基于Linux策略路由的实现.doc

基于Linux策略路由的实现作者： 来源： 发表时间：2006-12-12 浏览次数： 107 字号：大中小基于LINUX策略路由的实现一、网络结构eth0 0 gw 54 -interneleth1 06 gw -interneleth2 gw -internel二、实现目的：1.不改变现有网络拓扑结构。2.根据目的地址确定数据走向，所有到/16、/16的走54。3.根据源地址确定数据走向，3走adsl路由，其它走默认main路由。三、软件要求：IPROUTErootADSL root# rpm -qa |grep iproute （查看是否有iproute软件包）iproute-2.4.7-7.AS21.1四、实现步骤：rootADSL root# ip link (查看本地链路）1: lo: mtu 16436 qdisc noqueuelink/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:002: eth0: mtu 1500 qdisc pfifo_fast qlen 100link/ether 00:90:27:99:1d:fa brd ff:ff:ff:ff:ff:ff3: eth1: mtu 1500 qdisc pfifo_fast qlen 100link/ether 00:40:05:11:fe:78 brd ff:ff:ff:ff:ff:ff4: eth2: mtu 1500 qdisc pfifo_fast qlen 100link/ether 00:40:05:42:65:88 brd ff:ff:ff:ff:ff:ffrootADSL root# ip add （查看本地地址）1: lo: mtu 16436 qdisc noqueuelink/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00inet /8 brd 55 scope host lo2: eth0: mtu 1500 qdisc pfifo_fast qlen 100link/ether 00:90:27:99:1d:fa brd ff:ff:ff:ff:ff:ffinet 0/16 brd 55 scope global eth03: eth1: mtu 1500 qdisc pfifo_fast qlen 100link/ether 00:40:05:11:fe:78 brd ff:ff:ff:ff:ff:ffinet 06/24 brd 55 scope global eth14: eth2: mtu 1500 qdisc pfifo_fast qlen 100link/ether 00:40:05:42:65:88 brd ff:ff:ff:ff:ff:ffinet /24 brd 55 scope global eth2rootADSL root# ip route （查看本地路由和ip route ls table main 或route命令相等）/24 dev eth2 scope link/24 dev eth1 scope link/16 via 54 dev eth0/16 dev eth0 scope link/16 via 54 dev eth0/8 dev lo scope linkdefault via dev eth1rootADSL root# ip rule （查看本地路由策略）0: from all lookup local （本地路由表系统默认id=255，优先级0）32766: from all lookup main （默认的标准路由表id=254，优先级32766）32767: from all lookup default (本地默认路由表系统默认id=253，优先级32767）rootADSL root# echo 200 adsl /etc/iproute2/rt_tables （添加一个新的路由表）rootADSL root# ip route add /16 via 54 dev eth0 table adslrootADSL root# ip route add /16 via 54 dev eth0 table adsl（为adsl路由表添加到HK AND QY的路由）rootADSL root# ip route add /16 via 54 dev eth0 table adsl（为adsl路由表添加一条默认路由）rootADSL root# ip rule add from 3 table adsl pref 32765（添加adsl路由表策略，这里添加3机器从adsl路由表走，而不是local,main,default表。设置adsl表优先级是32765，数值越小优先级别越高）rootADSL root# ip route ls table adsl （查看adsl表路由设置）/16 via 54 dev eth0/16 via 54 dev eth0default via dev eth2rootADSL root# ip rule （查看路由策略设置）0: from all lookup local32765: from 3 lookup adsl （新加id=200,优先级32765）32766: from all lookup main32767: from all lookup defaultrootADSL root# ip route flush cache (使新路由生效）rootADSL root# iptable -t nat -A POSTROUTING -s 3 -j SNAT to (让eth0 流向eth2)五、验证：C:Documents and Settingsmistracert 4 （查看到hk的路由路径）Tracing route to 4 over a maximum of 30 hops1 1 ms 1 ms 1 ms 02 1 ms 1 ms tracert 54 （查看到qy的路由路径）Tracing route to 54 over a maximum of 30 hops1 1 ms 1 ms tracert （测试外部路由路径）Tracing route to 2over a maximum of 30 hops:1 1 ms 1 ms 1 ms 02 1 ms 1 ms 1 ms 3 11 ms 9 ms 10 ms 4 9 ms 8 ms 9 ms 445 10 ms 14 ms 8 ms 76 11 ms 10 ms 10 ms 7 13 ms 10 ms 10 ms 8 9 ms 9 ms 9 ms 139 42 ms 41 ms 40 ms 202.97.34.