load balancing wan with 2 ISP provider using Huawei ar109

Hi DABBOUS_Ridha,

The only simple way I can think of right now is to do it with 2 default gateway entries with DHCP (inside an address pool).

So some clients you connect, would be given an IP address and via DHCP:

• the default gateway A, pointing at VDSL modem of service provider A
  

• and a 'secondary' gateway B, pointing at VDSL modem of service provider B

Certain clients, have the other way around:

• default gateway B

• 'secondary' gateway A

In case VDSL modem A fails, the clients then try gateway B - (will take a while) and the other way around.

--

To configure AR109 as DHCP server, please see:

https://support.huawei.com/enterprise/en/doc/EDOC1100034071/609ffe30/configuring-a-dhcp-server

To specify a gateway address that the DHCP server sends to clients:

dhcp server gateway-list  &<1-8>

So, in your case:

dhcp server gateway-list  192.168.1.1 192.168.2.1

(Assuming your VDSL modems have IP address .1)

This is I think a simple way to do it

AhXing

Hi DABBOUS_Ridha!
Based on your thoughts, here are some suggestions.
1. If you want to use the load balancing mode, you can use policy-based routing to enable intranet traffic to be sent out through two ISPs.
2. You can also use g0/0/4 as the standby interface of g0/0/2. In this case, the router works in active/standby mode instead of load balancing mode.

But as you can see it's all about redirection and classifier between vlan there's no load balancing concept in pbr, so we will use the first nexthop and if it fail we will redirect  to the original path(default route)or backup-nexthop ..!

i think If I use a tow default route with the same preference  and fix bandwidth of the geg int 0/0/2 to 20000 (KBPS) AND  g 0/0/4 bandwidth to 4000 (Kbps) and use loadbalancing hash much better than pbr !

//(lan address 192.168.3.0)//

===============================================================

[Router] acl number 2001 

[Router-acl-adv-2001] rule 5 permit ip source 192.168.3.0 0.0.0.255  

[Router-acl-adv-2001] quit 

[Router] interface gigabitethernet 0/0/4

[Router-GigabitEthernet0/0/4] undo portswitch

[Router-GigabitEthernet0/0/4] ip address 192.168.1.10 24

[Router-GigabitEthernet0/0/4] bandwidth 4000

[Router-GigabitEthernet0/0/4] nat outbound 2001 

[Router-GigabitEthernet0/0/4] quit 

[Router] interface gigabitethernet 0/0/2 

[Router-GigabitEthernet0/0/2] undo portswitch 

[Router-GigabitEthernet0/0/2] ip address 192.168.2.10 24 

[Router-GigabitEthernet0/0/2] bandwidth 20000

[Router-GigabitEthernet0/0/2] nat outbound 2001 

[Router-GigabitEthernet0/0/2] quit

[Router] ip route-static 0.0.0.0 0 192.168.1.1 

[Router] ip route-static 0.0.0.0 0 192.168.2.1 default routes have the same cost value. 

[Router] ip load-balance hash src-ip 

[Router] quit

=================================================================

can thus assure that my LAN can use all the bandwidth (there's no vlan concept) ?

Hi DABBOUS_Ridha!
Friend, if you have a reply next time, please remember @me, otherwise, I won't be able to see your reply.
In relation to your question, I'll give you the following explanation.
1. An ACL can be defined in the traffic claff of the PBR, and the ACL can match the corresponding network segment.
2. The redirection action can be defined in the traffic beh of the PBR. The two actions can be associated with the traffic policy. In this case, different actions can be performed for different network segments.
3. As you mentioned, two routes with the same priority will not be loaded. If two routes with the same priority exist at the same time, the matching rule is that the route that responds first is selected by the route. Therefore, the load balancing requirements cannot be met.
4. The NAT outbound configuration is ineffective. Because the ACLs match the same network segment, the two interfaces allow the network segment to connect to the Internet.

@fuzi_yao thanks bro .but how we can associate tow behavior to one classifier practically or i should create two classifier and use  the same acl inside it !!

------------------

[Router] acl number 2001

[Router-acl-2001] rule 5 permit ip source 192.168.3.0 0.0.0.255  

[Router-acl-2001] quit

----------------------------------------

=> i use thus nqa to test internet access from the isp ===>-------------------------------------------------------------------------

[Router]nqa test-instance admin internetisp2

[Router-nqa-admin-internetisp2]test-type icmp

[Router-nqa-admin-internetisp2]destination-address ipv4 8.8.8.8 /// (if applicable or 192.168.2.1)

[Router-nqa-admin-internetisp2]source-interface g0/0/2 source-address ipv4

[Router-nqa-admin-internetisp2]source-address ipv4 192.168.2.10

[Router-nqa-admin-internetisp2]frequency 15

[Router-nqa-admin-internetisp2]start now

[Router]nqa test-instance admin internetisp1

[Router-nqa-admin-internetisp1]test-type icmp

[Router-nqa-admin-internetisp1]destination-address ipv4 8.8.8.8 /// (if applicable or 192.168.1.1)

[Router-nqa-admin-internetisp1]source-interface g0/0/4 source-address ipv4

[Router-nqa-admin-internetisp1]source-address ipv4 192.168.1.10

[Router-nqa-admin-internetisp1]frequency 15

[Router-nqa-admin-internetisp1]start now

--------------------------------------------------------------------------------------------------------------------------------------------------

[Router]traffic classifier c1 operator or

[Router-classifier-c1]if-match acl 2001

----------------------------------------

[Router] traffic behavior toisp2

[Router-behavior-toisp2] redirect ip-nexthop 192.168.2.1 track nqa admin internetisp2

[Router-behavior-toisp2] redirect backup-nexthop 192.168.1.1 track nqa admin internetisp1

[Router-behavior-toisp2] quit

[Router] traffic behavior toisp1

[Router-behavior-toisp1] redirect ip-nexthop 192.168.1.1 track nqa admin internetisp1

[Router-behavior-toisp1] redirect backup-nexthop 192.168.2.1 track nqa admin internetisp2

[Router-behavior-toisp1] quit

----------------------------------------

[Router] traffic policy pX

[Router-trafficpolicy-pX] classifier c1 behavior toisp1

[Router-trafficpolicy-pX] classifier ?? behavior toisp2 ???  (should i create another classifier similar to c1 with same acl)

[RouterA-trafficpolicy-pX] quit

----------------------------------------

[Router] interface gigabitethernet 0/0/4

[Router-GigabitEthernet0/0/4] ip address 192.168.1.10 24

[Router-GigabitEthernet0/0/4] quit

[Router] interface gigabitethernet 0/0/2 

[Router-GigabitEthernet0/0/2] quit

[Router] interface gigabitethernet 0/0/1

[Router-GigabitEthernet0/0/2] ip address 192.168.3.1 24

[Router-GigabitEthernet0/0/2] traffic-policy pX inbound

[Router-GigabitEthernet0/0/2] quit

--------------------------------------------

[Router] ip route-static 0.0.0.0 0 192.168.1.1 track nqa admin internetisp1

[Router] ip route-static 0.0.0.0 0 192.168.2.1 track nqa admin internetisp2

??