策略路由pbr.docx

1、策略路由pbr40.1.1.1为oa服务器 30.1.1.1为访问oa服务器终端20.1.1.1为yewu服务器 10.1.1.1为访问yewu服务器终端1、线路都正常R6#traR6#traceroute Protocol ip: Target IP address: 40.1.1.1Source address: 30.1.1.1Numeric display n: Timeout in seconds 3: Probe count 3: Minimum Time to Live 1: Maximum Time to Live 30: Port Number 33434: Loose, S

2、trict, Record, Timestamp, Verbosenone: Type escape sequence to abort.Tracing the route to 40.1.1.1 1 202.1.1.1 32 msec 16 msec 28 msec 2 100.1.1.2 44 msec 60 msec 68 msec 3 200.1.1.2 32 msec 44 msec 24 msec 4 201.1.1.5 60 msec 48 msec * R6#traceroute Protocol ip: Target IP address: 20.1.1.1Source ad

3、dress: 10.1.1.1Numeric display n: Timeout in seconds 3: Probe count 3: Minimum Time to Live 1: Maximum Time to Live 30: Port Number 33434: Loose, Strict, Record, Timestamp, Verbosenone: Type escape sequence to abort.Tracing the route to 20.1.1.1 1 202.1.1.1 28 msec 20 msec 24 msec 2 100.1.1.6 52 mse

4、c 36 msec 56 msec 3 201.1.1.5 60 msec 76 msec * R6#R5#traceroute Protocol ip: Target IP address: 30.1.1.1Source address: 40.1.1.1Numeric display n: Timeout in seconds 3: Probe count 3: Minimum Time to Live 1: Maximum Time to Live 30: Port Number 33434: Loose, Strict, Record, Timestamp, Verbosenone:

5、Type escape sequence to abort.Tracing the route to 30.1.1.1 1 201.1.1.6 20 msec 16 msec 28 msec 2 200.1.1.1 24 msec 28 msec 32 msec 3 100.1.1.1 28 msec 184 msec 160 msec 4 202.1.1.2 288 msec 40 msec * R5#traceroute Protocol ip: Target IP address: 10.1.1.1Source address: 20.1.1.1Numeric display n: Ti

6、meout in seconds 3: Probe count 3: Minimum Time to Live 1: Maximum Time to Live 30: Port Number 33434: Loose, Strict, Record, Timestamp, Verbosenone: Type escape sequence to abort.Tracing the route to 10.1.1.1 1 201.1.1.6 36 msec 24 msec 12 msec 2 100.1.1.5 32 msec 56 msec 32 msec 3 202.1.1.2 68 mse

7、c 68 msec * 2、R4上shutdown s1/2口R6#traceroute Protocol ip: Target IP address: 40.1.1.1Source address: 30.1.1.1Numeric display n: Timeout in seconds 3: Probe count 3: Minimum Time to Live 1: Maximum Time to Live 30: Port Number 33434: Loose, Strict, Record, Timestamp, Verbosenone: Type escape sequence

8、 to abort.Tracing the route to 40.1.1.1 1 202.1.1.1 16 msec 20 msec 24 msec 2 100.1.1.2 72 msec 32 msec 24 msec 3 200.1.1.2 48 msec 40 msec 52 msec 4 201.1.1.5 48 msec 68 msec *R6#traceroute Protocol ip: Target IP address: 20.1.1.1Source address: 10.1.1.1Numeric display n: Timeout in seconds 3: Prob

9、e count 3: Minimum Time to Live 1: Maximum Time to Live 30: Port Number 33434: Loose, Strict, Record, Timestamp, Verbosenone: Type escape sequence to abort.Tracing the route to 20.1.1.1 1 * 202.1.1.1 1180 msec 20 msec 2 100.1.1.2 48 msec 124 msec 100 msec 3 200.1.1.2 180 msec 176 msec 236 msec 4 201

10、.1.1.5 364 msec 244 msec * R6#R5#traceroute Protocol ip: Target IP address: 30.1.1.1Source address: 40.1.1.1Numeric display n: Timeout in seconds 3: Probe count 3: Minimum Time to Live 1: Maximum Time to Live 30: Port Number 33434: Loose, Strict, Record, Timestamp, Verbosenone: Type escape sequence

11、to abort.Tracing the route to 30.1.1.1 1 201.1.1.6 32 msec 44 msec 64 msec 2 200.1.1.1 100 msec 212 msec 204 msec 3 100.1.1.1 328 msec 284 msec 320 msec 4 202.1.1.2 308 msec * * R5#R5#R5#traR5#traceroute Protocol ip: Target IP address: 10.1.1.1Source address: 20.1.1.1Numeric display n: Timeout in se

12、conds 3: Probe count 3: Minimum Time to Live 1: Maximum Time to Live 30: Port Number 33434: Loose, Strict, Record, Timestamp, Verbosenone: Type escape sequence to abort.Tracing the route to 10.1.1.1 1 201.1.1.6 104 msec 32 msec 100 msec 2 200.1.1.1 200 msec 52 msec 132 msec 3 100.1.1.1 72 msec 36 ms

13、ec 52 msec 4 202.1.1.2 44 msec 96 msec * R5#3、R4上shutdown s1/3口R6#traceroute Protocol ip: Target IP address: 40.1.1.1Source address: 30.1.1.1Numeric display n: Timeout in seconds 3: Probe count 3: Minimum Time to Live 1: Maximum Time to Live 30: Port Number 33434: Loose, Strict, Record, Timestamp, V

14、erbosenone: Type escape sequence to abort.Tracing the route to 40.1.1.1 1 202.1.1.1 1060 msec 72 msec 96 msec 2 100.1.1.6 180 msec 36 msec 48 msec 3 201.1.1.5 96 msec 112 msec * R6#traR6#traceroute Protocol ip: Target IP address: 20.1.1.1Source address: 10.1.1.1Numeric display n: Timeout in seconds

15、3: Probe count 3: Minimum Time to Live 1: Maximum Time to Live 30: Port Number 33434: Loose, Strict, Record, Timestamp, Verbosenone: Type escape sequence to abort.Tracing the route to 20.1.1.1 1 202.1.1.1 52 msec 16 msec 40 msec 2 100.1.1.6 24 msec * 720 msec 3 201.1.1.5 148 msec 52 msec * R6#R5#tra

16、ceroute Protocol ip: Target IP address: 30.1.1.1Source address: 40.1.1.1Numeric display n: Timeout in seconds 3: Probe count 3: Minimum Time to Live 1: Maximum Time to Live 30: Port Number 33434: Loose, Strict, Record, Timestamp, Verbosenone: Type escape sequence to abort.Tracing the route to 30.1.1

17、.1 1 201.1.1.6 140 msec 32 msec 40 msec 2 200.1.1.1 16 msec 64 msec 40 msec 3 200.1.1.2 28 msec 52 msec 28 msec 4 100.1.1.5 16 msec * 1740 msec 5 202.1.1.2 236 msec 396 msec * R5#trR5#traceroute Protocol ip: Target IP address: 10.1.1.1Source address: 20.1.1.1Numeric display n: Timeout in seconds 3:

18、Probe count 3: Minimum Time to Live 1: Maximum Time to Live 30: Port Number 33434: Loose, Strict, Record, Timestamp, Verbosenone: Type escape sequence to abort.Tracing the route to 10.1.1.1 1 201.1.1.6 264 msec 36 msec 20 msec 2 100.1.1.5 28 msec 48 msec 32 msec 3 202.1.1.2 64 msec 256 msec * R5#4、R

19、3上shutdown s1/1口R6#traceroute Protocol ip: Target IP address: 40.1.1.1Source address: 30.1.1.1Numeric display n: Timeout in seconds 3: Probe count 3: Minimum Time to Live 1: Maximum Time to Live 30: Port Number 33434: Loose, Strict, Record, Timestamp, Verbosenone: Type escape sequence to abort.Traci

20、ng the route to 40.1.1.1 1 202.1.1.1 40 msec 20 msec 24 msec 2 100.1.1.2 112 msec 60 msec 28 msec 3 200.1.1.6 152 msec 620 msec 400 msec 4 200.1.1.10 880 msec 740 msec 1116 msec 5 201.1.1.1 1056 msec 848 msec 752 msecR6#traceroute Protocol ip: Target IP address: 20.1.1.1Source address: 10.1.1.1Numer

21、ic display n: Timeout in seconds 3: Probe count 3: Minimum Time to Live 1: Maximum Time to Live 30: Port Number 33434: Loose, Strict, Record, Timestamp, Verbosenone: Type escape sequence to abort.Tracing the route to 20.1.1.1 1 202.1.1.1 220 msec 324 msec 364 msec 2 100.1.1.6 724 msec 540 msec 612 m

22、sec 3 201.1.1.5 1136 msec 800 msec 704 msecR6#R5#traceroute Protocol ip: Target IP address: 30.1.1.1Source address: 40.1.1.1Numeric display n: Timeout in seconds 3: Probe count 3: Minimum Time to Live 1: Maximum Time to Live 30: Port Number 33434: Loose, Strict, Record, Timestamp, Verbosenone: Type

23、escape sequence to abort.Tracing the route to 30.1.1.1 1 201.1.1.6 28 msec 52 msec 136 msec 2 100.1.1.5 172 msec 148 msec 160 msec 3 202.1.1.2 300 msec 84 msec * R5#traceroute Protocol ip: Target IP address: 10.1.1.1Source address: 20.1.1.1Numeric display n: Timeout in seconds 3: Probe count 3: Mini

24、mum Time to Live 1: Maximum Time to Live 30: Port Number 33434: Loose, Strict, Record, Timestamp, Verbosenone: Type escape sequence to abort.Tracing the route to 10.1.1.1 1 201.1.1.6 16 msec 40 msec 56 msec 2 100.1.1.5 176 msec 140 msec 192 msec 3 202.1.1.2 316 msec 344 msec * R5#PBR设置：interface Fas

25、tEthernet0/0 ip address 202.1.1.1 255.255.255.252 ip policy route-map oaip access-list extended oa permit ip 40.1.1.0 0.0.0.255 any permit ip 30.1.1.0 0.0.0.255 any deny ip any any!route-map oa permit 10 match ip address oa set ip next-hop 100.1.1.2路由器配置：R4 interface Loopback2 ip address 5.5.5.5 255

26、.255.255.255!interface FastEthernet0/0 ip address 202.1.1.1 255.255.255.252 ip policy route-map oa duplex full!interface Serial1/0 no ip address shutdown serial restart-delay 0!interface Serial1/1 no ip address shutdown serial restart-delay 0!interface Serial1/2 ip address 100.1.1.5 255.255.255.252

27、ip ospf cost 10 serial restart-delay 0!interface Serial1/3 ip address 100.1.1.1 255.255.255.252 ip ospf cost 10 serial restart-delay 0!router ospf 10 router-id 5.5.5.5 log-adjacency-changes network 5.5.5.5 0.0.0.0 area 1 network 100.1.1.0 0.0.0.3 area 1 network 100.1.1.4 0.0.0.3 area 1 network 202.1

28、.1.0 0.0.0.3 area 1!ip classlessno ip http server!ip access-list extended oa permit ip 40.1.1.0 0.0.0.255 any permit ip 30.1.1.0 0.0.0.255 any deny ip any any!route-map oa permit 10 match ip address oa set ip next-hop 100.1.1.2R3!interface Loopback0 ip address 4.4.4.4 255.255.255.255!interface FastE

29、thernet0/0 no ip address shutdown duplex half!interface Serial1/0 ip address 200.1.1.5 255.255.255.252 serial restart-delay 0! interface Serial1/1 ip address 200.1.1.1 255.255.255.252 ip ospf cost 10 serial restart-delay 0!interface Serial1/2 no ip address shutdown serial restart-delay 0!interface Serial1/3 ip address 100.1.1.2 255.255.255.252 ip ospf cost 10 serial restart-delay 0!router ospf 10 router-id 4.4.4.4 log-adjacency-changes network 4.4.4.4 0.0.0.0 area 0 network 100.1.1.0 0.0.0.3 area 1 network 200.1.1.0 0.0.0.3 area 0 network 200.1.1.4 0.0.0.3 area 0