¹ÌÅ©·Îƽ CCR1036/CCR1072 NAT ÆÛÆ÷¸Õ½º ¾î´ÀÁ¤µµ ³ª¿À³ª¿ä?

   Á¶È¸ 3850   Ãßõ 0    

Cisco ISR 4000 시리즈를 쓰고 있는데 처리량이 부족해서 업그레이드를 하려고 합니다.

Cisco ASR 1000 시리즈로 업글하면 되긴 할텐데, 미크로틱도 한번 고려해 보고 싶습니다.

요구사항은 대략 3Gbps, acl rule 300 lines, 300,000 translation entries 입니다.

감사합니다.


현재 nat stat입니다. 속도는 1Gbps 살짝 안나오네요.

#sh ip nat statistics 
Total active translations: 110182 (2 static, 110180 dynamic; 110182 extended)
Outside interfaces:
  GigabitEthernet0/0/0, GigabitEthernet1/0/0.15, GigabitEthernet1/0/0.4001
Inside interfaces: 
  GigabitEthernet1/0/0.2105, GigabitEthernet1/0/0.2205, Tunnel114, Tunnel119
  Tunnel124, Tunnel127, Tunnel211, Tunnel315, Tunnel316
Hits: 574071367313  Misses: 228119910
Expired translations: 227735628
Dynamic mappings:
-- Inside Source
[Id: 11] route-map nat-dev-outside interface GigabitEthernet0/0/0 refcount 109933
[Id: 2] access-list nat-staff-outside interface GigabitEthernet0/0/0 refcount 241
nat-limit statistics:
 max entry: max allowed 0, used 0, missed 0
In-to-out drops: 1025308  Out-to-in drops: 1955421
Pool stats drop: 0  Mapping stats drop: 1
Port block alloc fail: 6167
IP alias add fail: 0
Limit entry add fail: 0
¶óÀÌÄ« 2021-06
Cisco 1800 ¹®ºÎ ¹Þ¾Æ¼­ °øºÎÇÏ´Â ÁßÀε¥ ¤¾¤¾ °í»ýÇϽʴϴÙ
Å볪¹« 2021-06
Ȥ½Ã ISR4K ¾î¶² Àåºñ¸¦ ¾²°í °è½Å°¡¿ä? Boost License Àû¿ëÇصµ ¸ðÀÚ¶ó½Å°¡¿ä?
°¨»çÇÕ´Ï´Ù. ÀÌ ÀÚ·á´Â ºÃ¾ú´Âµ¥ nat/acl rule¿¡ °üÇÑ Å×½ºÆ® Á¤º¸´Â ¾ø´õ¶ó±¸¿ä.
ÀÎÅͳݿ¡µµ ¸î°³ ã¾ÆºÃ´Âµ¥ static nat À§ÁÖ¿©¼­, ´Ù½Ã Áú¹® ´Ù½Ã µå·È½À´Ï´Ù.
¹Ú¹®Çü 2021-06
https://www.reddit.com/r/mikrotik/comments/jo0vhj/ccr_1072_as_nat_gateway/

ÀÚ·á°¡ °ÅÀÇ ¾ø³×¿ä..

ÀçÀÏ ÁÁÀº °ÍÀº µ¥¸ð°¡ °¡´ÉÇÏ¸é µ¥¸ð¸¦ ÇÏ°í BMT Çغ¸´Â °ÍÀÌ°ÚÁÒ..

1036Àº 1G Æ÷Æ®ÀÌÁö¸¸ 1072´Â 10GÆ÷Æ®·Î µÇ¾î ÀÖ½À´Ï´Ù..
ISR4431¿¡ booster license´Â ¾ø½À´Ï´Ù. ¾²¸é ´õ ³ª¾ÆÁö±ä ÇÒ°Í °°±ä ÇÕ´Ï´Ù¸¸, ¾ó¸¶³ª ÁÁ¾ÆÁúÁöµµ ¸ð¸£°í, ¶óÀ̼¾½ºµµ ²Ï³ª ºñ½Î¼­ ²¨·ÁÁö³×¿ä.
Â÷¶ó¸® ÇâÈÄ È®Àå »ý°¢Çؼ­ »óÀ§ ±ÞÀ¸·Î »õ·Î »ç·Á°í ÇÕ´Ï´Ù.

CSR1036Àº Å×½ºÆ® °â Çؼ­ ÀÌ¹Ì ÇÑ´ë »çµÎ±ä Çߴµ¥, Router OS´Â óÀ½À̶ó BMT Á÷Á¢ ÇÏ°í´Â Àִµ¥ ½Ã°£ÀÌ ²Ï °É¸®³×¿ä.
Å볪¹« 2021-06
ISR4K¿¡ Base/Perf. ¶óÀ̼±½º »óÅ¿¡¼­ °¢ ±â´Éº°·Î ÃÖ´ë ¼Óµµ¸¦ Á¦ÇÑÇØ ³õÀº »óŶó Boost License¿¡¼­´Â ÀÌ ±â´ÉÀ» Á¦ÇÑÇϱ⠶§¹®¿¡ ¾î¶² ¼­ºñ½º¸¸ ¾²´À³Ä¿¡ µû¶ó ´Þ¶óÁö°ÚÁö¸¸ ÇÑ µÎ°³ Á¤µµ¸¸ ¾´´Ù¸é ¼Óµµ Çâ»óÀÌ ºÐ¸íÈ÷ ÀÖÀ»°Ì´Ï´Ù.

ÀÌ¹Ì CCR1036À» ±¸ÀÔÇϽŠ»óÅÂ´Ï º°·Î Àǹ̴ ¾øÀ¸½Ã°ÚÁö¸¸ ±×·¡µµ ÇÑ ¹ø ¿Ã·Áº¾´Ï´Ù.

¾Æ·¡ Boost License´Â Onboard¿¡ ³»ÀåµÈ ÀÎÅÍÆäÀ̽º¸¸ ÇØ´çµÇ°í CEF only¿¡¼­ ThroughputÀÔ´Ï´Ù.
https://www.cisco.com/c/en/us/products/collateral/routers/4000-series-integrated-services-routers-isr/data_sheet-c78-732542.html
https://miercom.com/performance-analysis-cisco-isr-4000-family/
¹Ú°Ç 2021-06
CCR1036-8G-2S+±âÁØÀ¸·Î SRC NAT·ê ÇϳªÀ̱â´Â Çѵ¥(¿©Å¸ ·ê ¾øÀ½), ´ë·« 13~14Gbps(CPU¼º´ÉÀ¸·Î´Â ´õ ³ª¿Ã °Í °°Àºµ¥, ÀÎÅÍÆäÀ̽º ÇÑ°è»ó ´õÀÌ»óÀº ºÒ°¡)±îÁö Å×½ºÆ®ÇغýÀ´Ï´Ù. CCR1009-7G-1C-1S+ ±âÁØÀ¸·Î´Â 7Gbps Á¤µµ ¿´½À´Ï´Ù.
Å볪¹«´Ô,
CPU »ç¿ë·®Àº üũÇغ¸´Ï ÃÖ´ë 3~40% Á¤µµ¶ó, ºÎ½ºÅÍ ¶óÀ̼¾½º ¼³Ä¡ÇÏ¸é ²Ï³ª Çâ»ó µÉ°Í °°½À´Ï´Ù. ÀÌÂÊÀ¸·Îµµ Çѹø °ßÀû ¹Þ¾Æº¸°Ú½À´Ï´Ù.
¹ÌÅ©·Îƽ CCR1036Àº °øºÎÇÏ·¯ »ê°Å¶ó ²À ½á¾ß ÇÏ´Â°Ç ¾Æ´Õ´Ï´Ù.

¹Ú°Ç´Ô,
°¨»çÇÕ´Ï´Ù. 13~14Gbps¸é ¿ª½Ã ²Ï³ª ³ª¿À³×¿ä. ±×Á¤µµ¸é ÃæºÐÇÕ´Ï´Ù. NAT rule ½ÇÁ¦·Î Ãß°¡Çؼ­ BMT Çغ¸°Ú½À´Ï´Ù.
Å볪¹« 2021-06
¾Æ Ãß°¡·Î Boost License´Â IOS-XE v16.7Àΰ¡ ºÎÅÍ Àû¿ë °¡´ÉÇÕ´Ï´Ù. ÀÌÀü ¹öÀüÀ» ¾²°í °è½Ã´Ù¸é ¸¶À̱׷¹ÀÌ¼Ç ÇÏ¼Å¾ß µË´Ï´Ù.
ÇöÀç TAC ±ÇÀå ¹öÀüÀº v17.3.3ÀÔ´Ï´Ù. (v3.x¿¡¼­ ¾÷±×·¹À̵å ÇϽ÷Á¸é ROMMON ¾÷±×·¹À̵嵵 ÇÔ²² ÇØÁÖ¼Å¾ß ÇÕ´Ï´Ù. ½º¸¶Æ® ¶óÀ̼±½ºµµ v16.10ºÎÅÍ Àû¿ëµÇ´Ï ÀÌ ºÎºÐµµ È®ÀÎÇÏ¼Å¾ß µÉ °Ì´Ï´Ù.)


Á¦¸ñPage 36/105
2021-09   3534   ÀÌ°èÀÎ
2021-12   3351   ¹Ú¹®Çü
2023-03   9152   ksahn90
2023-09   12961   ¹æ»ó
2019-04   6042   ¼º±â»ç
2021-11   4112   GXIID
2022-02   5397   ŸÄھ߳¢¸À¡¦
2022-04   2378   Æødz°£Áö²É¡¦
2022-05   8688   Elusive4245
2022-12   45277   ¹«¹ýÀÚ
2015-11   5854   ggg345
2016-10   16263   ¾Ï²¨³ª
2020-08   4508   ±¸°í±â
2022-01   3010   È÷¼ÒÄ«
2022-04   3619   choigo
2022-09   5207   ²Ü¹úlÃÖÀÎÇõ
2023-12   3471   TheSTREET
02-15   1922   ¶óÇÏ¿î
2016-03   7007   HEUo±è¿ë¹Î
2018-03   14526   ¹Ú°Ç