企业官网建设流程全解析

策略路由实验配置

实验要求

要求PC1走AR1-AR2-AR4到达PC3
要求PC2走AR1-AR3-AR4到达PC3

策略路由的配置思路：
1、匹配业务流量ACL 3000
2.业务流量进行分类classifier—if-match
3.业务流量流行为behavior—redirect
4.业务流量策略 traffic policy----关联流分类和流行为
5.将策略应用到接口的入方向

实验配置

配置IP地址

AR1配置

interface GigabitEthernet0/0/0ipaddress10.1.1.2255.255.255.0 traffic-policy PBR inbound#interface GigabitEthernet0/0/1ipaddress12.1.1.1255.255.255.0#interface GigabitEthernet0/0/2ipaddress13.1.1.1255.255.255.0#interface GigabitEthernet1/0/0ipaddress10.1.2.2255.255.255.0

AR2配置

interface GigabitEthernet0/0/1ipaddress12.1.1.2255.255.255.0#interface GigabitEthernet0/0/2ipaddress24.1.1.2255.255.255.0

AR3配置

interface GigabitEthernet0/0/1ipaddress34.1.1.3255.255.255.0#interface GigabitEthernet0/0/2ipaddress13.1.1.3255.255.255.0

AR4配置

interface GigabitEthernet0/0/0ipaddress10.1.3.4255.255.255.0#interface GigabitEthernet0/0/1ipaddress34.1.1.4255.255.255.0#interface GigabitEthernet0/0/2ipaddress24.1.1.4255.255.255.0

建立BGP邻居

AR1配置

bgp100peer12.1.1.2 as-number200peer13.1.1.3 as-number200

AR2配置

bgp200peer12.1.1.1 as-number100peer24.1.1.4 as-number200

AR3配置

bgp200peer13.1.1.1 as-number100peer34.1.1.4 as-number200

AR4配置

bgp200peer24.1.1.2 as-number200peer34.1.1.3 as-number200

配置BGP路由

AR1配置

bgp100network10.1.1.0255.255.255.0 network10.1.1.0255.255.255.255 network10.1.2.0255.255.255.0 network12.1.1.0255.255.255.0 network13.1.1.0255.255.255.0

AR2配置

bgp200network12.1.1.0255.255.255.0 network24.1.1.0255.255.255.0

AR3配置

bgp200network13.1.1.0255.255.255.0 network34.1.1.0255.255.255.0

AR4配置

bgp200network10.1.3.0255.255.255.0 network24.1.1.0255.255.255.0 network34.1.1.0255.255.255.0

配置策略路由

策略路由的配置思路：
1、匹配业务流量ACL 3000
2.业务流量进行分类classifier—if-match
3.业务流量流行为behavior—redirect
4.业务流量策略 traffic policy----关联流分类和流行为
5.将策略应用到接口的入方向

AR1配置

acl number3000rule5permitipsource10.1.1.00.0.0.255 destination10.1.3.00.0.0.255 acl number3001rule5permitipsource10.1.2.00.0.0.255 destination10.1.3.00.0.0.255#traffic classifier PBR1 operator or if-match acl3001traffic classifier PBR operator or if-match acl3000#traffic behavior PBR1 redirect ip-nexthop13.1.1.3 traffic behavior PBR redirect ip-nexthop12.1.1.2#traffic policy PBR1 classifier PBR1 behavior PBR1 traffic policy PBR classifier PBR behavior PBR#interface GigabitEthernet0/0/0 traffic-policy PBR inbound

实验验证

PC1走AR1-AR2-AR4到达PC3
PC2走AR1-AR3-AR4到达PC3