆäÀ̽º¸¸ ÇØ´çµÇ°í CEF only¿¡¼­ ThroughputÀÔ´Ï´Ù.
https://www.cisco.com/c/en/us/products/collateral/routers/4000-series-integrated-services-routers-isr/data_sheet-c78-732542.html
https://miercom.com/performance-analysis-cisco-isr-4000-family/
¹Ú°Ç 2021-06
CCR1036-8G-2S+±âÁØÀ¸·Î SRC NAT·ê ÇϳªÀ̱â´Â Çѵ¥(¿©Å¸ ·ê ¾øÀ½), ´ë·« 13~14Gbps(CPU¼º´ÉÀ¸·Î´Â ´õ ³ª¿Ã °Í °°Àºµ¥, ÀÎÅÍÆäÀ̽º ÇÑ°è»ó ´õÀÌ»óÀº ºÒ°¡)±îÁö Å×½ºÆ®ÇغýÀ´Ï´Ù. CCR1009-7G-1C-1S+ ±âÁØÀ¸·Î´Â 7Gbps Á¤µµ ¿´½À´Ï´Ù.
Å볪¹«´Ô,
CPU »ç¿ë·®Àº üũÇغ¸´Ï ÃÖ´ë 3~40% Á¤µµ¶ó, ºÎ½ºÅÍ ¶óÀ̼¾½º ¼³Ä¡ÇÏ¸é ²Ï³ª Çâ»ó µÉ°Í °°½À´Ï´Ù. ÀÌÂÊÀ¸·Îµµ Çѹø °ßÀû ¹Þ¾Æº¸°Ú½À´Ï´Ù.
¹ÌÅ©·Îƽ CCR1036Àº °øºÎÇÏ·¯ »ê°Å¶ó ²À ½á¾ß ÇÏ´Â°Ç ¾Æ´Õ´Ï´Ù.

¹Ú°Ç´Ô,
°¨»çÇÕ´Ï´Ù. 13~14Gbps¸é ¿ª½Ã ²Ï³ª ³ª¿À³×¿ä. ±×Á¤µµ¸é ÃæºÐÇÕ´Ï´Ù. NAT rule ½ÇÁ¦·Î Ãß°¡Çؼ­ BMT Çغ¸°Ú½À´Ï´Ù.
Å볪¹« 2021-06
¾Æ Ãß°¡·Î Boost License´Â IOS-XE v16.7Àΰ¡ ºÎÅÍ Àû¿ë °¡´ÉÇÕ´Ï´Ù. ÀÌÀü ¹öÀüÀ» ¾²°í °è½Ã´Ù¸é ¸¶À̱׷¹ÀÌ¼Ç ÇÏ¼Å¾ß µË´Ï´Ù.
ÇöÀç TAC ±ÇÀå ¹öÀüÀº v17.3.3ÀÔ´Ï´Ù. (v3.x¿¡¼­ ¾÷±×·¹À̵å ÇϽ÷Á¸é ROMMON ¾÷±×·¹À̵嵵 ÇÔ²² ÇØÁÖ¼Å¾ß ÇÕ´Ï´Ù. ½º¸¶Æ® ¶óÀ̼±½ºµµ v16.10ºÎÅÍ Àû¿ëµÇ´Ï ÀÌ ºÎºÐµµ È®ÀÎÇÏ¼Å¾ß µÉ °Ì´Ï´Ù.)


Á¦¸ñPage 16/105
2021-11   3831   È÷¼ÒÄ«
2020-09   3833   ¾îÅÒ
2022-04   3834   ¸®µë¾Ø¹öÅÍ
2023-12   3838   »ý¸ÆÁÖ
2021-06   3840   »õ·Î¿îÂ÷¿ø
2021-10   3851   ÄܽºÅºÆ¾
2020-07   3855   ºýµ¹ÀÌ
2020-05   3857   Elsaphaba
2022-04   3859   ¿µÆ÷Åä
2021-10   3864   ¿ì·ç·ç·ç·ç·ç
2020-03   3866   ¹«ÁÙ
2021-06   3866   ¾ðÁ¨°¡´Â
2020-10   3875   Æä¼±»ý
2022-02   3875   mineroller
2021-10   3880   ¸ð¸Ê
2021-04   3881   Çб³
2021-11   3883   SDG6038
2021-12   3883   Æ®·¹
2020-05   3898   Á¶½º¹Ù
09-02   3901   ÆÒ´õ°í¶ó´Ï