（eNSP）策略路由实验配置

1.实验拓扑

2.基础配置

[SW2]dis cu
#
sysname SW2
#
vlan batch 10 20
#
interface Ethernet0/0/1
 port link-type access
 port default vlan 10
#
interface Ethernet0/0/2
 port link-type access
 port default vlan 20
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 10 20
#

[SW1]dis cu
#
sysname SW1
#
vlan batch 10 20 30
#
interface Vlanif10
 ip address 192.168.10.254 255.255.255.0
#
interface Vlanif20
 ip address 192.168.20.254 255.255.255.0
#
interface Vlanif30
 ip address 192.168.30.2 255.255.255.0
#
interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 30
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 10 20
#
ospf 1
 area 0.0.0.0
  network 192.168.20.0 0.0.0.255
  network 192.168.10.0 0.0.0.255
  network 192.168.30.0 0.0.0.255
#

[R1]dis cu
[V200R003C00]
#
 sysname R1
#
acl number 2000  
 rule 5 permit source 192.168.10.0 0.0.0.255 
acl number 2010  
 rule 5 permit source 192.168.20.0 0.0.0.255 
acl number 2100  
 rule 5 permit source 192.168.0.0 0.0.255.255 
#
traffic classifier yidong operator or
 if-match acl 2010
traffic classifier dianxin operator or
 if-match acl 2000
#
traffic behavior re_dianxin
 redirect ip-nexthop 12.1.1.2
traffic behavior re_yidong
 redirect ip-nexthop 13.1.1.3
#
traffic policy p
 classifier dianxin behavior re_dianxin
 classifier yidong behavior re_yidong
#
interface GigabitEthernet0/0/0
 ip address 13.1.1.1 255.255.255.0 
 nat outbound 2100
#
interface GigabitEthernet0/0/1
 ip address 12.1.1.1 255.255.255.0 
 nat outbound 2100
#
interface GigabitEthernet0/0/2
 ip address 192.168.30.1 255.255.255.0 
 traffic-policy p inbound
#
ospf 1 
 default-route-advertise
 area 0.0.0.0 
  network 192.168.30.0 0.0.0.255 
#
ip route-static 0.0.0.0 0.0.0.0 12.1.1.2 preference 10
ip route-static 0.0.0.0 0.0.0.0 13.1.1.3
#

[R2]dis cu
[V200R003C00]
#
 sysname R2
#
interface GigabitEthernet0/0/0
 ip address 12.1.1.2 255.255.255.0 
#
interface GigabitEthernet0/0/1
 ip address 23.1.1.2 255.255.255.0 
#
interface LoopBack0
 ip address 2.2.2.2 255.255.255.255 
#
rip 1
 version 2
 network 23.0.0.0
#
ip route-static 0.0.0.0 0.0.0.0 12.1.1.1

[R3]dis cu
[V200R003C00]
#
 sysname R3
#
interface GigabitEthernet0/0/0
 ip address 13.1.1.3 255.255.255.0 
#
interface GigabitEthernet0/0/1
 ip address 23.1.1.3 255.255.255.0 
#
interface LoopBack0
 ip address 3.3.3.3 255.255.255.255 
#
rip 1
 version 2
 network 23.0.0.0
#
ip route-static 0.0.0.0 0.0.0.0 13.1.1.1
#

3.重点配置

[R1]acl  2000 
[R1-acl-basic-2000]rule  permit  source  192.168.10.0 0.0.0.255
[R1-acl-basic-2000]q   
[R1]acl  2010 
[R1-acl-basic-2010]rule  permit  source  192.168.20.0 0.0.0.255
[R1-acl-basic-2010]q
[R1]traffic classifier  dianxin  
[R1-classifier-dianxin]if-match  acl  2000
[R1-classifier-dianxin]q 
[R1]traffic classifier yidong 
[R1-classifier-yidong]if-match  acl 2010
[R1-classifier-yidong]q
[R1]traffic behavior re_dianxin 
[R1-behavior-re_dianxin]redirect ip-nexthop 12.1.1.2 
[R1-behavior-re_dianxin]q 
[R1]traffic behavior re_yidong   
[R1-behavior-re_yidong]redirect ip-nexthop  13.1.1.3 
[R1-behavior-re_yidong]q
[R1]traffic  policy  p 
[R1-trafficpolicy-p]classifier  dianxin behavior re_dianxin 
[R1-trafficpolicy-p]classifier yidong behavior re_yidong 
[R1-trafficpolicy-p]q
[R1]int g0/0/2
[R1-GigabitEthernet0/0/2]traffic-policy p inbound