公司网站制作商,企业固定ip做网站,企业网站免费制作,com网站注册配置思路#xff1a; 两边去的包在R1上用mqc进行下一跳重定向 两边回程包在R4上用mqc进行下一跳重定向
最终让内网 192.168.10.0出去的数据包来回全走上面R-1-2-4 192.168.20.0出去的数据包来回全走 下面R1-3-4
R2和R3就是简单ospf配置和宣告#xff0c;其它没有配置#…
配置思路 两边去的包在R1上用mqc进行下一跳重定向 两边回程包在R4上用mqc进行下一跳重定向
最终让内网 192.168.10.0出去的数据包来回全走上面R-1-2-4 192.168.20.0出去的数据包来回全走 下面R1-3-4
R2和R3就是简单ospf配置和宣告其它没有配置这里就不贴上去了。
R1配置
dis current-configuration [V200R003C00] acl number 3000 rule 5 permit ip source 192.168.10.0 0.0.0.255 destination 10.0.3.0 0.0.0.255 rule 10 permit ip source 192.168.10.0 0.0.0.255 destination 10.0.4.0 0.0.0.255 acl number 3001 rule 5 permit ip source 192.168.20.0 0.0.0.255 destination 10.0.4.0 0.0.0.255 rule 10 permit ip source 192.168.20.0 0.0.0.255 destination 10.0.3.0 0.0.0.255 traffic classifier 124 operator or if-match acl 3000 traffic classifier 134 operator or if-match acl 3001 traffic behavior 124 redirect ip-nexthop 12.1.1.2 traffic behavior 134 redirect ip-nexthop 13.1.1.3 traffic policy admin classifier 124 behavior 124 classifier 134 behavior 134 interface GigabitEthernet0/0/0 ip address 11.1.1.1 255.255.255.0 traffic-policy admin inbound ospf enable 1 area 0.0.0.0 interface GigabitEthernet0/0/1 ip address 12.1.1.1 255.255.255.0 ospf enable 1 area 0.0.0.0 interface GigabitEthernet0/0/2 ip address 13.1.1.1 255.255.255.0 ospf enable 1 area 0.0.0.0 ospf 1 import-route direct area 0.0.0.0
LSW1配置
dis current-configuration sysname hx undo info-center enable vlan batch 10 20 30 cluster enable ntdp enable ndp enable drop illegal-mac alarm dhcp enable interface Vlanif1 interface Vlanif10 ip address 192.168.10.1 255.255.255.0 dhcp select interface interface Vlanif20 ip address 192.168.20.1 255.255.255.0 dhcp select interface interface Vlanif30 ip address 11.1.1.2 255.255.255.0 ospf enable 1 area 0.0.0.0 interface MEth0/0/1 interface GigabitEthernet0/0/1 port link-type access port default vlan 10 interface GigabitEthernet0/0/2 port link-type access port default vlan 20 interface GigabitEthernet0/0/3 port link-type access port default vlan 30 ospf 1 import-route direct silent-interface Vlanif10 silent-interface Vlanif20 area 0.0.0.0
R4配置
dis current-configuration [V200R003C00] board add 0/4 4GET snmp-agent local-engineid 800007DB03000000000000 snmp-agent clock timezone China-Standard-Time minus 08:00:00 portal local-server load portalpage.zip drop illegal-mac alarm set cpu-usage threshold 80 restore 75 acl number 3000 rule 10 permit ip source 10.0.3.0 0.0.0.255 destination 192.168.10.0 0.0.0.255 acl number 3001 rule 10 permit ip source 10.0.4.0 0.0.0.255 destination 192.168.20.0 0.0.0.255 traffic classifier 431 operator or if-match acl 3001 traffic classifier 421 operator or if-match acl 3000 traffic behavior 431 redirect ip-nexthop 34.1.1.3 traffic behavior 421 redirect ip-nexthop 24.1.1.2 traffic policy 431 classifier 431 behavior 431 traffic policy 421 classifier 421 behavior 421 interface GigabitEthernet0/0/0 ip address 24.1.1.4 255.255.255.0 ospf enable 1 area 0.0.0.0 interface GigabitEthernet0/0/1 ip address 34.1.1.4 255.255.255.0 ospf enable 1 area 0.0.0.0 interface GigabitEthernet0/0/2 ip address 10.0.3.1 255.255.255.0 traffic-policy 421 inbound interface GigabitEthernet4/0/0 ip address 10.0.4.1 255.255.255.0 traffic-policy 431 inbound interface NULL0 ospf 1 import-route direct silent-interface GigabitEthernet0/0/2 silent-interface GigabitEthernet4/0/0 area 0.0.0.0
