双上行移动电信互联网配置了链路检测负载均衡,现在要核心上一个VLAN下地址只走移动出
(0)
最佳答案
策略路由指定vlan源地址的下一跳即可。
参考:
https://www.h3c.com/cn/d_202201/1526214_30005_0.htm#_Toc92314935
把里面的acl改成匹配vlan的ip源地址即可。
(0)
配置案例有吗
参考下面的命令,把IP地址改成你自己实际IP,下一跳的地址根据实际连接写运营商的,acl 里写你想要指定的vlan 地址
路由器策略路由+NQA
track 1 nqa entry admin test1 reaction 1
#
track 2 nqa entry admin test2 reaction 2
#
policy-based-route pbr permit node 5
if-match acl 3001
apply next-hop 10.1.13.1 track 1
#
policy-based-route neiwang permit node 10
if-match acl 3002
apply next-hop 10.1.14.1 track 2
#
nqa entry admin test1
type icmp-echo
destination ip 10.1.35.1
frequency 1000
out interface g1/0/1
reaction 1 checked-element probe-fail threshold-type consecutive 3 action-type trigger-only
#
nqa entry admin test2
type icmp-echo
destination ip 10.1.36.1
frequency 1000
out interface g1/0/2
reaction 2 checked-element probe-fail threshold-type consecutive 3 action-type trigger-only
#
nqa schedule admin test start-time now lifetime forever
nqa schedule admin test1 start-time now lifetime forever
#
interface NULL0
#
interface GigabitEthernet1/0/1
port link-mode route
combo enable copper
ip address 12.1.1.1 255.255.255.0
nat outbound
#
interface GigabitEthernet1/0/2
port link-mode route
combo enable copper
ip address 13.1.1.1 255.255.255.0
nat outbound
#
interface GigabitEthernet1/0/3
port link-mode route
combo enable copper
ip address 192.168.2.1 255.255.255.0
ip policy-based-route neiwang
#
acl advanced 3002
rule 0 permit ip source 10.10.1.0 0.0.0.255
#
acl advanced 3003
rule 0 permit ip source 10.1.20.0 0.0.0.255
#
(1)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
链接里就是