¹ÌÅ©·Îƽ CCR1036/CCR1072 NAT ÆÛÆ÷¸Õ½º ¾î´ÀÁ¤µµ ³ª¿À³ª¿ä?

   Á¶È¸ 3870   Ãßõ 0    

Cisco ISR 4000 시리즈를 쓰고 있는데 처리량이 부족해서 업그레이드를 하려고 합니다.

Cisco ASR 1000 시리즈로 업글하면 되긴 할텐데, 미크로틱도 한번 고려해 보고 싶습니다.

요구사항은 대략 3Gbps, acl rule 300 lines, 300,000 translation entries 입니다.

감사합니다.


현재 nat stat입니다. 속도는 1Gbps 살짝 안나오네요.

#sh ip nat statistics 
Total active translations: 110182 (2 static, 110180 dynamic; 110182 extended)
Outside interfaces:
  GigabitEthernet0/0/0, GigabitEthernet1/0/0.15, GigabitEthernet1/0/0.4001
Inside interfaces: 
  GigabitEthernet1/0/0.2105, GigabitEthernet1/0/0.2205, Tunnel114, Tunnel119
  Tunnel124, Tunnel127, Tunnel211, Tunnel315, Tunnel316
Hits: 574071367313  Misses: 228119910
Expired translations: 227735628
Dynamic mappings:
-- Inside Source
[Id: 11] route-map nat-dev-outside interface GigabitEthernet0/0/0 refcount 109933
[Id: 2] access-list nat-staff-outside interface GigabitEthernet0/0/0 refcount 241
nat-limit statistics:
 max entry: max allowed 0, used 0, missed 0
In-to-out drops: 1025308  Out-to-in drops: 1955421
Pool stats drop: 0  Mapping stats drop: 1
Port block alloc fail: 6167
IP alias add fail: 0
Limit entry add fail: 0
¶óÀÌÄ« 2021-06
Cisco 1800 ¹®ºÎ ¹Þ¾Æ¼­ °øºÎÇÏ´Â ÁßÀε¥ ¤¾¤¾ °í»ýÇϽʴϴÙ
Å볪¹« 2021-06
Ȥ½Ã ISR4K ¾î¶² Àåºñ¸¦ ¾²°í °è½Å°¡¿ä? Boost License Àû¿ëÇصµ ¸ðÀÚ¶ó½Å°¡¿ä?
°¨»çÇÕ´Ï´Ù. ÀÌ ÀÚ·á´Â ºÃ¾ú´Âµ¥ nat/acl rule¿¡ °üÇÑ Å×½ºÆ® Á¤º¸´Â ¾ø´õ¶ó±¸¿ä.
ÀÎÅͳݿ¡µµ ¸î°³ ã¾ÆºÃ´Âµ¥ static nat À§ÁÖ¿©¼­, ´Ù½Ã Áú¹® ´Ù½Ã µå·È½À´Ï´Ù.
¹Ú¹®Çü 2021-06
https://www.reddit.com/r/mikrotik/comments/jo0vhj/ccr_1072_as_nat_gateway/

ÀÚ·á°¡ °ÅÀÇ ¾ø³×¿ä..

ÀçÀÏ ÁÁÀº °ÍÀº µ¥¸ð°¡ °¡´ÉÇÏ¸é µ¥¸ð¸¦ ÇÏ°í BMT Çغ¸´Â °ÍÀÌ°ÚÁÒ..

1036Àº 1G Æ÷Æ®ÀÌÁö¸¸ 1072´Â 10GÆ÷Æ®·Î µÇ¾î ÀÖ½À´Ï´Ù..
ISR4431¿¡ booster license´Â ¾ø½À´Ï´Ù. ¾²¸é ´õ ³ª¾ÆÁö±ä ÇÒ°Í °°±ä ÇÕ´Ï´Ù¸¸, ¾ó¸¶³ª ÁÁ¾ÆÁúÁöµµ ¸ð¸£°í, ¶óÀ̼¾½ºµµ ²Ï³ª ºñ½Î¼­ ²¨·ÁÁö³×¿ä.
Â÷¶ó¸® ÇâÈÄ È®Àå »ý°¢Çؼ­ »óÀ§ ±ÞÀ¸·Î »õ·Î »ç·Á°í ÇÕ´Ï´Ù.

CSR1036Àº Å×½ºÆ® °â Çؼ­ ÀÌ¹Ì ÇÑ´ë »çµÎ±ä Çߴµ¥, Router OS´Â óÀ½À̶ó BMT Á÷Á¢ ÇÏ°í´Â Àִµ¥ ½Ã°£ÀÌ ²Ï °É¸®³×¿ä.
Å볪¹« 2021-06
ISR4K¿¡ Base/Perf. ¶óÀ̼±½º »óÅ¿¡¼­ °¢ ±â´Éº°·Î ÃÖ´ë ¼Óµµ¸¦ Á¦ÇÑÇØ ³õÀº »óŶó Boost License¿¡¼­´Â ÀÌ ±â´ÉÀ» Á¦ÇÑÇϱ⠶§¹®¿¡ ¾î¶² ¼­ºñ½º¸¸ ¾²´À³Ä¿¡ µû¶ó ´Þ¶óÁö°ÚÁö¸¸ ÇÑ µÎ°³ Á¤µµ¸¸ ¾´´Ù¸é ¼Óµµ Çâ»óÀÌ ºÐ¸íÈ÷ ÀÖÀ»°Ì´Ï´Ù.

ÀÌ¹Ì CCR1036À» ±¸ÀÔÇϽŠ»óÅÂ´Ï º°·Î Àǹ̴ ¾øÀ¸½Ã°ÚÁö¸¸ ±×·¡µµ ÇÑ ¹ø ¿Ã·Áº¾´Ï´Ù.

¾Æ·¡ Boost License´Â Onboard¿¡ ³»ÀåµÈ ÀÎÅÍÆäÀ̽º¸¸ ÇØ´çµÇ°í CEF only¿¡¼­ ThroughputÀÔ´Ï´Ù.
https://www.cisco.com/c/en/us/products/collateral/routers/4000-series-integrated-services-routers-isr/data_sheet-c78-732542.html
https://miercom.com/performance-analysis-cisco-isr-4000-family/
¹Ú°Ç 2021-06
CCR1036-8G-2S+±âÁØÀ¸·Î SRC NAT·ê ÇϳªÀ̱â´Â Çѵ¥(¿©Å¸ ·ê ¾øÀ½), ´ë·« 13~14Gbps(CPU¼º´ÉÀ¸·Î´Â ´õ ³ª¿Ã °Í °°Àºµ¥, ÀÎÅÍÆäÀ̽º ÇÑ°è»ó ´õÀÌ»óÀº ºÒ°¡)±îÁö Å×½ºÆ®ÇغýÀ´Ï´Ù. CCR1009-7G-1C-1S+ ±âÁØÀ¸·Î´Â 7Gbps Á¤µµ ¿´½À´Ï´Ù.
Å볪¹«´Ô,
CPU »ç¿ë·®Àº üũÇغ¸´Ï ÃÖ´ë 3~40% Á¤µµ¶ó, ºÎ½ºÅÍ ¶óÀ̼¾½º ¼³Ä¡ÇÏ¸é ²Ï³ª Çâ»ó µÉ°Í °°½À´Ï´Ù. ÀÌÂÊÀ¸·Îµµ Çѹø °ßÀû ¹Þ¾Æº¸°Ú½À´Ï´Ù.
¹ÌÅ©·Îƽ CCR1036Àº °øºÎÇÏ·¯ »ê°Å¶ó ²À ½á¾ß ÇÏ´Â°Ç ¾Æ´Õ´Ï´Ù.

¹Ú°Ç´Ô,
°¨»çÇÕ´Ï´Ù. 13~14Gbps¸é ¿ª½Ã ²Ï³ª ³ª¿À³×¿ä. ±×Á¤µµ¸é ÃæºÐÇÕ´Ï´Ù. NAT rule ½ÇÁ¦·Î Ãß°¡Çؼ­ BMT Çغ¸°Ú½À´Ï´Ù.
Å볪¹« 2021-06
¾Æ Ãß°¡·Î Boost License´Â IOS-XE v16.7Àΰ¡ ºÎÅÍ Àû¿ë °¡´ÉÇÕ´Ï´Ù. ÀÌÀü ¹öÀüÀ» ¾²°í °è½Ã´Ù¸é ¸¶À̱׷¹ÀÌ¼Ç ÇÏ¼Å¾ß µË´Ï´Ù.
ÇöÀç TAC ±ÇÀå ¹öÀüÀº v17.3.3ÀÔ´Ï´Ù. (v3.x¿¡¼­ ¾÷±×·¹À̵å ÇϽ÷Á¸é ROMMON ¾÷±×·¹À̵嵵 ÇÔ²² ÇØÁÖ¼Å¾ß ÇÕ´Ï´Ù. ½º¸¶Æ® ¶óÀ̼±½ºµµ v16.10ºÎÅÍ Àû¿ëµÇ´Ï ÀÌ ºÎºÐµµ È®ÀÎÇÏ¼Å¾ß µÉ °Ì´Ï´Ù.)


Á¦¸ñPage 36/105
2020-09   5055   µð³Ê¸ð
2022-08   7000   Commander
2016-11   9567   µ¿ÇàÅ¥ºê
2017-06   6925   ¹Î¼·79
2018-05   11125   ÈɳÉ
2018-08   9130   ÄðÆĽº
2021-05   8929   °ËÀº²ÇµÎÀ¯
2022-05   4792   cia00
2023-04   14842   ³É³É¸Ç
2023-10   17979   Caig
2015-09   10763   meviesta
2016-08   7855   ȸ¿øK
2019-10   5382   µ·´ë½Å¸öÀ¸·Î
2020-04   4334   SamP
2020-12   4292   ´Ïµå
2023-06   11001   ³óºÎ76
2016-08   10076   À¯È¤³¬½Ã²Û
2018-08   8929   À縶
2019-12   4486   Èñ¸ÁÀdzª·¡
2020-07   3858   ºýµ¹ÀÌ