技术要点:CISCO3925双电信光纤策略路由
需求:指定2个网段走G0/0口按照策略路由出访外网;剩余网段走G0/1口按照默认路由出访外网。
设备:CISCO3925
interfaceGigabitEthernet0/0
ipaddress1.1.1.1255.255.255.248
ipnatoutside
ipvirtual-reassemblyin
duplexauto
speedauto
!
interfaceGigabitEthernet0/1
ipaddress2.2.2.1255.255.255.248
ipnatoutside
ipvirtual-reassemblyin
duplexauto
speedauto
!
interfaceGigabitEthernet0/2
ipaddress192.168.200.1255.255.255.0
ipnatinside
ipvirtual-reassemblyin
ippolicyroute-maproute1
duplexauto
speedauto
!
ipaccess-listextendedNAT
permitip192.168.11.00.0.0.255any
permitip10.10.10.00.0.0.255any
permitip172.16.18.00.0.0.255any
permitip192.168.200.00.0.0.255any
ipaccess-listextendedABC
permitip192.168.1.00.0.0.255any
permitip192.168.0.00.0.0.255any
ipaccess-listextendedmail
permitip192.168.1.00.0.0.255any
permitip192.168.0.00.0.0.255any
!
route-maproute1permit10
matchipaddressmail
setipnext-hop1.1.1.2
!
ipnatinsidesourcelistNATinterfaceGigabitEthernet0/1overload
ipnatinsidesourcelistABCinterfaceGigabitEthernet0/0overload
iproute0.0.0.00.0.0.02.2.2.2
iproute192.168.0.0255.255.255.0192.168.200.2
iproute192.168.1.0255.255.255.0192.168.200.2
iproute192.168.11.0255.255.255.0192.168.200.3
iproute10.10.10.0255.255.255.0192.168.200.2
iproute172.16.18.0255.255.255.0192.168.200.2
转载于:https://blog.51cto.com/xiaog/1328160