太阁5茶圣

然后进行报文转发,RouterA与RouterB间有两条链路相连,[RouterA]policy-based-routelab1permitnode10[RouterA-policy-based-route-lab1-10]if-matchpacket-length641400[RouterA-policy-based-route-lab1-10]applyip-addressnext-hop192.168.1.2[RouterA-policy-based-route-lab1-10]quit[RouterA]policy-based-routelab1permitnode20[RouterA-policy-based-route-lab1-20]if-matchpacket-length14011500[RouterA-policy-based-route-lab1-20]applyip-addressnext-hop192.168.2.2[RouterA-policy-based-route-lab1-20]quit#使能本地策略路由,可以使不同的数据流通过不同的链路进行发送,所有其它长度的报文都按基于目的地址的方法进行路由选路,即RouterB接口GigabitEthernet2/0/0在接收到ICMP请求报文后给RouterA发送5个ICMP应答报文。

#清空RouterB接口统计信息,即RouterB接口GigabitEthernet1/0/0在接收到ICMP请求报文后给RouterA发送5个ICMP应答报文,只有RouterB接口GigabitEthernet2/0/0发送报文总数量增加了5,o路由策略的操作对象是路由信息,[RouterA]iproute-static10.1.2.024192.168.1.2[RouterA]iproute-static10.1.2.024192.168.2.2#在RouterB上配置静态路由,而是根据需要,用户希望实现本机下发的不同长度的报文通过不同的下一跳地址进行转发,而且能够根据报文的源地址、报文大小和链路质量等属性来制定策略路由,ping-s8010.1.2.1PING10.1.2.1:80databytes,pressCTRL_CtobreakReplyfrom10.1.2.1:bytes=80Sequence=1ttl=255time=2msReplyfrom10.1.2.1:bytes=80Sequence=2ttl=255time=2msReplyfrom10.1.2.1:bytes=80Sequence=3ttl=255time=2msReplyfrom10.1.2.1:bytes=80Sequence=4ttl=255time=2msReplyfrom10.1.2.1:bytes=80Sequence=5ttl=255time=2ms---10.1.2.1pingstatistics---5packet(s)tranitted5packet(s)received0.00%packetlossround-tripmin/avg/max=2/2/2ms#查看RouterB接口统计信息,只有RouterB接口GigabitEthernet1/0/0发送报文总数量增加了5,以实现本机下发的不同长度的报文通过不同的下一跳地址进行转发,长度为1401~1500字节的报文设置192.168.2.2作为下一跳地址,以改变数据包转发路径,操作步骤1.配置各接口的IP地址#配置RouterA的各接口的IP地址,以实现本机下发的不同长度的报文匹配不同的策略点,分为本地策略路由、接口策略路由和智能策略路由SPR(SmartPolicyRouting),3.使能本地策略路由,路由策略主要实现了路由过滤和路由属性设置等功能,配置本地策略路由示例:组网需求:如图所示。

说明:策略路由与路由策略(RoutingPolicy)存在以下不同:o策略路由的操作对象是数据包,system-view[Huawei]sysnameRouterB[RouterB]interfacegigabitethernet1/0/0[RouterB-GigabitEthernet1/0/0]ipaddress192.168.1.2255.255.255.0[RouterB-GigabitEthernet1/0/0]quit[RouterB]interfacegigabitethernet2/0/0[RouterB-GigabitEthernet2/0/0]ipaddress192.168.2.2255.255.255.0[RouterB-GigabitEthernet2/0/0]quit[RouterB]interfaceloopback0[RouterB-LoopBack0]ipaddress10.1.2.1255.255.255.0[RouterB-LoopBack0]quit2.配置静态路由#在RouterA上配置静态路由,太阁都给你整理好啦,所以RouterA根据策略路由确定的下一跳为192.168.1.2,并将报文数据字段长度设为80字节,displayinterfacegigabitethernet1/0/0GigabitEthernet1/0/0currentstate:UPLineprotocolcurrentstate:UPLastlineprotocoluptime:2012-07-3011:23:24Description:HUAWEI,ARSeries,GigabitEthernet1/0/0InterfaceRoutePort,TheMaximumTranitUnitis1500InternetAddressis192.168.1.2/24IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressis0819-a6ce-7d4cLastphysicaluptime:2012-07-3011:23:24Lastphysicaldowntime:2012-07-2416:54:19Currentsystemtime:2012-07-3016:04:14PortMode:COMMONCOPPERSpeed:1000,Loopback:NONEDuplex:FULL,Negotiation:ENABLEMdi:AUTOLast300secondsinputrate0bits/sec,0packets/secLast300secondsoutputrate0bits/sec,0packets/secInputpeakrate7568bits/sec,Recordtime:2012-07-3012:57:02Outputpeakrate1008bits/sec,Recordtime:2012-07-3012:42:42Input:135403packets,118911125bytesUnicast:107066,Multicast:10468Broadcast:17869,Jumbo:0Discard:0,TotalError:0CRC:0,Giants:0Jabbers:0,Throttles:0Runts:0,Symbols:0Ignoreds:0,Frames:0Output:59070packets,14217739bytesUnicast:37581,Multicast:21485Broadcast:4,Jumbo:0Discard:0,TotalError:0Collisions:0,ExcessiveCollisions:0LateCollisions:0,Deferreds:0Inputbandwidthutilizationthreshold:100.00%Outputbandwidthutilizationthreshold:100.00%Inputbandwidthutilization:0.01%Outputbandwidthutilization:0.01%displayinterfacegigabitethernet2/0/0GigabitEthernet2/0/0currentstate:UPLineprotocolcurrentstate:UPLastlineprotocoluptime:2012-07-3011:23:29Description:HUAWEI,ARSeries,GigabitEthernet2/0/0InterfaceRoutePort,Th士毓娱乐网eMaximumTranitUnitis1500InternetAddressis192.168.2.2/24IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressis0819-a6ce-7d4dLastphysicaluptime:2012-07-3011:23:29Lastphysicaldowntime:2012-07-3011:09:17Currentsystemtime:2012-07-3016:04:19PortMode:COMMONCOPPERSpeed:1000,Loopback:NONEDuplex:FULL,Negotiation:ENABLEMdi:AUTOLast300secondsinputrate0bits/sec,0packets/secLast300secondsoutputrate0bits/sec,0packets/secInputpeakrate11576bits/sec,Recordtime:2012-07-3013:46:52Outputpeakrate11576bits/sec,Recordtime:2012-07-3013:46:52Input:135403packets,118911125bytesUnicast:107066,Multicast:10468Broadcast:17869,Jumbo:0Discard:0,TotalError:0CRC:0,Giants:0Jabbers:0,Throttles:0Runts:0,Symbols:0Ignoreds:0,Frames:0Output:59070packets,14217739bytesUnicast:37581,Multicast:21485Broadcast:4,Jumbo:0Discard:0,TotalError:0Collisions:0,ExcessiveCollisions:0LateCollisions:0,Deferreds:0Inputbandwidthutilizationthreshold:100.00%Outputbandwidthutilizationthreshold:100.00%Inputbandwidthutilization:0.01%Outputbandwidthutilization:0.01%#在RouterA上PingRouterB的Loopback0,displayinterfacegigabitethernet1/0/0GigabitEthernet1/0/0currentstate:UPLineprotocolcurrentstate:UPLastlineprotocoluptime:2012-07-3011:23:24Description:HUAWEI,ARSeries,GigabitEthernet1/0/0InterfaceRoutePort,TheMaximumTranitUnitis1500InternetAddressis192.168.1.2/24IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressis0819-a6ce-7d4cLastphysicaluptime:2012-07-3011:23:24Lastphysicaldowntime:2012-07-2416:54:19Currentsystemtime:2012-07-3016:04:50PortMode:COMMONCOPPERSpeed:1000,Loopback:NONEDuplex:FULL,Negotiation:ENABLEMdi:AUTOLast300secondsinputrate40bits/sec,0packets/secLast300secondsoutputrate0bits/sec,0packets/secInputpeakrate7568bits/sec,Recordtime:2012-07-3012:57:02Outputpeakrate1008bits/sec,Recordtime:2012-07-3012:42:42Input:135403packets,118911125bytesUnicast:107066,Multicast:10468Broadcast:17869,Jumbo:0Discard:0,TotalError:0CRC:0,Giants:0Jabbers:0,Throttles:0Runts:0,Symbols:0Ignoreds:0,Frames:0Output:59070packets,14217739bytesUnicast:37581,Multicast:21485Broadcast:4,Jumbo:0Discard:0,TotalError:0Collisions:0,ExcessiveCollisions:0LateCollisions:0,Deferreds:0Inputbandwidthutilizationthreshold:100.00%Outputbandwidthutilizationthreshold:100.00%Inputbandwidthutilization:0.01%Outputbandwidthutilization:0.01%displayinterfacegigabitethernet2/0/0GigabitEthernet2/0/0currentstate:UPLineprotocolcurrentstate:UPLastlineprotocoluptime:2012-07-3011:23:29Description:HUAWEI,ARSeries,GigabitEthernet2/0/0InterfaceRoutePort,TheMaximumTranitUnitis1500InternetAddressis192.168.2.2/24IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressis0819-a6ce-7d4dLastphysicaluptime:2012-07-3011:23:29Lastphysicaldowntime:2012-07-3011:09:17Currentsystemtime:2012-07-3016:04:55PortMode:COMMONCOPPERSpeed:1000,Loopback:NONEDuplex:FULL,Negotiation:ENABLEMdi:AUTOLast300secondsinputrate200bits/sec,0packets/secLast300secondsoutputrate192bits/sec,0packets/secInputpeakrate11576bits/sec,Recordtime:2012-07-3013:46:52Outputpeakrate11576bits/sec,Recordtime:2012-07-3013:46:52Input:135403packets,118911125bytesUnicast:107066,Multicast:10468Broadcast:17869,Jumbo:0Discard:0,TotalError:0CRC:0,Giants:0Jabbers:0,Throttles:0Runts:0,Symbols:0Ignoreds:0,Frames:0Output:59070packets,14217739bytesUnicast:37581,Multicast:21485Broadcast:4,Jumbo:0Discard:0,TotalError:0Collisions:0,ExcessiveCollisions:0LateCollisions:0,Deferreds:0Inputbandwidthutilizationthreshold:100.00%Outputbandwidthutilizationthreshold:100.00%Inputbandwidthutilization:0.01%Outputbandwidthutilization:0.01%比较执行命令ping-s140110.1.2.1前后RouterB接口统计信息,「太阁干货」关于路由策略相关问题,策略路由使网络管理者不仅能够根据报文的目的地址,选择费用较低的链路传输业务数据,它通过改变路由属性(包括可达性)来改变网络流量所经过的路径,受益策略路由具有如下优点:可以根据用户实际需求制定策略进行路由选择,ping-s140110.1.2.1PING10.1.2.1:1401databytes,pressCTRL_CtobreakReplyfrom10.1.2.1:bytes=1401Sequence=1ttl=255time=1msReplyfrom10.1.2.1:bytes=1401Sequence=2ttl=255time=1msReplyfrom10.1.2.1:bytes=1401Sequence=3ttl=255time=1msReplyfrom10.1.2.1:bytes=1401Sequence=4ttl=255time=1msReplyfrom10.1.2.1:bytes=1401Sequence=5ttl=255time=2ms---10.1.2.1pingstatistics---5packet(s)tranitted5packet(s)received0.00%packetlossround-tripmin/avg/max=1/1/2ms#查看RouterB接口统计信息,resetcountersinterfacegigabitethernet1/0/0resetcountersinterfacegigabitethernet2/0/0#查看RouterB接口统计信息,在路由表已经产生的情况下,displayinterfacegigabitethernet1/0/0GigabitEthernet1/0/0currentstate:UPLineprotocolcurrentstate:UPLastlineprotocoluptime:2012-07-3011:23:24Description:HUAWEI,ARSeries,GigabitEthernet1/0/0InterfaceRoutePort,TheMaximumTranitUnitis1500InternetAddressis192.168.1.2/24IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressis0819-a6ce-7d4cLastphysicaluptime:2012-07-3011:23:24Lastphysicaldowntime:2012-07-2416:54:19Currentsystemtime:2012-07-3015:00:15PortMode:COMMONCOPPERSpeed:1000,Loopback:NONEDuplex:FULL,Negotiation:ENABLEMdi:AUTOLast300secondsinputrate152bits/sec,0packets/secLast300secondsoutputrate16bits/sec,0packets/secInputpeakrate7568bits/sec,Recordtime:2012-07-3012:57:02Outputpeakrate1008bits/sec,Recordtime:2012-07-3012:42:42Input:135403packets,118911125bytesUnicast:107066,Multicast:10468Broadcast:17869,Jumbo:0Discard:0,TotalError:0CRC:0,Giants:0Jabbers:0,Throttles:0Runts:0,Symbols:0Ignoreds:0,Frames:0Output:59070packets,14217739bytesUnicast:37581,Multicast:21485Broadcast:4,Jumbo:0Discard:0,TotalError:0Collisions:0,ExcessiveCollisions:0LateCollisions:0,Deferreds:0Inputbandwidthutilizationthreshold:100.00%Outputbandwidthutilizationthreshold:100.00%Inputbandwidthutilization:0.01%Outputbandwidthutilization:0.01%displayinterfacegigabitethernet2/0/0GigabitEthernet2/0/0currentstate:UPLineprotocolcurrentstate:UPLastlineprotocoluptime:2012-07-3011:23:29Description:HUAWEI,ARSeries,GigabitEthernet2/0/0InterfaceRoutePort,TheMaximumTranitUnitis1500InternetAddressis192.168.2.2/24IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressis0819-a6ce-7d4dLastphysicaluptime:2012-07-3011:23:29Lastphysicaldowntime:2012-07-3011:09:17Currentsystemtime:2012-07-3015:01:02PortMode:COMMONCOPPERSpeed:1000,Loopback:NONEDuplex:FULL,Negotiation:ENABLEMdi:AUTOLast300secondsinputrate112bits/sec,0packets/secLast300secondsoutputrate0bits/sec,0packets/secInputpeakrate11576bits/sec,Recordtime:2012-07-3013:46:52Outputpeakrate11576bits/sec,Recordtime:2012-07-3013:46:52Input:135403packets,118911125bytesUnicast:107066,Multicast:10468Broadcast:17869,Jumbo:0Discard:0,TotalError:0CRC:0,Giants:0Jabbers:0,Throttles:0Runts:0,Symbols:0Ignoreds:0,Frames:0Output:59070packets,14217739bytesUnicast:37581,Multicast:21485Broadcast:4,Jumbo:0Discard:0,TotalError:0Collisions:0,ExcessiveCollisions:0LateCollisions:0,Deferreds:0Inputbandwidthutilizationthreshold:100.00%Outputbandwidthutilizationthreshold:100.00%Inputbandwidthutilization:0.01%Outputbandwidthutilization:0.01%比较执行命令ping-s8010.1.2.1前后RouterB接口统计信息,增强路由选择的灵活性和可控性,依照某种策略改变数据包转发路径,2.在RouterA上配置本地策略路由的动作。

定义:策略路由PBR(Policy-BasedRouting)是一种依据用户制定的策略进行路由选择的机制,[RouterA]iplocalpolicy-based-routelab14.验证配置结果#清空RouterB接口统计信息,但是目前越来越多的用户希望能够在传统路由转发的基础上根据自己定义的策略进行报文转发和选路,不按照路由表进行转发,所以RouterA根据策略路由确定的下一跳为192.168.2.2,目的传统的路由转发原理是首先根据报文的目的地址查找路由表,配置思路:采用如下思路配置本地策略路由:1.在RouterA上配置IP报文长度匹配条件,resetcountersinterfacegigabitethernet1/0/0resetcountersinterfacegigabitethernet2/0/0#查看RouterB接口统计信息,displayinterfacegigabitethernet1/0/0GigabitEthernet1/0/0currentstate:UPLineprotocolcurrentstate:UPLastlineprotocoluptime:2012-07-3011:23:24Description:HUAWEI,ARSeries,GigabitEthernet1/0/0InterfaceRoutePort,TheMaximumTranitUnitis1500InternetAddressis192.168.1.2/24IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressis0819-a6ce-7d4cLastphysicaluptime:2012-07-3011:23:24Lastphysicaldowntime:2012-07-2416:54:19Currentsystemtime:2012-07-3014:57:28PortMode:COMMONCOPPERSpeed:1000,Loopback:NONEDuplex:FULL,Negotiation:ENABLEMdi:AUTOLast300secondsinputrate40bits/sec,0packets/secLast300secondsoutputrate0bits/sec,0packets/secInputpeakrate7568bits/sec,Recordtime:2012-07-3012:57:02Outputpeakrate1008bits/sec,Recordtime:2012-07-3012:42:42Input:135403packets,118911125bytesUnicast:107066,Multicast:10468Broadcast:17869,Jumbo:0Discard:0,TotalError:0CRC:0,Giants:0Jabbers:0,Throttles:0Runts:0,Symbols:0Ignoreds:0,Frames:0Output:59070packets,14217739bytesUnicast:37581,Multicast:21485Broadcast:4,Jumbo:0Discard:0,TotalError:0Collisions:0,ExcessiveCollisions:0LateCollisions:0,Deferreds:0Inputbandwidthutilizationthreshold:100.00%Outputbandwidthutilizationthreshold:100.00%Inputbandwidthutilization:0.01%Outputbandwidthutilization:0.01%displayinterfacegigabitethernet2/0/0GigabitEthernet2/0/0currentstate:UPLineprotocolcurrentstate:UPLastlineprotocoluptime:2012-07-3011:23:29Description:HUAWEI,ARSeries,GigabitEthernet2/0/0InterfaceRoutePort,TheMaximumTranitUnitis1500InternetAddressis192.168.2.2/24IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressis0819-a6ce-7d4dLastphysicaluptime:2012-07-3011:23:29Lastphysicaldowntime:2012-07-3011:09:17Currentsystemtime:2012-07-3014:58:24PortMode:COMMONCOPPERSpeed:1000,Loopback:NONEDuplex:FULL,Negotiation:ENABLEMdi:AUTOLast300secondsinputrate48bits/sec,0packets/secLast300secondsoutputrate0bits/sec,0packets/secInputpeakrate11576bits/sec,Recordtime:2012-07-3013:46:52Outputpeakrate11576bits/sec,Recordtime:2012-07-3013:46:52Input:135403packets,118911125bytesUnicast:107066,Multicast:10468Broadcast:17869,Jumbo:0Discard:0,TotalError:0CRC:0,Giants:0Jabbers:0,Throttles:0Runts:0,Symbols:0Ignoreds:0,Frames:0Output:59070packets,14217739bytesUnicast:37581,Multicast:21485Broadcast:4,Jumbo:0Discard:0,TotalError:0Collisions:0,ExcessiveCollisions:0LateCollisions:0,Deferreds:0Inputbandwidthutilizationthreshold:100.00%Outputbandwidthutilizationthreshold:100.00%Inputbandwidthutilization:0.01%Outputbandwidthutilization:0.01%#在RouterA上PingRouterB的Loopback0,并将报文数据字段长度设为1401字节。

满足用户需求,[RouterB]iproute-static10.1.1.024192.168.1.1[RouterB]iproute-static10.1.1.024192.168.2.13.配置策略路由#配置名称为lab1的策略路由,,其中:长度为64~1400字节的报文设置192.168.1.2作为下一跳地址,从而降低企业数据服务的成本,在满足业务服务质量的前提下,提高链路的利用效率,system-view[Huawei]sysnameRouterA[RouterA]interfacegigabitethernet1/0/0[RouterA-GigabitEthernet1/0/0]ipaddress192.168.1.1255.255.255.0[RouterA-GigabitEthernet1/0/0]quit[RouterA]interfacegigabitethernet2/0/0[RouterA-GigabitEthernet2/0/0]ipaddress192.168.2.1255.255.255.0[RouterA-GigabitEthernet2/0/0]quit[RouterA]interfaceloopback0[RouterA-LoopBack0]ipaddress10.1.1.1255.255.255.0[RouterA-LoopBack0]quit#配置RouterB的各接口的IP地址。

相关信息