1.路由策略Route-policy
规定路由器在发布路由时只发布某些满足特定条件的路由，在接收路由时只接收满足特定条件的路由，在引入路由时只引入某些满足特定条件的路由，等等。
Route-policy由一个或多个节点（Node）构成，Node之间是“或”的关系。每个Node都有一个编号，路由项按照Node编号由小到大的顺序通过各个Node。每个Node下可以有若干个if-match和apply子句，if-match之间是“与”的关系。If-match子句用来定义匹配规则，即路由项通过当前Node所需要满足的条件，匹配对象是路由项的某个属性，比如路由前缀、NextHop、Cost、路由优先级等；apply子句用来规定处理动作。
Route-policy的每个Node都有相应的permit模式或deny模式。如果是permit模式，则当路由项满足该Node的所有if-match子句时，就被允许通过该Node的过滤并执行该Node的apply子句，不再进入下一个Node；如果路由项没有满足该Node的所有if-match子句，则会进入下一个Node继续进行过滤。如果是deny模式，则当路由项满足该Node的所有if-match子句时，就被拒绝通过该Node的过滤，这时apply子句不会被执行，并且不进入下一个Node；否则就进入下一个Node继续进行过滤。
拓扑结构
1.基本接口配置（略）
2.RIPv2和OSPF配置
[R1]rip
[R1-rip-1]version 2
[R1-rip-1]undo summary
[R1-rip-1]network 10.0.0.0
[R1-rip-1]network 192.168.1.0
[R1-rip-1]network 192.168.2.0
[R1-rip-1]network 192.168.3.0
[R1-rip-1]network 192.168.4.0
[R2]rip
[R2-rip-1]version 2
[R2-rip-1]undo summary
[R2-rip-1]network 10.0.0.0
[R2]ospf 1
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]network10.0.23.1 0.0.0.0
[R3]ospf 1
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]network10.0.23.2 0.0.0.0
[R3-ospf-1-area-0.0.0.0]network10.0.34.2 0.0.0.0
[R4]rip
[R4-rip-1]version 2
[R4-rip-1]undo summary
[R4-rip-1]network 10.0.0.0
[R4-rip-1]ospf 1
[R4-ospf-1]area 0
[R4-ospf-1-area-0.0.0.0]network10.0.34.1 0.0.0.0
在R2和R4上将RIP路由引入到OSPF协议中
[R2]ospf 1
[R2-ospf-1]import-route rip 1
[R4]ospf 1
[R4-ospf-1]import-route rip 1
配置完成后查看R3的IP路由表
[R3]dis ip routing-table
Route Flags: R - relay, D - downloadto fib
------------------------------------------------------------------------------
Routing Tables: Public
Destinations : 19Routes : 26
Destination/MaskProtoPreCostFlags NextHopInterface
10.0.1.1/32O_ASE1501D10.0.23.1Serial1/0/0
O_ASE1501D10.0.34.1Serial1/0/1
10.0.12.0/24O_ASE1501D10.0.23.1Serial1/0/0
O_ASE1501D10.0.34.1Serial1/0/1
10.0.14.0/24O_ASE1501D10.0.23.1Serial1/0/0
O_ASE1501D10.0.34.1Serial1/0/1
10.0.23.0/24Direct00D10.0.23.2Serial1/0/0
10.0.23.1/32Direct00D10.0.23.1Serial1/0/0
10.0.23.2/32Direct00D127.0.0.1Serial1/0/0
10.0.23.255/32Direct00D127.0.0.1Serial1/0/0
10.0.34.0/24Direct00D10.0.34.2Serial1/0/1
10.0.34.1/32Direct00D10.0.34.1Serial1/0/1
10.0.34.2/32Direct00D127.0.0.1Serial1/0/1
10.0.34.255/32Direct00D127.0.0.1Serial1/0/1
127.0.0.0/8Direct00D127.0.0.1InLoopBack0
127.0.0.1/32Direct00D127.0.0.1InLoopBack0
127.255.255.255/32Direct00D127.0.0.1InLoopBack0
192.168.1.0/24O_ASE1501D10.0.34.1Serial1/0/1
O_ASE1501D10.0.23.1Serial1/0/0
192.168.2.0/24O_ASE1501D10.0.23.1Serial1/0/0
O_ASE1501D10.0.34.1Serial1/0/1
192.168.3.0/24O_ASE1501D10.0.34.1Serial1/0/1
O_ASE1501D10.0.23.1Serial1/0/0
192.168.4.0/24O_ASE1501D10.0.23.1Serial1/0/0
O_ASE1501D10.0.34.1Serial1/0/1
255.255.255.255/32Direct00D127.0.0.1InLoopBack0
3.使用Route-policy对引入到OSPF进程的路由进行过滤和修改。
要求：从R3去往192.168.1.0/24和192.168.3.0/24这两个网段的流量经由路径R3-R2-R1，并且被引入OSPF时Cost值为20，cost-type为type-1。而在R4上引入两条路由时cost值为30，cost-type为type-1。
#首先使用ACL来进行匹配网段
[R2]acl 2000
[R2-acl-basic-2000]rule permitsource 192.168.1.0 0.0.254.255
[R4]acl 2000
[R4-acl-basic-2000]rule permitsource 192.168.1.0 0.0.254.255
#创建Route-policy，并进行相应设置
[R2]route-policy import-ospf permitnode 5
[R2-route-policy]if-match acl 2000
[R2-route-policy]apply cost 20
[R2-route-policy]apply cost-typetype-1
[R4]route-policy import-ospf permitnode 5
[R4-route-policy]if-match acl 2000
[R4-route-policy]apply cost 30
[R4-route-policy]apply cost-typetype-1
在R2、R4上将RIP引入OSPF时，应用Route-policy
[R2]ospf 1
[R2-ospf-1]import-route riproute-policy import-ospf
[R4]ospf 1
[R4-ospf-1]import-route riproute-policy import-ospf
配置完成后查看R3的IP路由表
[R3]dis ip routing-table
Route Flags: R - relay, D - downloadto fib
------------------------------------------------------------------------------
Routing Tables: Public
Destinations : 19Routes : 20
Destination/MaskProtoPreCostFlags NextHopInterface
10.0.1.1/32O_ASE1501D10.0.23.1Serial1/0/0
O_ASE1501D10.0.34.1Serial1/0/1
10.0.12.0/24O_ASE1501D10.0.34.1Serial1/0/1
10.0.14.0/24O_ASE1501D10.0.34.1Serial1/0/1
10.0.23.0/24Direct00D10.0.23.2Serial1/0/0
10.0.23.1/32Direct00D10.0.23.1Serial1/0/0
10.0.23.2/32Direct00D127.0.0.1Serial1/0/0
10.0.23.255/32Direct00D127.0.0.1Serial1/0/0
10.0.34.0/24Direct00D10.0.34.2Serial1/0/1
10.0.34.1/32Direct00D10.0.34.1Serial1/0/1
10.0.34.2/32Direct00D127.0.0.1Serial1/0/1
10.0.34.255/32Direct00D127.0.0.1Serial1/0/1
127.0.0.0/8Direct00D127.0.0.1InLoopBack0
127.0.0.1/32Direct00D127.0.0.1InLoopBack0
127.255.255.255/32Direct00D127.0.0.1InLoopBack0
192.168.1.0/24O_ASE15068D10.0.23.1Serial1/0/0
192.168.2.0/24O_ASE1501D10.0.34.1Serial1/0/1
192.168.3.0/24O_ASE15068D10.0.23.1Serial1/0/0
192.168.4.0/24O_ASE1501D10.0.34.1Serial1/0/1
255.255.255.255/32Direct00D127.0.0.1InLoopBack0
发现已经少了两条。
此外同时要求从R3去往192.168.2.0/24和192.18.4.0/24这两个网段的流量经由路径R3-R4-R1，并且cost值为20、cost-type为type-2。在R2上引入这两条路由时的Cost值为30。
[R2]acl 2001
[R2-acl-basic-2001]rule permitsource 192.168.2.0 0.0.254.255
[R4]acl 2001
[R4-acl-basic-2001]rule permitsource 192.168.2.0 0.0.254.255
#在R2、R4上添加新的策略node
[R2]route-policy import-ospf permitnode 10
[R2-route-policy]if-match acl 2001
[R2-route-policy]apply cost 30
[R2-route-policy]apply cost-typetype-2
[R4]route-policy import-ospf permitnode 10
[R4-route-policy]if-match acl 2001
[R4-route-policy]apply cost 20
[R4-route-policy]apply cost-typetype-2
//f���M�)i
网友评论