目前我们有一个 Cisco ISA570 防火墙，它在两个 ISP 链路之间进行故障转移负载平衡。
我想要一个 Sonicwall NSA6000，它应该是主要的，而 ISA570 作为故障转移设备。我应该如何重新设计网络，以使 WAN 链接和 LAN 流量得到正确的负载平衡？
每个 ISP 只提供一个网关 IP。
目前 LAN 流量通过 Cisco 2960s 来。
如果 Sonicwall 出现任何故障，网络应该能够从 Sonicwall 切换到 ISA570。两个防火墙还应该能够在两个 ISP 链路之间进行负载平衡。
请提出可能的设计，以通过所需的额外设备完成相同的任务。
谢谢，
这是我在 GNS3 中设置的拓扑。
路由器 R2 的 RIP V2 协议识别并通告在 EIGRP 中通告的两个网络，即使上述信息应该仅通过重新分发接收。我如何确保 RIP 仅通告我想要通告的那些子网，而不是该特定路由器上可能存在的该有类网络的所有子网？
以下是来自路由器 R2 和 R3 的 Show Ip route 和 Show Running-config 信息，
R3#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
192.168.1.0/24 is variably subnetted, 5 subnets, 2 masks
C 192.168.1.64/28 is directly connected, Loopback1
R 192.168.1.32/28 [120/1] via 192.168.1.133, 00:00:00, Serial0/0
R 192.168.1.16/28 [120/1] via 192.168.1.133, 00:00:00, Serial0/0
R 192.168.1.128/30 [120/1] via 192.168.1.133, 00:00:00, Serial0/0
C 192.168.1.132/30 is directly connected, Serial0/0
R3#
//////////////////////////////////////////////////////////////////////////////
R3#sh run
Building configuration...
Current configuration : 1063 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
!
!
ip cef
no ip domain lookup
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback1
ip address 192.168.1.65 255.255.255.240
!
interface Serial0/0
ip address 192.168.1.134 255.255.255.252
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial0/1
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial0/2
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial0/3
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
router rip
version 2
passive-interface default
network 192.168.1.0
neighbor 192.168.1.133
!
no ip http server
no ip http secure-server
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
!
!
end
R3#s
//////////////////////////////////////////////////////////////
R2#sh run
Building configuration...
Current configuration : 1240 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
!
!
ip cef
no ip domain lookup
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback1
ip address 192.168.1.17 255.255.255.240
!
interface Loopback2
ip address 192.168.1.33 255.255.255.240
!
interface Serial0/0
ip address 192.168.1.130 255.255.255.252
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial0/1
ip address 192.168.1.133 255.255.255.252
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial0/2
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial0/3
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
router eigrp 10
network 192.168.1.16 0.0.0.15
network 192.168.1.128 0.0.0.3
no auto-summary
!
router rip
version 2
passive-interface default
network 192.168.1.0
neighbor 192.168.1.134
!
no ip http server
no ip http secure-server
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
!
!
end