路由策略与策略路由.doc

路由策略2012年8月3日9:48路由策略是对控制层面的东西进行优化。路由更新：减少路由条目（汇总，特殊区域）较少的路由频繁变动（被动接口）路由过滤：distribute-list filter-list重发布：1路由迁移 2 路由融合Prefix-list前缀列表A 只跟掩码 ip prefix-list R1 seq 5 deny /24等价于ACL 前缀列表是用来定位网络的，没有任何定义掩码的范围。B 跟一个参数 le geip prefix-list R1 seq 5 deny /24 le 30 ip prefix-list R1 seq 5 deny /24 ge 31所以的必须先满足/后面的掩码限定的范围 然后看le 或者ge的数值/24 le 30 表示 24= N =30/24 ge 31 31=N =32C 同时使用le geip prefix-list R1 seq 5 deny /24 ge 29 le 3029=Nnamestring: Serial1/1*Mar 1 00:04:26.083: ipfib_policy_set_interface_lookup: tag_ptr: 0x0*Mar 1 00:04:26.083: adj 0x0, NULL如果没有匹配，数据正常转发*Mar 1 00:04:54.623: IP: s= (Serial1/0), d=, len 28, FIB policy rejected(no match) - normal forwarding使用PBR来针对不同的感兴趣的流量做下一跳首先的NAT同上ip nat inside source route-map e interface FastEthernet0/0 overloadip nat inside source route-map s interface Serial1/1 overloadip access-list extended wan deny ip host any deny ip host any permit ip 55 anyroute-map e permit 10 match ip address wan match interface FastEthernet0/0!route-map s permit 10 match ip address wan match interface Serial1/1主备链路配置 ip sla monitor 1 type echo protocol ipIcmpEcho source-ipaddr frequency 5ip sla monitor schedule 1 life forever start-time now!track 100 rtr 1 reachability delay down 1 up 1ip http serverno ip http secure-serverip route track 100ip route 2 优选的电信的线路 PBR的配置 ip sla monitor 2 type echo protocol ipIcmpEcho source-ipaddr frequency 5ip sla monitor schedule 2 life forever start-time now!track 200 rtr 2 reachability delay down 1 up 1!ip access-list extended chinaunion deny ip host any deny ip host any permit ip 55 55!route-map PBR permit 10 match ip address chinaunion set ip next-hop verify-availability 1 track 200 在设置下一跳之前检测可达性，调用track检测 set ip next-hop !interface Serial1/2 ip address 19