DCRS-7500策略路由配置

在DCRS-7500交换机多出口策略路由配置步骤

在多出口的环境中,为了充分利用多线路资源,可以在DCRS7500交换机上配置PBR即策略路由功能来实现此需求.注意:不建议在DCRS7500交换机上同时使用NAT和策略路由,除对交换机性能影响很大原因外,在功能实现上也会出现一些问题.

第一步: 指定应用策略的数据流(可以基于源或同时基于源和目的).可以通过访问控制列表(access-list来完成);

DCRS-7504(config)# ip access-list standard xuesheng DCRS-7504(config-acl)#permit 192.168.3.0 0.0.0.255 DCRS-7504(config)#ip access-list extended xsjy

DCRS-7504(config-acl)#permit ip 192.168.3.0 0.0.0.255 10.0.0.0

第二步: 创建路由策略.可以通过在DCRS-7504(config)#模式使用route-map命令,并可以使用顺序号来决定执行策略的先后顺序.例如:

DCRS-7504(config)#route-map kkk permit 10 DCRS-7504(config-map)#match ip address xsjy DCRS-7504(config-map)#set ip next-hop 192.168.4.2

DCRS-7504(config)#route-map kkk permit 20

DCRS-7504(config-map)#match ip address xuesheng

DCRS-7504(config-map)#set ip next-hop 192.168.5.2

第三步: 将创建好的策略应用到接近源的接口.例如: DCRS-7504(config)#interface ve 3

DCRS-7504(config-if)#ip address 192.168.3.1 255.255.255.0

DCRS-7504(config-if)#ip policy route-map kkk

以下是一个配置实例,供参考: Current configuration: !

ver 07.6.01aT53 !

module 1 fi-4-port-gig-management-modul module 3 fi-24-port-copper-module !

global-protocol-vlan ! !

vlan 1 name DEFAULT-VLAN by port !

vlan 2 by port

untagged ethe 3/1 to 3/2 router-interface ve 2

!

vlan 3 by port

untagged ethe 3/3 to 3/4 router-interface ve 3 !

vlan 4 by port

untagged ethe 3/5 to 3/6 router-interface ve 4 !

vlan 5 by port

untagged ethe 3/9 to 3/10 router-interface ve 5 !

vlan 6 by port

untagged ethe 3/11 to 3/12 router-interface ve 6 ! !

ip route 0.0.0.0 0.0.0.0 192.168.5.2 ! !

interface ve 2

ip address 192.168.2.1 255.255.255.0 ip policy route-map kkk !

interface ve 3

ip address 192.168.3.1 255.255.255.0 ip policy route-map lll !

interface ve 4

ip address 192.168.4.1 255.255.255.0 !

interface ve 5

ip address 192.168.5.1 255.255.255.0 !

interface ve 6

ip address 192.168.6.1 255.255.255.0 ! !

ip access-list standard jiaoshi permit 192.168.3.0 0.0.0.255 !

ip access-list standard xuesheng permit 192.168.2.0 0.0.0.255

!

ip access-list extended jsjy

permit ip 192.168.3.0 0.0.0.255 10.0.0.0 !

ip access-list extended xsjy

permit ip 192.168.2.0 0.0.0.255 10.0.0.0 !

route-map kkk permit 10 match ip address xsjy set ip next-hop 192.168.4.2 route-map kkk permit 20 match ip address xuesheng set ip next-hop 192.168.5.2 !

route-map lll permit 10 match ip address jsjy set ip next-hop 192.168.4.2 route-map lll permit 20 match ip address jiaoshi set ip next-hop 192.168.6.2 ! end

本文来源：https://www.bwwdw.com/article/85j8.html