(一) Route Maps
特性:
Route Maps類似于access lists,不同之處在于Route Maps可以改變Packets/Routes的部分屬性。
用途:
Route Maps主要用于Redistribution和Policy Routing及BGP的實(shí)現(xiàn)。
實(shí)現(xiàn):
Policy Routing發(fā)送Packets到Route Maps實(shí)現(xiàn)策略路由轉(zhuǎn)發(fā)。
Redistribution發(fā)送Routes到Route Maps實(shí)現(xiàn)路由條目的過(guò)濾。
配置說(shuō)明:
Route Maps如果沒(méi)有指定Action及Sequence Number屬性,默認(rèn):
Action: permit
Sequence Number: 10
且Sequence Number不會(huì)自動(dòng)增加。
即如果在使用Route Maps語(yǔ)句時(shí)不指定Sequence Number,則覆蓋Sequence Number為10的默認(rèn)條目。
Route Maps Deny Action:
Redistribution: 特定路由條目不會(huì)被重分布。
Policy Routing: 特定的Packets不會(huì)按策略路由轉(zhuǎn)發(fā),但會(huì)梗概正常的路由表?xiàng)l目轉(zhuǎn)發(fā)。
Case Study:Policy Routing
注:(1)Policy Routing只影響入流量。
?。?)可以使用Standard及Extended ACL.
(3)全局配置ip local policy route-map sense可將策略路由應(yīng)用于Router本身發(fā)送的Packets.
<1> Standard ACL
interface Serial 0 ip address 172.16.5.1 255.255.255.0 ip policy route-map sense!access-list 1 permit 172.16.6.0 0.0.0.255access-list 2 permit 172.16.7.0 0.0.0.255!route-map sense permit 10 match ip address 1 set ip next-hop 172.16.4.2!route-map sense permit 20 match ip address 2 set ip next-hop 172.16.4.3
<2> Extended ACL
interface Ethernet 0 ip address 172.16.1.4 255.255.255.0 ip policy route-map sense!access-list 105 permit tcp 172.16.1.0 0.0.0.255 eq ftp anyaccess-list 105 permit tcp 172.16.1.0 0.0.0.255 eq ftp-data anyaccess-list 106 permit tcp 172.16.1.0 0.0.0.255 eq telnet any!route-map sense permit 10 match ip address 105 set ip next-hop 172.16.2.1!route-map sense permit 20 match ip address 106 set ip next-hop 172.16.3.1
<3> Length of the Packets
interface Ethernet0 ip address 172.16.1.4 255.255.255.0 ip policy route-map sense!route-map sense permit 10 match length 1000 1600 set ip next-hop 172.16.2.1!route-map sense permit 20 match length 0 400 set ip next-hop 172.16.3.1
<4> Router's Packets
interface Ethernet0 ip address 172.16.1.4 255.255.255.0 ip policy route-map sense!ip local policy route-map sense!access-list 120 permit ip any 172.16.1.0 0.0.0.255access-list 120 permit ospf any any!route-map sense permit 10 match ip address 120!route-map sense permit 20 match length 1000 1600 set ip next-hop 172.16.2.1!route-map sense permit 30 match length 0 400 set ip next-hop 172.16.3.1
注:如果沒(méi)有第一個(gè)route-map條目,router本身的Packets及OSPF的Packets都會(huì)由于后兩個(gè)route-map語(yǔ)句被轉(zhuǎn)發(fā)到錯(cuò)誤的地址。
Case Study: Policy Routing and Quality of Service Routing
Policy Routing結(jié)合ip包頭的Precedence和Type of Service(TOS)可以實(shí)現(xiàn)基于QOS的策略路由。
注:Precedence和TOS的配置既可使用Number字段,也可以使用Keyword.
set ip precedence-------------------------------------Bits Number Keyword000 0 routine001 1 priority010 2 immediate011 3 flash100 4 flash-override101 5 critical110 6 internet111 7 network-------------------------------------set ip tos-------------------------------------Bits Number Keyword0000 0 normal0001 1 min-monetary-cost0010 2 max-reliability0100 4 max-throughput1000 8 min-delay-------------------------------------interface Serial0 ip address 10.1.18.67 255.255.255.252 ip policy route-map sense!interface Serial1 ip address 10.34.16.83.255.255.255.252 ip policy route-map sense!access-list 1 permit 172.16.0.0 0.0.255.255access-list 110 permit tcp any eq www any!route-map sense permit 10 match ip address 1 110 set ip precedence critical!route-map sense permit 20 set ip tos 10 set ip precedence priority
Case Study: Route Tagging
用途:
用于雙向重分布時(shí)標(biāo)識(shí)特定Domain的路由,以防路由被重分布回起源Domain.
使用方案:
通告路由條目的邊緣Router在重分布時(shí)給路由條目加上Tag標(biāo)識(shí),做為Transit Network的Domain,不需要使用和識(shí)別Tag,僅僅需要將它傳遞到它的外部網(wǎng)絡(luò)即可。
路由協(xié)議相關(guān):
Support: RIPv2,EIGRP,IS-IS,OSPF,BGP
Not Support: RIPV1,IGRP
Packets Format:
RIPv2: 支持16-bit tags 表示為十進(jìn)制:0 ~ 65535
EIGRP external route TLVs: 支持32-bit tags 表示為十進(jìn)制:0 ~ 4294967295
OSPF type 5 LSAs: 支持32-bit tags 表示為十進(jìn)制:0 ~ 4294967295
配置實(shí)例:
router ospf 1 redistribute igrp 1 metric 10 subnets tag 1 redistribute rip metric 10 subnets route-map sense network 10.100.200.1 0.0.0.0 area 0!router rip network 10.0.0.0!router igrp 1 network 10.0.0.0!access-list 1 permit 10.1.2.3access-list 2 permit 10.1.2.4!route-map sense permit 10 match ip route-source 1 set tag 2!route-map sense permit 20 match ip route-source 2 set tag 3
新聞熱點(diǎn)
疑難解答
圖片精選