?。ㄒ唬?Route Maps
特性:
Route Maps類似于access lists,不同之處在于Route Maps可以改變Packets/Routes的部分屬性。
用途:
Route Maps主要用于Redistribution和Policy Routing及BGP的實(shí)現(xiàn)。
實(shí)現(xiàn):
Policy Routing發(fā)送Packets到Route Maps實(shí)現(xiàn)策略路由轉(zhuǎn)發(fā)。
Redistribution發(fā)送Routes到Route Maps實(shí)現(xiàn)路由條目的過濾。
配置說明:
Route Maps如果沒有指定Action及Sequence Number屬性,默認(rèn):
Action: permit
Sequence Number: 10
且Sequence Number不會(huì)自動(dòng)增加。
即如果在使用Route Maps語(yǔ)句時(shí)不指定Sequence Number,則覆蓋Sequence Number為10的默認(rèn)條目。
Route Maps Deny Action:
Redistribution: 特定路由條目不會(huì)被重分布。
Policy Routing: 特定的Packets不會(huì)按策略路由轉(zhuǎn)發(fā),但會(huì)梗概正常的路由表?xiàng)l目轉(zhuǎn)發(fā)。
Case Study:Policy Routing
注:(1)Policy Routing只影響入流量。
(2)可以使用Standard及Extended ACL.
?。?)全局配置ip local policy route-map sense可將策略路由應(yīng)用于Router本身發(fā)送的Packets.
<1> Standard ACL
interface Serial 0 ip address 172.16.5.1 255.255.255.0 ip policy route-map sense!access-list 1 permit 172.16.6.0 0.0.0.255access-list 2 permit 172.16.7.0 0.0.0.255!route-map sense permit 10 match ip address 1 set ip next-hop 172.16.4.2!route-map sense permit 20 match ip address 2 set ip next-hop 172.16.4.3
<2> Extended ACL
interface Ethernet 0 ip address 172.16.1.4 255.255.255.0 ip policy route-map sense!access-list 105 permit tcp 172.16.1.0 0.0.0.255 eq ftp anyaccess-list 105 permit tcp 172.16.1.0 0.0.0.255 eq ftp-data anyaccess-list 106 permit tcp 172.16.1.0 0.0.0.255 eq telnet any!route-map sense permit 10 match ip address 105 set ip next-hop 172.16.2.1!route-map sense permit 20 match ip address 106 set ip next-hop 172.16.3.1
<3> Length of the Packets
interface Ethernet0 ip address 172.16.1.4 255.255.255.0 ip policy route-map sense!route-map sense permit 10 match length 1000 1600 set ip next-hop 172.16.2.1!route-map sense permit 20 match length 0 400 set ip next-hop 172.16.3.1
<4> Router's Packets
interface Ethernet0 ip address 172.16.1.4 255.255.255.0 ip policy route-map sense!ip local policy route-map sense!access-list 120 permit ip any 172.16.1.0 0.0.0.255access-list 120 permit ospf any any!route-map sense permit 10 match ip address 120!route-map sense permit 20 match length 1000 1600 set ip next-hop 172.16.2.1!route-map sense permit 30 match length 0 400 set ip next-hop 172.16.3.1
新聞熱點(diǎn)
疑難解答
圖片精選