¹ÌÅ©·Îƽ CCR1036/CCR1072 NAT ÆÛÆ÷¸Õ½º ¾î´ÀÁ¤µµ ³ª¿À³ª¿ä?

   Á¶È¸ 3851   Ãßõ 0    

Cisco ISR 4000 시리즈를 쓰고 있는데 처리량이 부족해서 업그레이드를 하려고 합니다.

Cisco ASR 1000 시리즈로 업글하면 되긴 할텐데, 미크로틱도 한번 고려해 보고 싶습니다.

요구사항은 대략 3Gbps, acl rule 300 lines, 300,000 translation entries 입니다.

감사합니다.


현재 nat stat입니다. 속도는 1Gbps 살짝 안나오네요.

#sh ip nat statistics 
Total active translations: 110182 (2 static, 110180 dynamic; 110182 extended)
Outside interfaces:
  GigabitEthernet0/0/0, GigabitEthernet1/0/0.15, GigabitEthernet1/0/0.4001
Inside interfaces: 
  GigabitEthernet1/0/0.2105, GigabitEthernet1/0/0.2205, Tunnel114, Tunnel119
  Tunnel124, Tunnel127, Tunnel211, Tunnel315, Tunnel316
Hits: 574071367313  Misses: 228119910
Expired translations: 227735628
Dynamic mappings:
-- Inside Source
[Id: 11] route-map nat-dev-outside interface GigabitEthernet0/0/0 refcount 109933
[Id: 2] access-list nat-staff-outside interface GigabitEthernet0/0/0 refcount 241
nat-limit statistics:
 max entry: max allowed 0, used 0, missed 0
In-to-out drops: 1025308  Out-to-in drops: 1955421
Pool stats drop: 0  Mapping stats drop: 1
Port block alloc fail: 6167
IP alias add fail: 0
Limit entry add fail: 0
¶óÀÌÄ« 2021-06
Cisco 1800 ¹®ºÎ ¹Þ¾Æ¼­ °øºÎÇÏ´Â ÁßÀε¥ ¤¾¤¾ °í»ýÇϽʴϴÙ
Å볪¹« 2021-06
Ȥ½Ã ISR4K ¾î¶² Àåºñ¸¦ ¾²°í °è½Å°¡¿ä? Boost License Àû¿ëÇصµ ¸ðÀÚ¶ó½Å°¡¿ä?
°¨»çÇÕ´Ï´Ù. ÀÌ ÀÚ·á´Â ºÃ¾ú´Âµ¥ nat/acl rule¿¡ °üÇÑ Å×½ºÆ® Á¤º¸´Â ¾ø´õ¶ó±¸¿ä.
ÀÎÅͳݿ¡µµ ¸î°³ ã¾ÆºÃ´Âµ¥ static nat À§ÁÖ¿©¼­, ´Ù½Ã Áú¹® ´Ù½Ã µå·È½À´Ï´Ù.
¹Ú¹®Çü 2021-06
https://www.reddit.com/r/mikrotik/comments/jo0vhj/ccr_1072_as_nat_gateway/

ÀÚ·á°¡ °ÅÀÇ ¾ø³×¿ä..

ÀçÀÏ ÁÁÀº °ÍÀº µ¥¸ð°¡ °¡´ÉÇÏ¸é µ¥¸ð¸¦ ÇÏ°í BMT Çغ¸´Â °ÍÀÌ°ÚÁÒ..

1036Àº 1G Æ÷Æ®ÀÌÁö¸¸ 1072´Â 10GÆ÷Æ®·Î µÇ¾î ÀÖ½À´Ï´Ù..
ISR4431¿¡ booster license´Â ¾ø½À´Ï´Ù. ¾²¸é ´õ ³ª¾ÆÁö±ä ÇÒ°Í °°±ä ÇÕ´Ï´Ù¸¸, ¾ó¸¶³ª ÁÁ¾ÆÁúÁöµµ ¸ð¸£°í, ¶óÀ̼¾½ºµµ ²Ï³ª ºñ½Î¼­ ²¨·ÁÁö³×¿ä.
Â÷¶ó¸® ÇâÈÄ È®Àå »ý°¢Çؼ­ »óÀ§ ±ÞÀ¸·Î »õ·Î »ç·Á°í ÇÕ´Ï´Ù.

CSR1036Àº Å×½ºÆ® °â Çؼ­ ÀÌ¹Ì ÇÑ´ë »çµÎ±ä Çߴµ¥, Router OS´Â óÀ½À̶ó BMT Á÷Á¢ ÇÏ°í´Â Àִµ¥ ½Ã°£ÀÌ ²Ï °É¸®³×¿ä.
Å볪¹« 2021-06
ISR4K¿¡ Base/Perf. ¶óÀ̼±½º »óÅ¿¡¼­ °¢ ±â´Éº°·Î ÃÖ´ë ¼Óµµ¸¦ Á¦ÇÑÇØ ³õÀº »óŶó Boost License¿¡¼­´Â ÀÌ ±â´ÉÀ» Á¦ÇÑÇϱ⠶§¹®¿¡ ¾î¶² ¼­ºñ½º¸¸ ¾²´À³Ä¿¡ µû¶ó ´Þ¶óÁö°ÚÁö¸¸ ÇÑ µÎ°³ Á¤µµ¸¸ ¾´´Ù¸é ¼Óµµ Çâ»óÀÌ ºÐ¸íÈ÷ ÀÖÀ»°Ì´Ï´Ù.

ÀÌ¹Ì CCR1036À» ±¸ÀÔÇϽŠ»óÅÂ´Ï º°·Î Àǹ̴ ¾øÀ¸½Ã°ÚÁö¸¸ ±×·¡µµ ÇÑ ¹ø ¿Ã·Áº¾´Ï´Ù.

¾Æ·¡ Boost License´Â Onboard¿¡ ³»ÀåµÈ ÀÎÅÍÆäÀ̽º¸¸ ÇØ´çµÇ°í CEF only¿¡¼­ ThroughputÀÔ´Ï´Ù.
https://www.cisco.com/c/en/us/products/collateral/routers/4000-series-integrated-services-routers-isr/data_sheet-c78-732542.html
https://miercom.com/performance-analysis-cisco-isr-4000-family/
¹Ú°Ç 2021-06
CCR1036-8G-2S+±âÁØÀ¸·Î SRC NAT·ê ÇϳªÀ̱â´Â Çѵ¥(¿©Å¸ ·ê ¾øÀ½), ´ë·« 13~14Gbps(CPU¼º´ÉÀ¸·Î´Â ´õ ³ª¿Ã °Í °°Àºµ¥, ÀÎÅÍÆäÀ̽º ÇÑ°è»ó ´õÀÌ»óÀº ºÒ°¡)±îÁö Å×½ºÆ®ÇغýÀ´Ï´Ù. CCR1009-7G-1C-1S+ ±âÁØÀ¸·Î´Â 7Gbps Á¤µµ ¿´½À´Ï´Ù.
Å볪¹«´Ô,
CPU »ç¿ë·®Àº üũÇغ¸´Ï ÃÖ´ë 3~40% Á¤µµ¶ó, ºÎ½ºÅÍ ¶óÀ̼¾½º ¼³Ä¡ÇÏ¸é ²Ï³ª Çâ»ó µÉ°Í °°½À´Ï´Ù. ÀÌÂÊÀ¸·Îµµ Çѹø °ßÀû ¹Þ¾Æº¸°Ú½À´Ï´Ù.
¹ÌÅ©·Îƽ CCR1036Àº °øºÎÇÏ·¯ »ê°Å¶ó ²À ½á¾ß ÇÏ´Â°Ç ¾Æ´Õ´Ï´Ù.

¹Ú°Ç´Ô,
°¨»çÇÕ´Ï´Ù. 13~14Gbps¸é ¿ª½Ã ²Ï³ª ³ª¿À³×¿ä. ±×Á¤µµ¸é ÃæºÐÇÕ´Ï´Ù. NAT rule ½ÇÁ¦·Î Ãß°¡Çؼ­ BMT Çغ¸°Ú½À´Ï´Ù.
Å볪¹« 2021-06
¾Æ Ãß°¡·Î Boost License´Â IOS-XE v16.7Àΰ¡ ºÎÅÍ Àû¿ë °¡´ÉÇÕ´Ï´Ù. ÀÌÀü ¹öÀüÀ» ¾²°í °è½Ã´Ù¸é ¸¶À̱׷¹ÀÌ¼Ç ÇÏ¼Å¾ß µË´Ï´Ù.
ÇöÀç TAC ±ÇÀå ¹öÀüÀº v17.3.3ÀÔ´Ï´Ù. (v3.x¿¡¼­ ¾÷±×·¹À̵å ÇϽ÷Á¸é ROMMON ¾÷±×·¹À̵嵵 ÇÔ²² ÇØÁÖ¼Å¾ß ÇÕ´Ï´Ù. ½º¸¶Æ® ¶óÀ̼±½ºµµ v16.10ºÎÅÍ Àû¿ëµÇ´Ï ÀÌ ºÎºÐµµ È®ÀÎÇÏ¼Å¾ß µÉ °Ì´Ï´Ù.)


Á¦¸ñPage 85/105
2022-11   6388   ¼ÛÁÖȯ
2017-02   10871   Æ۽̱Û
2018-06   6701   jang
2018-09   6725   ÀÌâÁØ
2019-08   8287   TLaJ3KtYGr
2020-03   3991   mkprint
2020-09   4182   ÇãÀα¸¸¶Æ¾
2020-11   3767   UfXpri
2021-06   3852   ¾ðÁ¨°¡´Â
2023-01   10705   ´ó´óÀÌ
03-17   2961   µ·´ë½Å¸öÀ¸·Î
09-30   2715   selfhiam
2016-04   6180   ½Ã°ñû³â
2019-10   4597   NeTe
2022-01   4137   ketchup
2014-04   8956   s±èÁ¾È­z
2015-03   12154   Æ÷±ÙÀÌ
2015-12   10631   ÁÁÀº¼¼»ó¸¸¡¦
2016-11   9556   cesslim
2020-06   5199   ±¸°í±â