技术要点:CISCO3925双电信光纤策略路由

需求:指定2个网段走G0/0口按照策略路由出访外网;剩余网段走G0/1口按照默认路由出访外网。

设备:CISCO3925

interfaceGigabitEthernet0/0
ipaddress1.1.1.1255.255.255.248
ipnatoutside
ipvirtual-reassemblyin
duplexauto
speedauto
!
interfaceGigabitEthernet0/1
ipaddress2.2.2.1255.255.255.248
ipnatoutside
ipvirtual-reassemblyin
duplexauto
speedauto
!
interfaceGigabitEthernet0/2
ipaddress192.168.200.1255.255.255.0
ipnatinside
ipvirtual-reassemblyin
ippolicyroute-maproute1

duplexauto
speedauto

!

ipaccess-listextendedNAT
permitip192.168.11.00.0.0.255any
permitip10.10.10.00.0.0.255any
permitip172.16.18.00.0.0.255any
permitip192.168.200.00.0.0.255any
ipaccess-listextendedABC

permitip192.168.1.00.0.0.255any
permitip192.168.0.00.0.0.255any
ipaccess-listextendedmail
permitip192.168.1.00.0.0.255any
permitip192.168.0.00.0.0.255any
!
route-maproute1permit10
matchipaddressmail
setipnext-hop1.1.1.2

!

ipnatinsidesourcelistNATinterfaceGigabitEthernet0/1overload
ipnatinsidesourcelistABCinterfaceGigabitEthernet0/0overload

iproute0.0.0.00.0.0.02.2.2.2

iproute192.168.0.0255.255.255.0192.168.200.2

iproute192.168.1.0255.255.255.0192.168.200.2

iproute192.168.11.0255.255.255.0192.168.200.3

iproute10.10.10.0255.255.255.0192.168.200.2

iproute172.16.18.0255.255.255.0192.168.200.2