H3C――路由策略和策略路由实例配置

 

 

配置如下：

[IP]int s0/2/0
[IP-Serial0/2/0]ip add 202.112.1.10 28
[IP-Serial0/2/0]int s0/2/1
[IP-Serial0/2/1]ip add 61.67.1.10 28 
[IP-Serial0/2/1]int lo0
[IP-LoopBack0]ip add 10.10.10.10 32
[IP]ip route-static 0.0.0.0 0 202.112.1.9 指条静态缺省路由到R1
[IP]ip route-static 0.0.0.0 0 61.67.1.9     指条静态缺省路由到R1

[R1-Serial0/2/1]int e0/1/0 
[R1-Ethernet0/1/0]ip add 10.1.12.1 24
[R1-Ethernet0/1/0]int e0/1/1
[R1-Ethernet0/1/1]ip add 10.1.21.1 24
[R1-Ethernet0/1/1]int lo0
[R1-LoopBack0]ip add 1.1.1.1 32
[R1]ospf 100 router-id 1.1.1.1
[R1-ospf-100]area 0
[R1-ospf-100-area-0.0.0.0]net 10.1.12.0 0.0.0.255
[R1-ospf-100-area-0.0.0.0]net 10.1.21.0 0.0.0.255
[R1-ospf-100-area-0.0.0.0]net 1.1.1.1 0.0.0.0 
[R1]ospf 100
[R1-ospf-100] default-route-advertise always  本机没配置默认路由，此参数可产生一个描述缺省路由的LSA发布出去
[R1]ip route-static 10.10.10.10 255.255.255.255 202.112.1.10 
[R1]ip route-static 10.10.10.10 255.255.255.255 61.67.1.10 
[R1]ospf 100
[R1-ospf-100]import static    ospf区域引入静态路由
[R1]acl number 3000
[R1-acl-adv-3000]rule permit icmp sour any destination 10.10.10.10 0   实现ping的要求
[R1]acl number 3001
[R1-acl-adv-3001]ru per tcp source any destination 10.10.10.10 0 destination-port eq 23实现telnet
[R1]policy-based-route any node 10  下边三条是基于策略的路由，简称策略路由
[R1-pbr-any-10]if-match acl 3000
[R1-pbr-any-10]apply ip-address next-hop 61.67.1.10
[R1]policy-based-route any node 20
[R1-pbr-any-20]if-match acl 3001
[R1-pbr-any-20]apply ip-address next-hop 202.112.1.10
[R1]int e0/1/0
[R1-Ethernet0/1/0] ip policy-based-route any  接口下使能策略路由
[R1]int e0/1/1
[R1-Ethernet0/1/1]ip policy-based-route any

[R2]int e0/1/0
[R2-Ethernet0/1/0]ip add 10.1.12.2 24
[R2-Ethernet0/1/0]int e0/1/1
[R2-Ethernet0/1/1]ip add 10.1.21.2 24
[R2-Ethernet0/1/1]int e0/1/2
[R2-Ethernet0/1/2]ip add 10.1.23.2 24
[R2-Ethernet0/1/2]int lo0
[R2-LoopBack0]ip add 2.2.2.2 32
[R2]ospf 100 router-id 2.2.2.2
[R2-ospf-100]area 0
[R2-ospf-100-area-0.0.0.0]net 10.1.12.0 0.0.0.255
[R2-ospf-100-area-0.0.0.0]net 10.1.21.0 0.0.0.255
[R2-ospf-100-area-0.0.0.0]net 2.2.2.2 0.0.0.0
[R2]rip
[R2-rip-1]version 2
[R2-rip-1]undo summary
[R2-rip-1]net 10.1.23.0
[R2]ospf 100
[R2-ospf-100]import-route rip 
[R2-ospf-100]import-route direct       ospf引入rip后可再引入直连路由
[R2]rip
[R2-rip-1]import-route ospf 100
[R2-rip-1]import-route direct 
[R2]acl number 2000
[R2-acl-basic-2000]rule permit source 192.168.10.100 0
[R2]acl number 2001 
[R2-acl-basic-2001]rule permit source 3.3.3.3 0
[R2-acl-basic-2001]rule permit source 192.168.20.100 0
[R2]route-policy 1234 permit node 10     路由策略的配置
[R2-route-policy]if-match acl 2000 
[R2-route-policy]apply ip-address next-hop 10.1.21.1 
[R2-route-policy]apply cost 10
[R2]route-policy 1234 deny node 20
[R2-route-policy]if-match acl 2001 
[R2]route-policy 1234 permit node 30            
[R2]ospf 100
[R2-ospf-100]import-route rip route-policy 1234
[R2]acl number 2002
[R2-acl-basic-2002]rule permit source 192.168.1.100 0
[R2-acl-basic-2002]rule permit source 192.168.2.100 0
[R2]policy-based-route 2345 permit node 10 
[R2-pbr-2345-10]if-match acl 2002
[R2-pbr-2345-10]apply ip-address next-hop 10.1.21.1 
[R2]int e0/1/2
[R2-Ethernet0/1/2]ip policy-based-route 2345
[R2]dis route-policy [R3]int e0/1/0
[R3-Ethernet0/1/0]ip add 10.1.23.3 24
[R3-Ethernet0/1/0]int lo0
[R3-LoopBack0]ip add 3.3.3.3 32
[R3-LoopBack0]int lo1
[R3-LoopBack1]ip add 192.168.10.100 32
[R3-LoopBack1]int lo2
[R3-LoopBack2]ip add 192.168.20.100 32
[R3-LoopBack2]int lo3
[R3-LoopBack3]ip add 192.168.2.100 32
[R3-LoopBack3]int lo4
[R3-LoopBack4]ip add 192.168.1.100 32
[R3]rip
[R3-rip-1]version 2
[R3-rip-1]und summary 
[R3-rip-1]net 10.1.23.0
[R3-rip-1]net 3.3.3.3
[R3-rip-1]net 192.168.10.100
[R3-rip-1]net 192.168.20.100
[R3-rip-1]net 192.168.2.100
[R3-rip-1]net 192.168.1.100