策略路由

[router]dis cu # version 7.1.064, Release 0707P16 # sysname router # telnet server enable # qos carl 1 destination-ip-address subnet 192.168.160.0 23 per-address qos carl 2 destination-ip-address subnet 192.168.170.0 23 per-address qos carl 3 destination-ip-address subnet 192.168.160.0 23 per-address qos carl 4 destination-ip-address range 192.168.21.1 to 192.168.24.254 per-address qos carl 5 destination-ip-address range 192.168.61.1 to 192.168.64.254 per-address qos carl 6 destination-ip-address range 192.168.101.1 to 192.168.104.254 per-address # dialer-group 1 rule ip permit dialer-group 2 rule ip permit dialer-group 3 rule ip permit dialer-group 4 rule ip permit # undo nat alg dns # dhcp enable # dns proxy enable dns server 202.96.134.133 dns server 114.114.114.114 # password-recovery enable # vlan 1 # policy-based-route aaa permit node 5 if-match acl 3995 apply default-next-hop 121.15.131.169 # policy-based-route aaa permit node 10 if-match acl 3999 apply default-output-interface Dialer1 # policy-based-route aaa permit node 15 if-match acl 3998 apply default-output-interface Dialer2 # policy-based-route aaa permit node 20 if-match acl 3997 apply default-output-interface Dialer3 # policy-based-route aaa permit node 25 if-match acl 3996 apply default-output-interface Dialer4 # controller Cellular2/0/0 # interface Route-Aggregation1 ip address 192.168.10.1 255.255.255.0 link-aggregation mode dynamic ip policy-based-route aaa # interface Dialer1 mtu 1492 ppp chap password cipher $c$3$RDST1FoMV9OpOn7k7tVtv7QyLP85FUllOpzH ppp chap user 07551200913543@163.gd ppp ipcp dns admit-any ppp ipcp dns request ppp pap local-user 07551200913543@163.gd password cipher $c$3$mIQMPaDmEtglFGW1LgRXYWHTTmnpUwNMMhoj dialer bundle enable dialer-group 1 dialer timer idle 0 ip address ppp-negotiate tcp mss 1024 nat outbound # interface Dialer2 mtu 1492 ppp chap password cipher $c$3$Uegz3AcKXy3a5/uHtKVD0thTm+Nt7M5p0iN/ ppp ipcp dns admit-any ppp ipcp dns request ppp pap local-user 075506827101@163.gd password cipher $c$3$iJ4JSlVxeq0JB0GMdpQOjuTXGk2Lpz5J61CS dialer bundle enable dialer-group 2 dialer timer idle 0 ip address ppp-negotiate tcp mss 1024 nat outbound # interface Dialer3 mtu 1492 ppp ipcp dns admit-any ppp ipcp dns request ppp pap local-user 07551200909992@163.gd password cipher $c$3$iJ+lRMvlKdLsMfipBUU5LkVY5qYHQk27VUWr dialer bundle enable dialer-group 3 dialer timer idle 0 ip address ppp-negotiate tcp mss 1024 nat outbound # interface Dialer4 mtu 1492 ppp ipcp dns admit-any ppp ipcp dns request ppp pap local-user 07554201886857@163.gd password cipher $c$3$dVY6tJBfk28m69bUrQ6t4CHrDVZ6poKb67V1 dialer bundle enable dialer-group 4 dialer timer idle 0 ip address ppp-negotiate tcp mss 1024 nat outbound # interface NULL0 # interface GigabitEthernet2/0/0 port link-mode route combo enable copper ip address 121.15.131.171 255.255.255.248 ip last-hop hold nat outbound nat server protocol tcp global current-interface 88 inside 192.168.5.56 80 nat server protocol tcp global current-interface 3890 inside 192.168.5.56 389 nat server protocol tcp global current-interface 6360 inside 192.168.5.56 636 nat server protocol tcp global current-interface 8888 inside 192.168.5.56 8888 nat server protocol tcp global current-interface 53389 inside 192.168.5.56 3389 # interface GigabitEthernet2/0/1 port link-mode route combo enable copper mtu 1492 tcp mss 1024 ip last-hop hold pppoe-client dial-bundle-number 2 # interface GigabitEthernet2/0/2 port link-mode route combo enable copper mtu 1492 tcp mss 1024 ip last-hop hold pppoe-client dial-bundle-number 1 # interface GigabitEthernet2/0/3 port link-mode route combo enable copper mtu 1492 tcp mss 1024 ip last-hop hold pppoe-client dial-bundle-number 3 # interface GigabitEthernet2/0/4 port link-mode route combo enable copper mtu 1492 tcp mss 1024 ip last-hop hold pppoe-client dial-bundle-number 4 # interface GigabitEthernet2/0/5 port link-mode route combo enable copper # interface GigabitEthernet2/0/6 port link-mode route combo enable copper port link-aggregation group 1 # interface GigabitEthernet2/0/7 port link-mode route combo enable copper port link-aggregation group 1 # interface GigabitEthernet2/0/8 port link-mode route combo enable copper port link-aggregation group 1 # interface GigabitEthernet2/0/9 port link-mode route combo enable copper port link-aggregation group 1 # interface M-GigabitEthernet0 # scheduler logfile size 16 # line class console user-role network-admin # line class tty user-role network-operator # line class vty user-role network-operator # line con 0 user-role network-admin # line vty 0 63 authentication-mode scheme user-role network-operator # ip route-static 192.168.0.0 16 192.168.10.2 # acl advanced 3000 rule 10 permit ip source 192.168.100.0 0.0.3.255 # acl advanced 3995 rule 0 permit ip source 192.168.5.0 0.0.0.255 rule 5 permit ip source 192.168.23.60 0 rule 10 permit ip source 192.168.23.61 0 rule 15 permit ip source 192.168.23.62 0 rule 20 permit ip source 192.168.23.63 0 rule 25 permit ip source 192.168.23.64 0 rule 30 permit ip source 192.168.23.65 0 rule 35 permit ip source 192.168.23.66 0 rule 40 permit ip source 192.168.23.67 0 rule 45 permit ip source 192.168.23.68 0 rule 50 permit ip source 192.168.23.69 0 rule 55 permit ip source 192.168.23.70 0 rule 60 permit ip source 192.168.24.60 0 rule 65 permit ip source 192.168.24.61 0 rule 70 permit ip source 192.168.24.62 0 rule 75 permit ip source 192.168.24.63 0 rule 80 permit ip source 192.168.24.64 0 rule 85 permit ip source 192.168.24.65 0 rule 90 permit ip source 192.168.24.66 0 rule 95 permit ip source 192.168.24.67 0 rule 100 permit ip source 192.168.24.68 0 rule 105 permit ip source 192.168.24.69 0 rule 110 permit ip source 192.168.24.70 0 # acl advanced 3996 rule 0 permit ip source 192.168.150.0 0.0.0.255 rule 5 permit ip source 192.168.170.0 0.0.0.255 # acl advanced 3997 rule 0 permit ip source 192.168.101.0 0.0.0.255 rule 5 permit ip source 192.168.102.0 0.0.0.255 rule 10 permit ip source 192.168.103.0 0.0.0.255 rule 15 permit ip source 192.168.104.0 0.0.0.255 # acl advanced 3998 rule 0 permit ip source 192.168.61.0 0.0.0.255 rule 5 permit ip source 192.168.62.0 0.0.0.255 rule 10 permit ip source 192.168.63.0 0.0.0.255 rule 15 permit ip source 192.168.64.0 0.0.0.255 rule 20 permit ip source 192.168.160.0 0.0.0.255 # acl advanced 3999 rule 0 permit ip source 192.168.21.0 0.0.0.255 rule 5 permit ip source 192.168.22.0 0.0.0.255 rule 60 permit ip source 192.168.23.0 0.0.0.255 rule 120 permit ip source 192.168.24.0 0.0.0.255 rule 125 permit ip source 192.168.25.0 0.0.0.255 # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$TIvYzbtAa9yTiGt7$OCG+9VsxF6nt2AJPSW6zpDfICMJXqeL/duNZpELJ49z8wAda5TsyrJqS1o939DBohiNfuO14rETBr8sLsw+oZQ== service-type ssh telnet terminal http https authorization-attribute user-role network-admin authorization-attribute user-role network-operator # return

配置已经贴出来了，在评论下方