H3C交换机&路由器的策略路由配置
H3C交换机&路由器的策略路由配置
方法一：使用PBR实现，PBR就是策略路由（通常是存在路由器上的）node
如图，SWA与SWB互联，两端设备的Ge1/0/1属于192.168.2.0/24,SWA设备Ge1/0/2属于192.168.1.0/24，PCA地址192.168.1.2/24,PCB地址192.168.3.2/24,SWA不配置192.168.3.0的路由，而是经过下一跳的策略路由实现SWA去192.168.3.0的路由去向SWB,SWB配置好回包路由便可实现主机互通。
SWA基础配置：
[SWA]vlan 2
[SWA-vlan2]quit
[SWA]interface Vlan-interface 2
[SWA-Vlan-interface2]ip address 192.168.2.1 24
[SWA-Vlan-interface2]quit
[SWA]interface Vlan-interface 1
[SWA-Vlan-interface1]ip address 192.168.1.1 24
[SWA-Vlan-interface1]quitweb
[SWA]interface GigabitEthernet 1/0/1
[SWA-GigabitEthernet1/0/1]port link-type access
[SWA-GigabitEthernet1/0/1]port access vlan 2
[SWA-GigabitEthernet1/0/1]quit
[SWA]interface GigabitEthernet 1/0/2
[SWA-GigabitEthernet1/0/2]port link-type access
[SWA-GigabitEthernet1/0/2]port access vlan 1
[SWA-GigabitEthernet1/0/2]quitapp
SWB基础配置：
[SWB]vlan 2
[SWB-vlan2]quit
[SWB]interface Vlan-interface 2
[SWB-Vlan-interface2]ip address 192.168.2.2 24
[SWB-Vlan-interface2]quit
[SWB]interface Vlan-interface 1
[SWB-Vlan-interface1]ip address 192.168.3.1 24
[SWB-Vlan-interface1]quitsvg
[SWB]interface GigabitEthernet 1/0/1
[SWB-GigabitEthernet1/0/1]port link-type access
[SWB-GigabitEthernet1/0/1]port access vlan 2
[SWB-GigabitEthernet1/0/1]quitui
[SWB]interface GigabitEthernet 1/0/2
[SWB-GigabitEthernet1/0/2]port link-type access
[SWB-GigabitEthernet1/0/2]port access vlan 1
[SWB-GigabitEthernet1/0/2]quit
[SWB]ip route-static 192.168.1.0 24 192.168.2.1 #配置好回包路由
----------以上的基础配置好后将两端的PC地址配置好，PCA不能与PCB互通，下面配置PBR
xml
SWA配置PBR选路策略：
[SWA]acl advanced 3000
[SWA-acl-ipv4-adv-3000]rule 5 permit ip source 192.168.1.0 0.0.0.255 destination 192.168.3.0 0.0.0.255
[SWA-acl-ipv4-adv-3000]rule 10 deny ip
[SWA-acl-ipv4-adv-3000]quitblog
[SWA]policy-based-route pbr permit node 5 #建立pbr策略名为pbr动做为容许节点为5
[SWA-pbr-pbr-5]if-match acl 3000 #配置acl 3000里的源和目的
[SWA-pbr-pbr-5]apply next-hop 192.168.2.2 #配置好下一跳
[SWA-pbr-pbr-5]quit接口
[SWA]interface Vlan-interface 1 #我这里是vlan环境，因此配置在vlan接口上，若是是路由口则配置在三层接pc端的接口
[SWA-Vlan-interface1]ip policy-based-route pbr
[SWA-Vlan-interface1]quit图片
方法二：使用Qos策略实现
先将刚才vlan1里的策略删除
[SWA-Vlan-interface1]undo ip policy-based-route
基础配置都同样，不在配置ip
[SWA]traffic classifier c1 #建立Qos类
[SWA-classifier-c1]if-match acl 3000
[SWA-classifier-c1]quit
[SWA]traffic behavior b1 #建立Qos的行为动做
[SWA-behavior-b1]redirect next-hop 192.168.2.2
[SWA-behavior-b1]quit
[SWA]qos policy p1 #建立Qos策略将类和动做绑定
[SWA-qospolicy-p1]classifier c1 behavior b1
[SWA-qospolicy-p1]quit
[SWA]qos vlan-policy p1 vlan 1 inbound #绑定vlan便可
----------------------------------------------------------------------------------------------------