飞塔防火墙pppoe拨号口的和***使用测试

问题描述：

当在PPPOE拨号接口和路由上配置从服务器得到网关时，路由条目里的Priority 参数不生效，致使正常从***接口出去的默认路由成为等价路由，使得互联网业务时通时不通。

原因分析：

ADSL接口配置了’从服务器中重新得到网关,(set defaultgw enable)’时,接口重新获得IP地址时, 接口新获得的网关优于配置的通过动态网关的缺省网关(使用动态网关的静态路由的priority不生效).在我们的网络结构中,注意ADSL接口不配置’从服务器中重新得到网关’。

当配置了set defaultgw enable 后

get router info routing-table all的时候会看到

S*      0.0.0.0/0 [5/0] via 111.193.224.1, ppp1

C       172.19.20.1/26 is directly connected, V101

C       172.19.20.65/26 is directly connected, V102

C       172.19.20.129/26 is directly connected, V103

而我们配置的路由是：

show router static 

config router static

    edit 1

        set device "wan1"

        set distance 5

        set dynamic-gateway enable

        set priority 50 --- 这个不生效

    next

    edit 2

        set device "To-Fh"

        set distance 5

    next

    edit 5

        set device "wan1"

        set dst 220.178.222.222 255.255.255.255

        set dynamic-gateway enable

    next

    edit 4

        set device "To-Fh"

        set dst 10.255.55.1 255.255.255.255

    next

    edit 6

        set device "To-Fh"

        set dst 172.16.0.10 255.255.255.255

    next

--More--          end

正常的路由表是:

get router  info routing-table all

Codes: K - kernel, C - connected, S - static, R - RIP, B - BGP

       O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

       * - candidate default

正常的路由表：

S*      0.0.0.0/0 [5/0] is directly connected, To-Fh

                  [5/0] via 114.97.222.222, ppp1, [50/0]

S       10.255.225.1/32 [10/0] is directly connected, To-Fh

C       114.97.222.222/32 is directly connected, ppp1

C       114.97.222.222/32 is directly connected, ppp1

S       172.16.0.10/32 [10/0] is directly connected, To-Fh

C       172.18.6.0/26 is directly connected, V300

C       172.19.24.0/26 is directly connected, V101

C       172.19.24.64/26 is directly connected, V102

C       172.19.24.128/26 is directly connected, V103

C       172.19.24.192/26 is directly connected, V104

C       192.168.1.0/24 is directly connected, internal

S       220.178.222.222/32 [10/0] via 114.97.222.222, ppp1