HCIP-2.3 路由策略配置

数通2023-02-07

路由策略配置

HCIP-2.3 路由策略配置-下一朵云
图1 实例拓扑图

1.如图1,配置各个接口的IP地址(略)

2.启用OSPF协议(略)

ospf默认1Gbps链路开销为1(经过几个链路开销就是几)

R1到4.4.4.4的上下两条路径的开销都为3,如图2

HCIP-2.3 路由策略配置-下一朵云
图2 R1到4.4.4.4开销

改变下边接口的开销来影响流量的路径

[R1]int g0/0/2
[R1-GigabitEthernet0/0/2]ospf cost 2

3.路由过滤(路由策略配置)

配置要求:

R1后边的网段不能访问7.7.7.7

R2、R3可以访问7.7.7.7

R1配置命令:

[R1]acl 2023	
[R1-acl-basic-2023]rule 5 deny source 7.7.7.0 0.0.0.255
[R1-acl-basic-2023]rule 10 per
[R1-acl-basic-2023]qu
[R1]ospf 1
[R1-ospf-1]filter-policy 2023 import 

此时,PC1、PC2无法访问7.7.7.7,R2、R3可以正常访问

PC>ping 7.7.7.7

Ping 7.7.7.7: 32 data bytes, Press Ctrl_C to break
Request timeout!
Request timeout!
Request timeout!
Request timeout!
Request timeout!

--- 7.7.7.7 ping statistics ---
  5 packet(s) transmitted
  0 packet(s) received
  100.00% packet loss
<R2>ping -a 2.2.2.2 7.7.7.7
  PING 7.7.7.7: 56  data bytes, press CTRL_C to break
    Reply from 7.7.7.7: bytes=56 Sequence=1 ttl=127 time=20 ms
    Reply from 7.7.7.7: bytes=56 Sequence=2 ttl=127 time=20 ms
    Reply from 7.7.7.7: bytes=56 Sequence=3 ttl=127 time=20 ms
    Reply from 7.7.7.7: bytes=56 Sequence=4 ttl=127 time=30 ms
    Reply from 7.7.7.7: bytes=56 Sequence=5 ttl=127 time=20 ms

  --- 7.7.7.7 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 20/22/30 ms
<R3>ping -a 3.3.3.3 7.7.7.7
  PING 7.7.7.7: 56  data bytes, press CTRL_C to break
    Reply from 7.7.7.7: bytes=56 Sequence=1 ttl=127 time=20 ms
    Reply from 7.7.7.7: bytes=56 Sequence=2 ttl=127 time=20 ms
    Reply from 7.7.7.7: bytes=56 Sequence=3 ttl=127 time=30 ms
    Reply from 7.7.7.7: bytes=56 Sequence=4 ttl=127 time=20 ms
    Reply from 7.7.7.7: bytes=56 Sequence=5 ttl=127 time=20 ms

  --- 7.7.7.7 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 20/22/30 ms

*更多路由策略内容详见后续更新的BGP相关知识