Cisco 3640策略路由配置
3640#show run
Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname 3640
!
!
ip subnet-zeroR>!
!
!
!
!
interface Ethernet0/0
ip address 172.16.0.1 255.255.255.0
no ip redirects
no ip directed-broadcast
standby 1 priority 120 preempt /*双机热备配置*/
standby 1 ip 172.16.0.100
standby 1 track Serial0/0 50 /*双机热备配置*/
interface Serial0/0
ip address 10.10.10.1 255.255.255.0
no ip directed-broadcast
encapsulation ppp
no ip mroute-cache
no fair-queue
!
interface Serial0/1
ip address 10.10.10.10 255.255.255.0
no ip directed-broadcast
encapsulation ppp
no ip mroute-cache
no fair-queue
!
interface Serial1/0
no ip address
no ip directed-broadcast
shutdown
!
interface Serial1/1
no ip address
no ip directed-broadcast
shutdown
!
interface Serial1/2
no ip address
no ip directed-broadcast
shutdown
priority-group 5 /*CQ 5 配置应用*/ CQ：定制队列
!
interface Serial1/3
no ip address
no ip directed-broadcast
shutdown
priority-group 2 /*PQ 2 配置应用*/ PQ:优先级队列
!
interface Serial3/0
no ip address
no ip directed-broadcast
ip policy route-map mail /*策略路由mail应用*/
shutdown
!
interface Serial3/1
no ip address
no ip directed-broadcast
ip route-cache policy /*启动策略路由mytest的快速转发*/
ip policy route-map mytest /*策略路由mytest应用*/
shutdown
no fair-queue
!
interface Serial3/2
no ip address
no ip directed-broadcast
shutdown
!
interface Serial3/3
no ip address
no ip directed-broadcast
shutdown
!
router eigrp 200
redistribute rip metric 100000 100 255 1 1500 /*RIP路由重分发*/
network 192.18.0.0
!
router eigrp 100
passive-interface Serial3/2 /*在serial3/2端口抑制路由更新*/
network 10.0.0.0
distribute-list 6 out /*过滤外向的更新只包括除10.20.0.0之外的所有路由*/
distribute-list 5 in /*过滤传入的路由更新，只包括192.168.1.0路由*/
distance 100 192.168.3.0 0.0.0.255 /*把EIGRP的管理距离调整至100*/
!
router ospf 200
redistribute rip metric 10 subnets /*RIP路由重分发（包括子网），度量值为10*/
redistribute eigrp 200 metric 5 subnets /*EIGRP路由重分发（包括子网），度量值为5*/
network 172.0.0.0 0.255.255.255 area 0
!
router rip
redistribute eigrp 101 /*EIGRP路由重分发*/
network 10.0.0.0
network 192.172.1.0
default-metric 5 /*给EIGRP默认度量值5*/
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.10.10.2
ip route 0.0.0.0 0.0.0.0 10.10.10.3
no ip http server
!
access-list 1 permit 67.2.21.5
access-list 5 permit 192.168.1.0
access-list 6 deny 10.20.0.0
access-list 6 permit any
access-list 101 permit tcp any any eq pop3
access-list 101 permit tcp any any eq smtp
access-list 120 permit tcp any any eq telnet
queue-list 5 protocol ip 1 tcp www #CQ 5 的配置# /*HTTP流量分配到队列1*/
queue-list 5 protocol ip 2 tcp smtp /*SMTP流量分配到队列2*/
queue-list 5 default 3 /*其它IP流量分配到队列3*/
queue-list 5 queue 1 byte-count 4500 /*队列1的带宽为30%*/
queue-list 5 queue 2 byte-count 1500 /*队列2的带宽为10%*/
queue-list 5 queue 3 byte-count 9000 #CQ 5 的配置# /*队列3的带宽为60%*/
priority-list 2 protocol ip high list 1 #PQ 2 的配置# /*来自67.2.21.5的IP流量被分配HIGH 的优先级队列*/
priority-list 2 protocol ip medium tcp telnet /*所有的TELNET流量被分配medium的优先级队列*/
priority-list 2 protocol ip low tcp www /*所有的WWW流量被分配LOW的优先级队列*/
priority-list 2 protocol ip low tcp smtp #PQ 2 的配置# /*所有的SMTP流量被分配LOW的优先 级队列*/
route-map mytest permit 9 /*定义策略路由MYTEST*/
match ip address 120 /*与ACL120定义的IP流量匹配*/
set ip precedence flash /*定义策略路由MYTEST的动作，IP流量的优先级为FLASH*/
!
route-map mytest permit 20 /*定义策略路由MYTEST*/
set ip precedence routin /*定义策略路由MYTEST的动作，除ACL120定义之外的IP流量优先级 为FLASH*/
!
route-map mail permit 10 /*定义策略路由MAIL*/E
match ip address 101 /*与ACL101定义的IP流量匹配*/
set interface Serial3/3 /*定义策略路由MAIL的动作，应用到SERIAL3/3端口*/
!
!
line con 0
login
transport input none
line aux 0
line vty 0 4
!
end
|
文章转载地址:http://www.365master.com/kt_article_show.php?article_id=12394&categ_code=10261004
