¹ÌÅ©·Îƽ CCR1036/CCR1072 NAT ÆÛÆ÷¸Õ½º ¾î´ÀÁ¤µµ ³ª¿À³ª¿ä?

   Á¶È¸ 3847   Ãßõ 0    

Cisco ISR 4000 시리즈를 쓰고 있는데 처리량이 부족해서 업그레이드를 하려고 합니다.

Cisco ASR 1000 시리즈로 업글하면 되긴 할텐데, 미크로틱도 한번 고려해 보고 싶습니다.

요구사항은 대략 3Gbps, acl rule 300 lines, 300,000 translation entries 입니다.

감사합니다.


현재 nat stat입니다. 속도는 1Gbps 살짝 안나오네요.

#sh ip nat statistics 
Total active translations: 110182 (2 static, 110180 dynamic; 110182 extended)
Outside interfaces:
  GigabitEthernet0/0/0, GigabitEthernet1/0/0.15, GigabitEthernet1/0/0.4001
Inside interfaces: 
  GigabitEthernet1/0/0.2105, GigabitEthernet1/0/0.2205, Tunnel114, Tunnel119
  Tunnel124, Tunnel127, Tunnel211, Tunnel315, Tunnel316
Hits: 574071367313  Misses: 228119910
Expired translations: 227735628
Dynamic mappings:
-- Inside Source
[Id: 11] route-map nat-dev-outside interface GigabitEthernet0/0/0 refcount 109933
[Id: 2] access-list nat-staff-outside interface GigabitEthernet0/0/0 refcount 241
nat-limit statistics:
 max entry: max allowed 0, used 0, missed 0
In-to-out drops: 1025308  Out-to-in drops: 1955421
Pool stats drop: 0  Mapping stats drop: 1
Port block alloc fail: 6167
IP alias add fail: 0
Limit entry add fail: 0
¶óÀÌÄ« 2021-06
Cisco 1800 ¹®ºÎ ¹Þ¾Æ¼­ °øºÎÇÏ´Â ÁßÀε¥ ¤¾¤¾ °í»ýÇϽʴϴÙ
Å볪¹« 2021-06
Ȥ½Ã ISR4K ¾î¶² Àåºñ¸¦ ¾²°í °è½Å°¡¿ä? Boost License Àû¿ëÇصµ ¸ðÀÚ¶ó½Å°¡¿ä?
°¨»çÇÕ´Ï´Ù. ÀÌ ÀÚ·á´Â ºÃ¾ú´Âµ¥ nat/acl rule¿¡ °üÇÑ Å×½ºÆ® Á¤º¸´Â ¾ø´õ¶ó±¸¿ä.
ÀÎÅͳݿ¡µµ ¸î°³ ã¾ÆºÃ´Âµ¥ static nat À§ÁÖ¿©¼­, ´Ù½Ã Áú¹® ´Ù½Ã µå·È½À´Ï´Ù.
¹Ú¹®Çü 2021-06
https://www.reddit.com/r/mikrotik/comments/jo0vhj/ccr_1072_as_nat_gateway/

ÀÚ·á°¡ °ÅÀÇ ¾ø³×¿ä..

ÀçÀÏ ÁÁÀº °ÍÀº µ¥¸ð°¡ °¡´ÉÇÏ¸é µ¥¸ð¸¦ ÇÏ°í BMT Çغ¸´Â °ÍÀÌ°ÚÁÒ..

1036Àº 1G Æ÷Æ®ÀÌÁö¸¸ 1072´Â 10GÆ÷Æ®·Î µÇ¾î ÀÖ½À´Ï´Ù..
ISR4431¿¡ booster license´Â ¾ø½À´Ï´Ù. ¾²¸é ´õ ³ª¾ÆÁö±ä ÇÒ°Í °°±ä ÇÕ´Ï´Ù¸¸, ¾ó¸¶³ª ÁÁ¾ÆÁúÁöµµ ¸ð¸£°í, ¶óÀ̼¾½ºµµ ²Ï³ª ºñ½Î¼­ ²¨·ÁÁö³×¿ä.
Â÷¶ó¸® ÇâÈÄ È®Àå »ý°¢Çؼ­ »óÀ§ ±ÞÀ¸·Î »õ·Î »ç·Á°í ÇÕ´Ï´Ù.

CSR1036Àº Å×½ºÆ® °â Çؼ­ ÀÌ¹Ì ÇÑ´ë »çµÎ±ä Çߴµ¥, Router OS´Â óÀ½À̶ó BMT Á÷Á¢ ÇÏ°í´Â Àִµ¥ ½Ã°£ÀÌ ²Ï °É¸®³×¿ä.
Å볪¹« 2021-06
ISR4K¿¡ Base/Perf. ¶óÀ̼±½º »óÅ¿¡¼­ °¢ ±â´Éº°·Î ÃÖ´ë ¼Óµµ¸¦ Á¦ÇÑÇØ ³õÀº »óŶó Boost License¿¡¼­´Â ÀÌ ±â´ÉÀ» Á¦ÇÑÇϱ⠶§¹®¿¡ ¾î¶² ¼­ºñ½º¸¸ ¾²´À³Ä¿¡ µû¶ó ´Þ¶óÁö°ÚÁö¸¸ ÇÑ µÎ°³ Á¤µµ¸¸ ¾´´Ù¸é ¼Óµµ Çâ»óÀÌ ºÐ¸íÈ÷ ÀÖÀ»°Ì´Ï´Ù.

ÀÌ¹Ì CCR1036À» ±¸ÀÔÇϽŠ»óÅÂ´Ï º°·Î Àǹ̴ ¾øÀ¸½Ã°ÚÁö¸¸ ±×·¡µµ ÇÑ ¹ø ¿Ã·Áº¾´Ï´Ù.

¾Æ·¡ Boost License´Â Onboard¿¡ ³»ÀåµÈ ÀÎÅÍÆäÀ̽º¸¸ ÇØ´çµÇ°í CEF only¿¡¼­ ThroughputÀÔ´Ï´Ù.
https://www.cisco.com/c/en/us/products/collateral/routers/4000-series-integrated-services-routers-isr/data_sheet-c78-732542.html
https://miercom.com/performance-analysis-cisco-isr-4000-family/
¹Ú°Ç 2021-06
CCR1036-8G-2S+±âÁØÀ¸·Î SRC NAT·ê ÇϳªÀ̱â´Â Çѵ¥(¿©Å¸ ·ê ¾øÀ½), ´ë·« 13~14Gbps(CPU¼º´ÉÀ¸·Î´Â ´õ ³ª¿Ã °Í °°Àºµ¥, ÀÎÅÍÆäÀ̽º ÇÑ°è»ó ´õÀÌ»óÀº ºÒ°¡)±îÁö Å×½ºÆ®ÇغýÀ´Ï´Ù. CCR1009-7G-1C-1S+ ±âÁØÀ¸·Î´Â 7Gbps Á¤µµ ¿´½À´Ï´Ù.
Å볪¹«´Ô,
CPU »ç¿ë·®Àº üũÇغ¸´Ï ÃÖ´ë 3~40% Á¤µµ¶ó, ºÎ½ºÅÍ ¶óÀ̼¾½º ¼³Ä¡ÇÏ¸é ²Ï³ª Çâ»ó µÉ°Í °°½À´Ï´Ù. ÀÌÂÊÀ¸·Îµµ Çѹø °ßÀû ¹Þ¾Æº¸°Ú½À´Ï´Ù.
¹ÌÅ©·Îƽ CCR1036Àº °øºÎÇÏ·¯ »ê°Å¶ó ²À ½á¾ß ÇÏ´Â°Ç ¾Æ´Õ´Ï´Ù.

¹Ú°Ç´Ô,
°¨»çÇÕ´Ï´Ù. 13~14Gbps¸é ¿ª½Ã ²Ï³ª ³ª¿À³×¿ä. ±×Á¤µµ¸é ÃæºÐÇÕ´Ï´Ù. NAT rule ½ÇÁ¦·Î Ãß°¡Çؼ­ BMT Çغ¸°Ú½À´Ï´Ù.
Å볪¹« 2021-06
¾Æ Ãß°¡·Î Boost License´Â IOS-XE v16.7Àΰ¡ ºÎÅÍ Àû¿ë °¡´ÉÇÕ´Ï´Ù. ÀÌÀü ¹öÀüÀ» ¾²°í °è½Ã´Ù¸é ¸¶À̱׷¹ÀÌ¼Ç ÇÏ¼Å¾ß µË´Ï´Ù.
ÇöÀç TAC ±ÇÀå ¹öÀüÀº v17.3.3ÀÔ´Ï´Ù. (v3.x¿¡¼­ ¾÷±×·¹À̵å ÇϽ÷Á¸é ROMMON ¾÷±×·¹À̵嵵 ÇÔ²² ÇØÁÖ¼Å¾ß ÇÕ´Ï´Ù. ½º¸¶Æ® ¶óÀ̼±½ºµµ v16.10ºÎÅÍ Àû¿ëµÇ´Ï ÀÌ ºÎºÐµµ È®ÀÎÇÏ¼Å¾ß µÉ °Ì´Ï´Ù.)


Á¦¸ñPage 36/105
2015-10   9269   µ¹¹®ÆÒ
2015-01   9268   °õ»ïÃÌ
2016-08   9253   Àåºñ´Ï
2019-01   9251   ÁöÆæ
2022-06   9249   keiminem
2018-03   9247   ¹öÇÁ¿£Áö´Ï¡¦
2022-11   9243   ¿øÅÊÀ̹汼ÀÌ
2019-06   9243   NeTe
2019-02   9232   Çϴûö²Þ
2017-06   9231   ¹Ý±â±â±â±â
2015-07   9220   ºüºü¶ó»£
2016-03   9218   ÀÌ°©ºÎ
2014-04   9218   ÀÌÅ¿í
2017-07   9217   ·ù½Â¿Ï
2019-10   9211   ÁغñµÈ¹é¼ö
2014-06   9203   Á¦Ol
2016-04   9190   ÇϾáÁã
2016-09   9190   ½Å¼º°ø
2022-06   9188   ³×Æ®¿öÅ©¾î¡¦
2018-03   9175   ¶õƼ¾Æ