router-map路由策略

表102，用于过滤原地址，允许子网192.168.2.0流量通过 */ !

route-map isp-test permit 10 //定义route-map，取名为isp-test，序列为10

match ip address 101 //检查源地址，匹配acl 101 set ip default next-hop 123.0.0.3 //指定下一跳地址 !

route-map isp-test permit 20 //定义isp-test的第二条语句，序列号为20 match ip address 102 //检查源地下，匹配acl102 set ip default next-hop 223.0.0.3 !

route-map isp-test permit 30 //定义isp-test的第三条语句，序列号为30 set default interface Null0 //丢弃不匹配规定标准的包

------------------------------------------------------------------------（四）调试 R2#sh ip policy //显示应用的策略 Interface Route map Fa0/0 isp-acc

R2#sh route-map isp-test //显示配置的路由映射图 route-map isp-test, permit, sequence 10 Match clauses:

ip address (access-lists): 101 Set clauses:

ip default next-hop 123.0.0.3

Policy routing matches: 0 packets, 0 bytes route-map isp-test, permit, sequence 20 Match clauses:

ip address (access-lists): 102 Set clauses:

ip default next-hop 223.0.0.3

Policy routing matches: 0 packets, 0 bytes route-map isp-test, permit, sequence 30 Match clauses: Set clauses:

default interface Null0

Policy routing matches: 0 packets, 0 bytes

========================================================================

R1#traceroute //路由跟踪 Protocol [ip]: //ip流量 Target IP address: 100.100.100.100 //目标地

Source address: 192.168.1.1 //源地址为子网一的第一台主机 Numeric display [n]:

Timeout in seconds [3]: Probe count [3]:

Minimum Time to Live [1]: Maximum Time to Live [30]: Port Number [33434]:

Loose, Strict, Record, Timestamp, Verbose[none]: Type escape sequence to abort.

Tracing the route to 100.100.100.100 1 12.0.0.2 72 msec 216 msec 276 msec 2 123.0.0.3 288 msec 360 msec * //ISP1入口

------------------------------------------------------------------------------- R1# traceroute Protocol [ip]:

Target IP address: 100.100.100.100

Source address: 192.168.1.2 //源地址为子网一的第二台主机 Numeric display [n]: Timeout in seconds [3]: Probe count [3]:

Minimum Time to Live [1]: Maximum Time to Live [30]: Port Number [33434]:

Loose, Strict, Record, Timestamp, Verbose[none]: Type escape sequence to abort.

Tracing the route to 100.100.100.100 1 12.0.0.2 92 msec 188 msec 52 msec 2 123.0.0.3 416 msec 436 msec * //ISP1入口

---------------------------------------------------------------------------------- R1#traceroute Protocol [ip]:

Target IP address: 100.100.100.100

Source address: 192.168.2.1 //源地址为子网二的第一台主机 Numeric display [n]: Timeout in seconds [3]: Probe count [3]:

Minimum Time to Live [1]: Maximum Time to Live [30]: Port Number [33434]:

Loose, Strict, Record, Timestamp, Verbose[none]: Type escape sequence to abort.

Tracing the route to 100.100.100.100 1 12.0.0.2 136 msec 40 msec 144 msec 2 223.0.0.3 356 msec * 132 msec //ISP2入口 --------------------------------------------------------- R1#traceroute Protocol [ip]:

Target IP address: 100.100.100.100

Source address: 192.168.2.2 //源地址为子网二中第二台主机

Numeric display [n]: Timeout in seconds [3]: Probe count [3]:

Minimum Time to Live [1]: Maximum Time to Live [30]: Port Number [33434]:

Loose, Strict, Record, Timestamp, Verbose[none]: Type escape sequence to abort.

Tracing the route to 100.100.100.100 1 12.0.0.2 28 msec 104 msec 200 msec 2 223.0.0.3 300 msec * 196 msec //ISP2入口 -----------------------------------------------------

（五）小结：

通过以上实验，可以看到子网一（192.168.1.0/24）的流量都经过R2-R3的上一条链路选择了ISP1链路，子网二（192.168.2.0/24）的流量都经过R2-R3的下一条链路选择了ISP2链路。所以通过策略路由实现基于源的供应商选择和网络的负载均衡。