想要R4可以访问100.100.100.100不能访问200.200.200.200,R5可以访问200.200.200.200不能访问100.100.100.100
这是R3的配置
#
acl basic 2000
rule 0 permit source 3.3.3.0 0.0.0.255
#
acl basic 2100
rule 0 permit source 4.4.4.0 0.0.0.255
#
policy-based-route 4to100 permit node 10
if-match acl 2000
apply next-hop 2.2.2.1
#
policy-based-route 5to200 permit node 20
if-match acl 2100
apply next-hop 1.1.1.2
#
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 1.1.1.3 255.255.255.0
nat outbound
#
interface GigabitEthernet0/1
port link-mode route
combo enable copper
ip address 3.3.3.3 255.255.255.0
ip policy-based-route 4to100
#
interface GigabitEthernet0/2
port link-mode route
combo enable copper
ip address 2.2.2.3 255.255.255.0
nat outbound
#
interface GigabitEthernet5/0
port link-mode route
combo enable copper
ip address 4.4.4.3 255.255.255.0
ip policy-based-route 5to200
#
哪里出错了
设置列表
对齐方式
想要R4可以访问100.100.100.100不能访问200.200.200.200,R5可以访问200.200.200.200不能访问100.100.100.100
这是R3的配置
#
acl basic 2000
rule 0 permit source 3.3.3.0 0.0.0.255
#
acl basic 2100
rule 0 permit source 4.4.4.0 0.0.0.255
#
policy-based-route 4to100 permit node 10
if-match acl 2000
apply next-hop 2.2.2.1
#
policy-based-route 5to200 permit node 20
if-match acl 2100
apply next-hop 1.1.1.2
#
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 1.1.1.3 255.255.255.0
nat outbound
#
interface GigabitEthernet0/1
port link-mode route
combo enable copper
ip address 3.3.3.3 255.255.255.0
ip policy-based-route 4to100
#
interface GigabitEthernet0/2
port link-mode route
combo enable copper
ip address 2.2.2.3 255.255.255.0
nat outbound
#
interface GigabitEthernet5/0
port link-mode route
combo enable copper
ip address 4.4.4.3 255.255.255.0
ip policy-based-route 5to200
#
哪里出错了
(0)
最佳答案
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
仅看这一个配置确实没发现异常