H3C交换机&路由器的策略路由配置

H3C交换机&路由器的策略路由配置

方法一：使用PBR实现，PBR就是策略路由（一般是存在路由器上的）

如图，SWA与SWB互联，两端设备的Ge1/0/1属于192.168.2.0/24,SWA设备Ge1/0/2属于192.168.1.0/24，PCA地址192.168.1.2/24,PCB地址192.168.3.2/24,SWA不配置192.168.3.0的路由，而是通过下一跳的策略路由实现SWA去192.168.3.0的路由去向SWB,SWB配置好回包路由即可实现主机互通。

SWA基础配置：
[SWA]vlan 2
[SWA-vlan2]quit
[SWA]interface Vlan-interface 2
[SWA-Vlan-interface2]ip address 192.168.2.1 24
[SWA-Vlan-interface2]quit
[SWA]interface Vlan-interface 1
[SWA-Vlan-interface1]ip address 192.168.1.1 24
[SWA-Vlan-interface1]quit

[SWA]interface GigabitEthernet 1/0/1
[SWA-GigabitEthernet1/0/1]port link-type access
[SWA-GigabitEthernet1/0/1]port access vlan 2
[SWA-GigabitEthernet1/0/1]quit
[SWA]interface GigabitEthernet 1/0/2
[SWA-GigabitEthernet1/0/2]port link-type access
[SWA-GigabitEthernet1/0/2]port access vlan 1
[SWA-GigabitEthernet1/0/2]quit

SWB基础配置：
[SWB]vlan 2
[SWB-vlan2]quit
[SWB]interface Vlan-interface 2
[SWB-Vlan-interface2]ip address 192.168.2.2 24
[SWB-Vlan-interface2]quit
[SWB]interface Vlan-interface 1
[SWB-Vlan-interface1]ip address 192.168.3.1 24
[SWB-Vlan-interface1]quit

[SWB]interface GigabitEthernet 1/0/1
[SWB-GigabitEthernet1/0/1]port link-type access
[SWB-GigabitEthernet1/0/1]port access vlan 2
[SWB-GigabitEthernet1/0/1]quit

[SWB]interface GigabitEthernet 1/0/2
[SWB-GigabitEthernet1/0/2]port link-type access
[SWB-GigabitEthernet1/0/2]port access vlan 1
[SWB-GigabitEthernet1/0/2]quit
[SWB]ip route-static 192.168.1.0 24 192.168.2.1       #配置好回包路由
----------以上的基础配置好后将两端的PC地址配置好，PCA不能与PCB互通，下面配置PBR

SWA配置PBR选路策略：
[SWA]acl advanced 3000
[SWA-acl-ipv4-adv-3000]rule 5 permit ip source 192.168.1.0 0.0.0.255 destination 192.168.3.0 0.0.0.255
[SWA-acl-ipv4-adv-3000]rule 10 deny ip
[SWA-acl-ipv4-adv-3000]quit

[SWA]policy-based-route pbr permit node 5     #创建pbr策略名为pbr动作为允许节点为5
[SWA-pbr-pbr-5]if-match acl 3000     #配置acl 3000里的源和目的
[SWA-pbr-pbr-5]apply next-hop 192.168.2.2     #配置好下一跳
[SWA-pbr-pbr-5]quit

[SWA]interface Vlan-interface 1     #我这里是vlan环境，所以配置在vlan接口上，如果是路由口则配置在三层接pc端的接口
[SWA-Vlan-interface1]ip policy-based-route pbr
[SWA-Vlan-interface1]quit

方法二：使用Qos策略实现
先将刚才vlan1里的策略删除
[SWA-Vlan-interface1]undo ip policy-based-route
基础配置都一样，不在配置

[SWA]traffic classifier c1       #创建Qos类
[SWA-classifier-c1]if-match acl 3000
[SWA-classifier-c1]quit
[SWA]traffic behavior b1       #创建Qos的行为动作
[SWA-behavior-b1]redirect next-hop 192.168.2.2
[SWA-behavior-b1]quit
[SWA]qos policy p1       #创建Qos策略将类和动作绑定
[SWA-qospolicy-p1]classifier c1 behavior b1
[SWA-qospolicy-p1]quit
[SWA]qos vlan-policy p1 vlan 1 inbound       #绑定vlan即可

----------------------------------------------------------------------------------------------------