表102，用于过滤原地址，允许子网192.168.2.0流量通过 */ !
route-map isp-test permit 10 //定义route-map，取名为isp-test，序列为10
match ip address 101 //检查源地址，匹配acl 101 set ip default next-hop 123.0.0.3 //指定下一跳地址 !
route-map isp-test permit 20 //定义isp-test的第二条语句，序列号为20 match ip address 102 //检查源地下，匹配acl102 set ip default next-hop 223.0.0.3 !
route-map isp-test permit 30 //定义isp-test的第三条语句，序列号为30 set default interface Null0 //丢弃不匹配规定标准的包
------------------------------------------------------------------------（四）调试 R2#sh ip policy //显示应用的策略 Interface Route map Fa0/0 isp-acc
R2#sh route-map isp-test //显示配置的路由映射图 route-map isp-test, permit, sequence 10 Match clauses:
ip address (access-lists): 101 Set clauses:
ip default next-hop 123.0.0.3
Policy routing matches: 0 packets, 0 bytes route-map isp-test, permit, sequence 20 Match clauses:
ip address (access-lists): 102 Set clauses:
ip default next-hop 223.0.0.3
Policy routing matches: 0 packets, 0 bytes route-map isp-test, permit, sequence 30 Match clauses: Set clauses:
default interface Null0
Policy routing matches: 0 packets, 0 bytes
========================================================================
R1#traceroute //路由跟踪 Protocol [ip]: //ip流量 Target IP address: 100.100.100.100 //目标地
Source address: 192.168.1.1 //源地址为子网一的第一台主机 Numeric display [n]:
Timeout in seconds [3]: Probe count [3]:
Minimum Time to Live [1]: Maximum Time to Live [30]: Port Number [33434]:
Loose, Strict, Record, Timestamp, Verbose[none]: Type escape sequence to abort.
Tracing the route to 100.100.100.100 1 12.0.0.2 72 msec 216 msec 276 msec 2 123.0.0.3 288 msec 360 msec * //ISP1入口
------------------------------------------------------------------------------- R1# traceroute Protocol [ip]:
Target IP address: 100.100.100.100
Source address: 192.168.1.2 //源地址为子网一的第二台主机 Numeric display [n]: Timeout in seconds [3]: Probe count [3]:
Minimum Time to Live [1]: Maximum Time to Live [30]: Port Number [33434]:
Loose, Strict, Record, Timestamp, Verbose[none]: Type escape sequence to abort.
Tracing the route to 100.100.100.100 1 12.0.0.2 92 msec 188 msec 52 msec 2 123.0.0.3 416 msec 436 msec * //ISP1入口
---------------------------------------------------------------------------------- R1#traceroute Protocol [ip]:
Target IP address: 100.100.100.100
Source address: 192.168.2.1 //源地址为子网二的第一台主机 Numeric display [n]: Timeout in seconds [3]: Probe count [3]:
Minimum Time to Live [1]: Maximum Time to Live [30]: Port Number [33434]:
Loose, Strict, Record, Timestamp, Verbose[none]: Type escape sequence to abort.
Tracing the route to 100.100.100.100 1 12.0.0.2 136 msec 40 msec 144 msec 2 223.0.0.3 356 msec * 132 msec //ISP2入口 --------------------------------------------------------- R1#traceroute Protocol [ip]:
Target IP address: 100.100.100.100
Source address: 192.168.2.2 //源地址为子网二中第二台主机
Numeric display [n]: Timeout in seconds [3]: Probe count [3]:
Minimum Time to Live [1]: Maximum Time to Live [30]: Port Number [33434]:
Loose, Strict, Record, Timestamp, Verbose[none]: Type escape sequence to abort.
Tracing the route to 100.100.100.100 1 12.0.0.2 28 msec 104 msec 200 msec 2 223.0.0.3 300 msec * 196 msec //ISP2入口 -----------------------------------------------------
（五）小结：
通过以上实验，可以看到子网一（192.168.1.0/24）的流量都经过R2-R3的上一条链路选择了ISP1链路，子网二（192.168.2.0/24）的流量都经过R2-R3的下一条链路选择了ISP2链路。所以通过策略路由实现基于源的供应商选择和网络的负载均衡。
相关推荐：
loading