?。ㄒ唬?Route Maps
特性:
Route Maps類似于access lists,不同之處在于Route Maps可以改變Packets/Routes的部分屬性。
用途:
Route Maps主要用于Redistribution和Policy Routing及BGP的實現。
實現:
Policy Routing發送Packets到Route Maps實現策略路由轉發。
Redistribution發送Routes到Route Maps實現路由條目的過濾。
配置說明:
Route Maps如果沒有指定Action及Sequence Number屬性,默認:
Action: permit
Sequence Number: 10
且Sequence Number不會自動增加。
即如果在使用Route Maps語句時不指定Sequence Number,則覆蓋Sequence Number為10的默認條目。
Route Maps Deny Action:
Redistribution: 特定路由條目不會被重分布。
Policy Routing: 特定的Packets不會按策略路由轉發,但會梗概正常的路由表條目轉發。
Case Study:Policy Routing
注:(1)Policy Routing只影響入流量。
(2)可以使用Standard及Extended ACL.
?。?)全局配置ip local policy route-map sense可將策略路由應用于Router本身發送的Packets.
<1> Standard ACL
interface Serial 0 ip address 172.16.5.1 255.255.255.0 ip policy route-map sense!access-list 1 permit 172.16.6.0 0.0.0.255access-list 2 permit 172.16.7.0 0.0.0.255!route-map sense permit 10 match ip address 1 set ip next-hop 172.16.4.2!route-map sense permit 20 match ip address 2 set ip next-hop 172.16.4.3
<2> Extended ACL
interface Ethernet 0 ip address 172.16.1.4 255.255.255.0 ip policy route-map sense!access-list 105 permit tcp 172.16.1.0 0.0.0.255 eq ftp anyaccess-list 105 permit tcp 172.16.1.0 0.0.0.255 eq ftp-data anyaccess-list 106 permit tcp 172.16.1.0 0.0.0.255 eq telnet any!route-map sense permit 10 match ip address 105 set ip next-hop 172.16.2.1!route-map sense permit 20 match ip address 106 set ip next-hop 172.16.3.1
<3> Length of the Packets
interface Ethernet0 ip address 172.16.1.4 255.255.255.0 ip policy route-map sense!route-map sense permit 10 match length 1000 1600 set ip next-hop 172.16.2.1!route-map sense permit 20 match length 0 400 set ip next-hop 172.16.3.1
<4> Router's Packets
interface Ethernet0 ip address 172.16.1.4 255.255.255.0 ip policy route-map sense!ip local policy route-map sense!access-list 120 permit ip any 172.16.1.0 0.0.0.255access-list 120 permit ospf any any!route-map sense permit 10 match ip address 120!route-map sense permit 20 match length 1000 1600 set ip next-hop 172.16.2.1!route-map sense permit 30 match length 0 400 set ip next-hop 172.16.3.1
新聞熱點
疑難解答