基于route-map的策略路由

拓扑图

 

实验过程

1.       R1的预配置

Router>en Router#config t Enter configuration commands, one per line.  End with CNTL/Z. Router(config)#no ip domain-lookup Router(config)#line console 0 Router(config-line)#no exec-timeout Router(config-line)#loggin syn Router(config-line)#exit Router(config)#host pc1 pc1(config)#no ip routing  //模拟pc需要关闭路由功能 pc1(config)#int f0/0 pc1(config-if)#no shut pc1(config-if)#ip add 192.168.1.10 255.255.255.0 pc1(config-if)#exit pc1(config)#ip default-gateway 192.168.1.1 pc1(config)#end

2.       R2的预配置

Router>en Router#config t Enter configuration commands, one per line.  End with CNTL/Z. Router(config)#no ip domain-lookup Router(config)#line console 0 Router(config-line)#no exec-timeout Router(config-line)#loggin syn Router(config-line)#exit Router(config)#host  pc2 pc2(config)#no ip routing pc2(config)#int f0/0 pc2(config-if)#no shut pc2(config-if)#ip add 192.168.1.20 255.255.255.0 pc2(config-if)#exit pc2(config)#ip default-gateway 192.168.1.1 pc2(config)#end

3.       R3的预配置

Router>en Router#config t Enter configuration commands, one per line.  End with CNTL/Z. Router(config)#no ip domain-lookup Router(config)#line console 0 Router(config-line)#no exec-timeout Router(config-line)#loggin syn Router(config-line)#exit Router(config)#host  R3 R3(config)#int s0/0 R3(config-if)#no shut R3(config-if)#en frame-relay R3(config-if)#ip add 10.1.1.1 255.255.255.0 R3(config-if)#exit R3(config)#int f1/0 R3(config-if)#no shut R3(config-if)#ip add 192.168.1.1 255.255.255.0 R3(config-if)#end R3(config)#router rip R3(config-router)#version 2 R3(config-router)#no auto R3(config-router)#network 192.168.1.0 R3(config-router)#net 10.0.0.0 R3(config-router)#end

4.       R4的预配置

Router>en Router#config t Enter configuration commands, one per line.  End with CNTL/Z. Router(config)#no ip domain-lookup Router(config)#line console 0 Router(config-line)#no exec-timeout Router(config-line)#loggin syn Router(config-line)#exit Router(config)#host  R4 R4(config)#int s0/0 R4(config-if)#en frame-relay R4(config-if)#no shut R4(config-if)#ip add 10.1.1.2 255.255.255.0 R4(config-if)#int s0/1 R4(config-if)#no shut R4(config-if)#ip add 172.16.1.1 255.255.255.0 R4(config-if)#exit R4(config)#router rip R4(config-router)#version 2 R4(config-router)#no auto R4(config-router)#net 10.0.0.0 R4(config-router)#net 172.16.1.0 R4(config-router)#end

5.       R5的预配置

Router>en Router#config t Enter configuration commands, one per line.  End with CNTL/Z. Router(config)#no ip domain-lookup Router(config)#line console 0 Router(config-line)#no exec-timeout Router(config-line)#loggin syn Router(config-line)#exit Router(config)#host  R5 R5(config)#int s0/1 R5(config-if)#no shut R5(config-if)#ip add 172.16.1.2 255.255.255.0 R5(config-if)#int s0/2 R5(config-if)#no shut R5(config-if)#ip add 172.16.2.1 255.255.255.0 R5(config-if)#int lo0 R5(config-if)#ip add 130.130.1.1 255.255.255.0 R5(config-if)#exit R5(config)#router rip R5(config-router)#version 2 R5(config-router)#no auto R5(config-router)#net 172.16.1.0 R5(config-router)#net 172.16.2.0 R5(config-router)#net 130.130.1.0 R5(config-router)#end

6.       R6的预配置

Router>en Router#config t Enter configuration commands, one per line.  End with CNTL/Z. Router(config)#no ip domain-lookup Router(config)#line console 0 Router(config-line)#no exec-timeout Router(config-line)#loggin syn Router(config-line)#exit Router(config)#host  R6 R6(config)#int s0/0 R6(config-if)#no shut R6(config-if)#en frame-relay R6(config-if)#ip add 10.1.1.3 255.255.255.0 R6(config-if)#int s0/2 R6(config-if)#no shut R6(config-if)#ip add 172.16.2.2 255.255.255.0 R6(config-if)#exit R6(config)#router rip R6(config-router)#version 2 R6(config-router)#no auto R6(config-router)#net  10.0.0.0 R6(config-router)#net 172.16.2.0 R6(config-router)#end

7.       查看R3的路由器

R3#show ip route Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP        D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area        N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2        E1 - OSPF external type 1, E2 - OSPF external type 2        i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2        ia - IS-IS inter area, * - candidate default, U - per-user static route        o - ODR, P - periodic downloaded static route   Gateway of last resort is not set        172.16.0.0/24 is subnetted, 2 subnets R       172.16.1.0 [120/1] via 10.1.1.2, 00:00:26, Serial0/0 R       172.16.2.0 [120/1] via 10.1.1.3, 00:00:12, Serial0/0      10.0.0.0/24 is subnetted, 1 subnets C       10.1.1.0 is directly connected, Serial0/0      130.130.0.0/24 is subnetted, 1 subnets R       130.130.1.0 [120/2] via 10.1.1.3, 00:00:12, Serial0/0                    [120/2] via 10.1.1.2, 00:00:26, Serial0/0  //到130.130.1.0有两条路径 C    192.168.1.0/24 is directly connected, FastEthernet1/0

8.       在R1上跟踪到130.130.1.1的路由

pc1#traceroute 130.130.1.1   Type escape sequence to abort. Tracing the route to 130.130.1.1     1 192.168.1.1 56 msec 112 msec 60 msec   2 10.1.1.2 172 msec 180 msec 156 msec       3 172.16.1.2 164 msec *  220 msec pc2#traceroute 130.130.1.1   Type escape sequence to abort. Tracing the route to 130.130.1.1     1 192.168.1.1 1028 msec 112 msec 28 msec   2 10.1.1.2 64 msec 164 msec 12 msec       3 172.16.1.2 16 msec *  224 msec

9.       在R3上进行路由策略的配置，实现R1走R4，R2走R6.

R3(config)#access-list 10 permit host 192.168.1.10  //配置ACL抓取流量 R3(config)#access-list 20 permit host 192.168.1.20 R3(config)#route-map ccie permit 10  //对抓取的流量进行permit操作 R3(config-route-map)#match ip address 10  //匹配抓取的流量 R3(config-route-map)#set ip next-hop 10.1.1.2  //对抓取设置下一跳路由 R3(config-route-map)#exit R3(config)#route-map ccie permit 20 R3(config-route-map)#match ip address 20 R3(config-route-map)#set ip next-hop 10.1.1.3 R3(config-route-map)#exit R3(config)#route-map ccie permit 30 R3(config-route-map)#exit R3(config)#int f1/0 R3(config-if)#ip policy route-map ccie  //策略应用在此接口上 R3(config-if)#end

10.   再次跟踪去往130.130.1.0的路由

pc1#traceroute 130.130.1.1   Type escape sequence to abort. Tracing the route to 130.130.1.1     1 192.168.1.1 84 msec 108 msec 28 msec   2 10.1.1.2 180 msec 248 msec 192 msec       3 172.16.1.2 280 msec *  300 msec pc2#traceroute 130.130.1.1   Type escape sequence to abort. Tracing the route to 130.130.1.1     1 192.168.1.1 68 msec 68 msec 44 msec   2 10.1.1.3 104 msec 96 msec 88 msec       3 172.16.2.1 136 msec *  148 msec 说明：现在R1走R4，R2走R6.