网络情况如下:
用户1网络:172.16.1.0/24
用户2网络: 192.168.1.0/24至出口1网络:172.16.100.0/24至出口2网络:192.168.100.0/24
实现功能:用户1通过互联网出口1,用户2通过互联网出口2。
功能实现:在三层交换台机上配置默认路由,将数据包丢向192.168.100.253,再利用策略路由,凡是用户2网络IP192.168.1.0/24的地址都丢向172.16.100.253。配置步骤:
说明:这里接口的配置等操作略。
1、首先建立默认路由,将所有的数据包都丢往出口2的下一节点192.168.100.253
[H3C5500] ip route-static 0.0.0.0 0.0.0.0 192.168.100.253
2、配置流分类1,对象为172.16.1.0/24的数据
[H3C5500]acl number 3001
[H3C5500-acl-adv-3001] rule 0 permit ip source 172.16.1.0 0.0.0.255
[H3C5500] quit
[H3C5500] traffic classifier 1
[H3C5500-classifier-1] if-match acl 3001
[H3C5500-classifier-1] quit
3、配置刚才定义的流分类的行为,定义如果匹配就下一跳至出口1即172.16.100.253
[H3C5500] traffic behavior 1
[H3C5500-behavior-1] redirect next-hop 172.16.100.253
[H3C5500-behavior-1] quit
4、将刚才设置的应用至QOS策略中,定义policy 1
[H3C5500] qos policy 1
[H3C5500-qospolicy-1] classifier 1 behavior 1
[H3C5500-qospolicy-1] quit
5、在接口上应用定义的QOS策略policy 1
[H3C5500] interface GigabitEthernet 1/0/15
[H3C5500-GigabitEthernet1/0/15] qos apply policy 1 inbound
[H3C5500-GigabitEthernet1/0/15] quit
至此,配置已完成。
配置文件(略过一些接口配置信息):
version 5.20, Release 2102P02
#sysname H3C5500#domain default enable system#telnet server enable#vlan 1#vlan 100 to 103#traffic classifier 1 operator andif-match acl 3001#traffic behavior 1redirect next-hop 172.16.100.253#qos policy 1classifier 1 behavior 1#dhcp server ip-pool 1network 192.168.1.0 mask 255.255.255.0gateway-list 192.168.1.254dns-list 221.228.255.1#dhcp server ip-pool 2network 172.16.1.0 mask 255.255.255.0gateway-list 172.16.1.254dns-list 221.228.255.1#local-user huaweipassword cipher .]@USE=B,53Q=^Q`M<1!!service-type telnet terminallevel 3#acl number 3001rule 0 permit ip source 172.16.1.0 0.0.0.255#interface NULL0#interface Vlan-interface1ip address 192.168.0.254 255.255.255.0#interface Vlan-interface100ip address 192.168.100.254 255.255.255.0#interface Vlan-interface101ip address 192.168.1.254 255.255.255.0#interface Vlan-interface102ip address 172.16.100.254 255.255.255.0#interface Vlan-interface103ip address 172.16.1.254 255.255.255.0#interface GigabitEthernet1/0/1port link-type accessport access vlan 100speed 1000duplex full#interface GigabitEthernet1/0/2port link-type accessport access vlan 102speed 1000duplex full#interface GigabitEthernet1/0/15port link-type trunkport trunk permit vlan 1 101 103speed 1000duplex fullqos apply policy 1 inbound#interface GigabitEthernet1/0/16port link-type trunkport trunk permit vlan 1 101 103speed 1000duplex fullqos apply policy 1 inbound#ip route-static 0.0.0.0 0.0.0.0 192.168.100.253#dhcp enable#load xml-configuration#user-interface aux 0authentication-mode schemeuser-interface vty 0 4authentication-mode schemeuser privilege level 3#return