华为策略路由配置实例

1、华为策略路由配置实例1、组网需求图1策略路由组网示例图如上图1所示，公司用户通过Switch双归属到外部网络设备。其中，一条是低速链路，网关为；另外一条是高速链路，网关为。公司希望上送外部网络的报文中，IP优先级为4、5、6、7的报文通过高速链路传输，而IP优先级为0、1、2、3的报文则通过低速链路传输。2、配置思路1、创建VLANW配置各接口，实现公司和外部网络设备互连。2、配置ACL规则，分别匹配IP优先级4、5、6、7,以及IP优先级0、1、2、33、配置流分类，匹配规则为上述ACL规则，使设备可以对报文进行区分。4、配置流行为，使满足不同规则的报文分别被重定向到和。5、配置流策略，绑定

2、上述流分类和流行为，并应用到接口GE2/0/1的入方向上,实现策略路由。3、操作步骤、创建VLAN配置各接口# 在Switch上创建VLAN10阱口VLAN200<HUAWEI>system-viewHUAWEIsysnameSwitchSwitchvlanbatch100200# 配置Switch上接口GE1/0/1、GE1/0/2和GE2/0/1的接口类型为Trunk,并力口入VLAN10阱口VLAN200Switchinterfacegigabitethernet1/0/1Switch-GigabitEthernet1/0/1portlink-typetrunkSwitch-

3、GigabitEthernet1/0/1porttrunkallow-passvlan100200Switch-GigabitEthernet1/0/1quitSwitchinterfacegigabitethernet1/0/2Switch-GigabitEthernet1/0/2portlink-typetrunkSwitch-GigabitEthernet1/0/2porttrunkallow-passvlan100200Switch-GigabitEthernet1/0/2quitSwitchinterfacegigabitethernet2/0/1Switch-GigabitEthe

4、rnet2/0/1portlink-typetrunkSwitch-GigabitEthernet2/0/1porttrunkallow-passvlan100200Switch-GigabitEthernet2/0/1quit配置LSW与Switch对接的接口为Trunk类型接口，并加入VLAN100F口VLAN200# 创建VLANIF100和VLANIF20Q并配置各虚拟接口IP地址Switchinterfacevlanif100Switch-Vlanif100ipaddress24Switch-Vlanif100quitSwitchinterfacevlanif200Switch-Vl

5、anif200ipaddress24Switch-Vlanif200quit、配置ACL规则# 在Switch上创建编码为3001、3002的高级ACL规则分别为允许IP优先级Switch acl 3001 Switch-acl-adv-3001Switch-acl-adv-3001 Switch-acl-adv-3001 Switch-acl-adv-3001 Switch-acl-adv-3001Switch acl 3002 Switch-acl-adv-3002Switch-acl-adv-3002 Switch-acl-adv-3002 Switch-acl-adv-3002 Swi

6、tch-acl-adv-30020、1、2、3和允许IP优先级4、5、6、7的报文通过。rulepermitipprecedence0rulepermitipprecedence1rulepermitipprecedence2rulepermitipprecedence3quitrulepermitipprecedence4rulepermitipprecedence5rulepermitipprecedence6rulepermitipprecedence7quit、配置流分类在Switch上创建流分类c1、c2,匹配规则分别为ACL3001和ACL3002Switchtrafficclas

7、sifierc1operatorandSwitch-classifier-c1if-matchacl3001Switch-classifier-c1quitSwitchtrafficclassifierc2operatorandSwitch-classifier-c2if-matchacl3002Switch-classifier-c2quit、配置流行为# 在Switch上创建流行为b1、b2,并分别指定重定向到网段和的动作Switchtrafficbehaviorb1Switch-behavior-b1redirectip-nexthopquitSwitchtrafficbehaviorb

8、2、配置流策略并应用到接口上#在Switch上创建流策略 Switch traffic policy pl Switch-trafficpolicy-pl Switch-trafficpolicy-pl Switch-trafficpolicy-plpl,将流分类和对应的流行为进行绑定classifierclbehaviorblclassifierc2behaviorb2quit# 将流策略p1应用到接口GE2/0/1的入方向上。Switchinterfacegigabitethernet2/0/1Switch-GigabitEthernet2/0/1traffic-policyp1inbou

9、ndSwitch-GigabitEthernet2/0/1return、验证配置结果# 查看ACL规则的配置信息。<Switch>displayacl3001AdvancedACL3001,4rulesAcl'sstepis5rule5permitipprecedenceroutine(match-counter0)rule10permitipprecedencepriority(match-counter0)rule15permitipprecedenceimmediate(match-counter0)rule20permitipprecedenceflash(matc

10、h-counter0)<Switch>displayacl3002AdvancedACL3002,4rulesAcl'sstepis5rule5permitipprecedenceflash-override(match-counter0)rule10permitipprecedencecritical(match-counter0)rule15permitipprecedenceinternet(match-counter0)rule20permitipprecedencenetwork(match-counter0)# 查看流分类的配置信息。<Switch>

11、displaytrafficclassifieruser-definedUserDefinedClassifierInformation:Classifier:c1Precedence:5Operator:ANDRule(s):if-matchacl3001Classifier:c2Precedence:10Operator:ANDRule(s):if-matchacl3002Totalclassifiernumberis2# 查看流策略的配置信息。<Switch>displaytrafficpolicyuser-definedp1UserDefinedTrafficPolicyI

12、nformation:Policy:p1Classifier:c1Operator:ANDBehavior:b1Redirect:noforcedRedirectip-nexthopClassifier:c2Operator:ANDBehavior:b2Redirect:noforcedRedirectip-nexthop4、配置文件Switch的配置文件#sysnameSwitch#vlanbatch100200#aclnumber3001rule5permitipprecedenceroutinerule10permitipprecedencepriorityrule15permitipp

13、recedenceimmediaterule20permitipprecedenceflash#aclnumber3002rule5permitipprecedenceflash-overriderule10permitipprecedencecriticalrule15permitipprecedenceinternetrule20permitipprecedencenetwork#trafficclassifiercloperatorandprecedence5if-matchacl3001trafficclassifierc2operatorandprecedence10if-matchacl3002#trafficbehaviorb1redirectip-nexthopbehaviorb2redirectip-nexthoppolicyp1match-orderconfigclassifierc1behaviorb1classifierc2behaviorb2#interfaceVlanif100ipaddressVlanif200ipaddressGigabitEthernet1/0/1portlink-typetr