華為策略路由配置實(shí)例

1、華為策略路由配置實(shí)例1、組網(wǎng)需求?1?策略路由組網(wǎng)示例圖?公司希望上送外部網(wǎng)絡(luò)的報(bào)文中，IP優(yōu)先級(jí)為4、5、6、7的報(bào)文通過(guò)高速鏈路傳輸，而IP優(yōu)先級(jí)為0、1、2、3的報(bào)文則通過(guò)低速鏈路傳輸。2、配置思路1、創(chuàng)建VLAN并配置各接口，實(shí)現(xiàn)公司和外部網(wǎng)絡(luò)設(shè)備互連。2、配置ACL規(guī)則，分別匹配IP優(yōu)先級(jí)4、5、6、7,以及IP優(yōu)先級(jí)0、1、2、3。3、配置流分類，匹配規(guī)則為上述 ACL規(guī)則，使設(shè)備可以對(duì)報(bào)文進(jìn)行區(qū)分。5、配置流策略，綁定上述流分類和流行為，并應(yīng)用到接口 GE2/0/1的入方向上，實(shí)現(xiàn)策 略路由。3、操作步驟3.1、 創(chuàng)建VLAN并配置各接口#?在 Switch 上創(chuàng)建 VLAN10

2、0 和 VLAN200 。<HUAWEI>? system-viewHUAWEI? sysnameSwitchSwitch? vlanbatch100200#?配置Switch上接口 GE1/0/1、GE1/0/2和GE2/0/1的接口類型為Trunk ,并加入VLAN100 和 VLAN200 。Switch? interfacegigabitethernet1/0/1Switch-GigabitEthernet1/0/1? portlink-typetrunkSwitch-GigabitEthernet1/0/1?porttrunkallow-passvlan100200Swi

3、tch? interfacegigabitethernet1/0/2Switch-GigabitEthernet1/0/2?portlink-typetrunkSwitch-GigabitEthernet1/0/2?porttrunkallow-passvlan100200Switch-GigabitEthernet1/0？quitSwitch? interfacegigabitethernet2/0/1Switch-GigabitEthernet2/0/1?portlink-typetrunkSwitch-GigabitEthernet2/0/1?porttrunkallow-passvla

4、n100200Switch-GigabitEthernet2/0/1?quit配置LSW與Switch對(duì)接的接口為Trunk類型接口，并加入 VLAN100和VLAN200 。#?創(chuàng)建VLANIF100和VLANIF200 ,并配置各虛擬接口 IP地址。Switch? interfacevlanif100Switch-Vlanif100? ipaddress24Switch-Vlanif100? quitSwitch? interfacevlanif200Switch-Vlanif200? ipaddress24Switch-Vlanif200? quit3.2、 配置ACL規(guī)則#?在Swit

5、ch上創(chuàng)建編碼為3001、3002的高級(jí)ACL,規(guī)則分別為允許IP優(yōu)先級(jí)0、1、2、3和允許IP優(yōu)先級(jí)4、5、6、7的報(bào)文通過(guò)。Switch? acl3001Switch-acl-adv-3001? rulepermitipprecedence0Switch-acl-adv-3001? rulepermitipprecedence1Switch-acl-adv-3001? rulepermitipprecedence2Switch-acl-adv-3001?Switch-acl-adv-3001?Switch? acl3002Switch-acl-adv-3002?Switch-acl-adv

6、-3002?Switch-acl-adv-3002?Switch-acl-adv-3002?Switch-acl-adv-3002?3.3、 配置流分類rulepermitipprecedence3 quitrulepermitipprecedence4rulepermitipprecedence5 rulepermitipprecedence6 rulepermitipprecedence7 quit在Switch上創(chuàng)建流分類c1、c2,匹配規(guī)則分別為 ACL3001和 ACL3002 oSwitch? trafficclassifierc1operatorand Switch-classi

7、fier-c1? if-matchacl3001 Switch-classifier-c1? quitSwitch? trafficclassifierc2operatorand Switch-classifier-c2? if-matchacl3002Switch-classifier-c2? quit3.4、 配置流行為#?Switch? trafficbehaviorb1Switch-behavior-b1? redirectip-nexthopSwitch-behavior-b1? quitSwitch? trafficbehaviorb2Switch-behavior-b2? red

8、irectip-nexthopSwitch-behavior-b2? quit3.5、 配置流策略并應(yīng)用到接口上#?在Switch上創(chuàng)建流策略p1 ,將流分類和對(duì)應(yīng)的流行為進(jìn)行綁定。Switch? trafficpolicyp1Switch-trafficpolicy-p1?classifierc1behaviorb1Switch-trafficpolicy-p1?classifierc2behaviorb2Switch-trafficpolicy-p1?quit#?將流策略p1應(yīng)用到接口GE2/0/1的入方向上。Switch? interfacegigabitethernet2/0/1Swi

9、tch-GigabitEthernet2/0/1?traffic-policyp1inboundSwitch-GigabitEthernet2/0/1?return3.6、 驗(yàn)證配置結(jié)果#?查看ACL規(guī)則的配置信息。<Switch>? displayacl3001AdvancedACL3001,4rulesAcl'sstepis5?rule5permitipprecedenceroutine(match-counter0) ?rule10permitipprecedencepriority(match-counter0)?rule15permitipprecedenceim

10、mediate(match-counter0)?rule20permitipprecedenceflash(match-counter0)<Switch>? displayacl3002AdvancedACL3002,4rulesAcl'sstepis5?rule5permitipprecedenceflash-override(match-counter0)?rule10permitipprecedencecritical(match-counter0)?rule15permitipprecedenceinternet(match-counter0)?rule20perm

11、itipprecedencenetwork(match-counter0)#?查看流分類的配置信息。<Switch>? displaytrafficclassifieruser-defined?UserDefinedClassifierInformation:?Classifier:c1?Precedence:5?Operator:AND?Rule(s):?if-matchacl3001?Classifier:c2?Precedence:10?Operator:AND?Rule(s):if-matchacl3002Totalclassifiernumberis2?#?查看流策略的配

12、置信息。<Switch>? displaytrafficpolicyuser-definedp1?UserDefinedTrafficPolicyInformation:?Policy:p1?Classifier:c1?Operator:AND?Redirect:noforced?Redirectip-nexthop?Classifier:c2?Operator:AND?Behavior:b2?Redirect:noforced?Redirectip-nexthop4、配置文件Switch的配置文件#sysnameSwitch#vlanbatch100200#aclnumber30

13、01?rule5permitipprecedenceroutine?rule10permitipprecedencepriority?rule15permitipprecedenceimmediate?rule20permitipprecedenceflash#aclnumber3002?rule5permitipprecedenceflash-override?rule15permitipprecedenceinternet?rule20permitipprecedencenetwork#trafficclassifierc1operatorandprecedence5?if-matchac

14、l3001trafficclassifierc2operatorandprecedence10?if-matchacl3002#trafficbehaviorb1?redirectip-nexthoptrafficbehaviorb2?redirectip-nexthop#trafficpolicyp1match-orderconfig?classifierc1behaviorb1?classifierc2behaviorb2#interfaceVlanif100?ipaddress#interfaceVlanif200?ipaddress#interfaceGigabitEthernet1/0/1?portlink-typetru