1、需求
通过配置路由策略,实现PC1仅仅访问server2
2、拓扑
3、命令
1)配置PC1,配置OSPF路由器连通。
Client1
R5
<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname R5
[R5]int g0/0/1
[R5-GigabitEthernet0/0/1]ip add 192.168.3.254 24
[R5-GigabitEthernet0/0/1]q
[R5]int g0/0/0
[R5-GigabitEthernet0/0/0]ip add 192.168.45.2 24
[R5-GigabitEthernet0/0/0]q
[R5]ospf 1 router-id 5.5.5.5
[R5-ospf-1]area 0
[R5-ospf-1-area-0.0.0.0]network 192.168.3.0 0.0.0.255
[R5-ospf-1-area-0.0.0.0]network 192.168.45.0 0.0.0.255
R4
<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname R4
[R4]int g0/0/1
[R4-GigabitEthernet0/0/1]ip add 192.168.45.1 24
[R4-GigabitEthernet0/0/1]q
[R4]int g0/0/0
[R4-GigabitEthernet0/0/0]ip add 192.168.34.2 24
[R4-GigabitEthernet0/0/0]q
[R4]ospf 1 router-id 4.4.4.4
[R4-ospf-1]area 0
[R4-ospf-1-area-0.0.0.0]network 192.168.45.0 0.0.0.255
[R4-ospf-1-area-0.0.0.0]q
[R4-ospf-1]area 123
[R4-ospf-1-area-0.0.0.123]network 192.168.34.0 0.0.0.255
R3
<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 192.168.34.1 24
[Huawei-GigabitEthernet0/0/1]q
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 192.168.23.2 24
[Huawei-GigabitEthernet0/0/0]q
[Huawei]ospf 1 router-id 3.3.3.3
[Huawei-ospf-1]area 123
[Huawei-ospf-1-area-0.0.0.123]network 192.168.34.0 0.0.0.255
[Huawei-ospf-1-area-0.0.0.123]network 192.168.23.0 0.0.0.255
[Huawei-ospf-1-area-0.0.0.123]q
[Huawei-ospf-1]
R2
<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname R2
[R2]int g0/0/1
[R2-GigabitEthernet0/0/1]ip add 192.168.23.1 24
[R2-GigabitEthernet0/0/1]q
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip add 192.168.12.2 24
[R2-GigabitEthernet0/0/0]q
[R2]ip route-static 192.168.1.0 24 192.168.12.1
[R2]ip route-static 192.168.2.0 24 192.168.12.1
[R2]acl 2000
[R2-acl-basic-2000]rule 5 permit source 192.168.2.0 0.0.0.255
[R2-acl-basic-2000]q
[R2]route-policy a permit node 10
Info: New Sequence of this List.
[R2-route-policy]if-match acl 2000
[R2-route-policy]q
[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]area 123
[R2-ospf-1-area-0.0.0.123]network 192.168.23.0 0.0.0.255
[R2-ospf-1-area-0.0.0.123]q
[R2-ospf-1]import-route static route-policy a
[R2-ospf-1]q
[R2]
2)配置Server1、Server2,R1
R1
<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname R1
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add 192.168.1.254 24
[R1-GigabitEthernet0/0/0]q
[R1]int g0/0/1
[R1-GigabitEthernet0/0/1]ip add 192.168.2.254 24
[R1-GigabitEthernet0/0/1]q
[R1]int g0/0/2
[R1-GigabitEthernet0/0/2]ip add 192.168.12.1 24
[R1-GigabitEthernet0/0/2]q
[R1]ip route-static 192.168.0.0 16 192.168.12.2