华为S9300上应用基于报文长度的策略路由

gqinvs

组网要求：　　对大小为64～1400字节的报文设置150.1.1.2作为下一跳地址。
　　对大小为1401～1500字节的报文设置151.1.1.2作为下一跳地址。
　　所有其它长度的报文都按基于目的地址的方法路由。

http://localhost:7891/pages/31183887/06%20(2010-01-08)/31183887/06%20(2010-01-08)/resources/s/images/fig_dc_s_cfg_09414001.png

基于报文长度的策略路由配置思路如下：   

　　首先指定各接口的IP地址。
　　配置动态路由协议，此处使用RIP协议。
　　配置策略路由，包括匹配规则和动作。
操作步骤：　　配置S9300A
　　# 配置各接口的IP地址。
<Quidway> system-view　　[Quidway] sysname S9300A
　　[S9300A] vlan batch 10 to 11
　　[S9300A] interface gigabitethernet 1/0/1
　　[S9300A-GigabitEthernet1/0/1] port hybrid tagged vlan 10
　　[S9300A-GigabitEthernet1/0/1] quit
　　[S9300A] interface vlanif 10
　　[S9300A-Vlanif10] ip address 150.1.1.1 255.255.255.0
　　[S9300A-Vlanif10] quit
　　[S9300A] interface gigabitethernet 1/0/2
　　[S9300A-GigabitEthernet1/0/2] port hybrid tagged vlan 11
　　[S9300A-GigabitEthernet1/0/2] quit
　　[S9300A] interface vlanif 11
　　[S9300A-Vlanif11] ip address 151.1.1.1 255.255.255.0
　　[S9300A-Vlanif11] quit
　　# 配置RIP路由协议。
[S9300A] rip　　[S9300A-rip-1] network 150.1.0.0
　　[S9300A-rip-1] network 151.1.0.0
　　[S9300A-rip-1] quit
　　# 配置名称为policy1的策略路由。
[S9300A] policy-based-route policy1 permit node 10　　[S9300A-policy-based-route-policy1-10] if-match packet-length 64 1400
　　[S9300A-policy-based-route-policy1-10] apply ip-address next-hop 150.1.1.2
　　[S9300A-policy-based-route-policy1-10] quit
　　[S9300A] policy-based-route policy1 permit node 20
　　[S9300A-policy-based-route-policy1-20] if-match packet-length 1401 1500
　　[S9300A-policy-based-route-policy1-20] apply ip-address next-hop 151.1.1.2
　　[S9300A-policy-based-route-policy1-20] quit
　　# 使能策略路由。
[S9300A] ip local policy-based-route policy1　　配置S9300B
<Quidway> system-view　　[Quidway] sysname S9300B
　　[S9300B] vlan batch 10 11
　　[S9300B] interface gigabitethernet 1/0/1
　　[S9300B-GigabitEthernet1/0/1] port hybrid tagged vlan 10
　　[S9300B-GigabitEthernet1/0/1] quit
　　[S9300B] interface vlanif 10
　　[S9300B-Vlanif10] ip address 150.1.1.2 255.255.255.0
　　[S9300B-Vlanif10] quit
　　[S9300B] interface gigabitethernet 1/0/2
　　[S9300B-GigabitEthernet1/0/2] port hybrid tagged vlan 11
　　[S9300B-GigabitEthernet1/0/2] quit
　　[S9300B] interface vlanif 11
　　[S9300B-Vlanif11] ip address 151.1.1.2 255.255.255.0
　　[S9300B-Vlanif11] quit
　　[S9300B] rip
　　[S9300B-rip-1] network 10.0.0.0
　　[S9300B-rip-1] network 150.1.0.0
　　[S9300B-rip-1] network 151.1.0.0
　　[S9300B-rip-1] quit
　　验证配置结果
　　# 在S9300A用debugging ip policy-based-route命令监视策略路由。
<S9300A> debugging ip policy-based-route　　<S9300A> terminal debugging
　　<S9300A> terminal monitor
　　# 从S9300A的GE2/0/0接口直连网段一台主机Ping S9300B的Loopback0接口，并将报文数据字段长度设为80字节。
C:\&gt; ping -l 80 10.1.1.1　　Pinging 10.1.1.1 with 80 bytes of data:
　　Reply from 10.1.1.1: bytes=80 time<6ms TTL=255
　　Reply from 10.1.1.1: bytes=80 time&lt;1ms TTL=255
　　Reply from 10.1.1.1: bytes=80 time&lt;10ms TTL=255
　　Reply from 10.1.1.1: bytes=80 time&lt;18ms TTL=255
　　Ping statistics for 10.1.1.1:
　　Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
　　Approximate round trip times in milli-seconds:
　　Minimum = 1ms, Maximum = 18ms, Average = 8ms
　　# S9300A上显示的策略路由信息如下：
　　*0.3417920 S9300A PBR/7/POLICY-ROUTING:IP Policy routing success : next-hop : 150.1.1.2
　　*0.3418310 S9300A PBR/7/POLICY-ROUTING:IP Policy routing success : next-hop : 150.1.1.2
　　*0.3418850 S9300A PBR/7/POLICY-ROUTING:IP Policy routing success : next-hop : 150.1.1.2
　　*0.3419370 S9300A PBR/7/POLICY-ROUTING:IP Policy routing success : next-hop : 150.1.1.2
　　# 以上策略路由信息显示，S9300A在接收到报文后，根据策略路由确定的下一跳为150.1.1.2，也就是说将报文从接口VLANIF10转发出去。
　　# 从S9300A的GE2/0/0接口直连网段一台主机Ping S9300B的Loopback0接口，并将报文数据字段长度设为1450字节。
C:\> ping -l 1450 10.1.1.1　　Pinging 10.1.1.1 with 1450 bytes of data:
　　Reply from 10.1.1.1: bytes=1450 time&lt;18ms TTL=255
　　Reply from 10.1.1.1: bytes=1450 time&lt;140ms TTL=255
　　Reply from 10.1.1.1: bytes=1450 time&lt;5ms TTL=255
　　Reply from 10.1.1.1: bytes=1450 time&lt;15ms TTL=255
　　Ping statistics for 10.1.1.1:
　　Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
　　Approximate round trip times in milli-seconds:
　　Minimum = 5ms, Maximum = 140ms, Average = 44ms
　　# S9300A上显示的策略路由信息如下：
*0.3785670 S9300 PBR/7/POLICY-ROUTING:IP Policy routing success : next-hop : 151.1.1.2　　*0.3786680 S9300 PBR/7/POLICY-ROUTING:IP Policy routing success : next-hop : 151.1.1.2
　　*0.3787200 S9300 PBR/7/POLICY-ROUTING:IP Policy routing success : next-hop : 151.1.1.2
　　*0.3787730 S9300 PBR/7/POLICY-ROUTING:IP Policy routing success : next-hop : 151.1.1.2
　　# 以上策略路由信息显示，S9300A在接收到报文后，根据策略路由确定的下一跳为151.1.1.2，也就是说将报文从接口VLANIF11转发出去