需求:PC之间互访经过旁挂设备。大致拓扑:核心下挂4个PC,核心旁挂一台设备。核心配置完PBR, PC之间不通,从任意PC tracert,发现数据一直在核心跟旁挂设备来回跳。求大神赐教。
配置如下:
核心配置
#
vlan 10 to 50
#
policy-based-route aaa permit node 10
if-match acl 3000
apply next-hop 50.50.50.2
#
policy-based-route 20 permit node 10
if-match acl 3001
apply next-hop 50.50.50.2
#
policy-based-route 30 permit node 10
if-match acl 3002
apply next-hop 50.50.50.2
#
policy-based-route 40 permit node 10
if-match acl 3003
apply next-hop 50.50.50.2
#
interface NULL0
#
interface Vlan-interface10
ip address 192.168.10.1 255.255.255.0
ip policy-based-route aaa
#
interface Vlan-interface20
ip address 192.168.20.1 255.255.255.0
ip policy-based-route 20
#
interface Vlan-interface30
ip address 192.168.30.1 255.255.255.0
ip policy-based-route 30
#
interface Vlan-interface40
ip address 192.168.40.1 255.255.255.0
ip policy-based-route 40
#
interface Vlan-interface50
ip address 50.50.50.1 255.255.255.0
#
#
acl advanced 3000
rule 0 permit ip source 192.168.10.0 0.0.0.255 destination 192.168.20.0 0.0.0.255
rule 10 permit ip source 192.168.10.0 0.0.0.255 destination 192.168.30.0 0.0.0.255
rule 15 permit ip source 192.168.10.0 0.0.0.255 destination 192.168.40.0 0.0.0.255
#
acl advanced 3001
rule 20 permit ip source 192.168.20.0 0.0.0.255 destination 192.168.40.0 0.0.0.255
rule 25 permit ip source 192.168.20.0 0.0.0.255 destination 192.168.30.0 0.0.0.255
rule 30 permit ip source 192.168.20.0 0.0.0.255 destination 192.168.10.0 0.0.0.255
#
acl advanced 3002
rule 35 permit ip source 192.168.30.0 0.0.0.255 destination 192.168.10.0 0.0.0.255
rule 40 permit ip source 192.168.30.0 0.0.0.255 destination 192.168.20.0 0.0.0.255
rule 45 permit ip source 192.168.30.0 0.0.0.255 destination 192.168.40.0 0.0.0.255
#
acl advanced 3003
rule 50 permit ip source 192.168.40.0 0.0.0.255 destination 192.168.30.0 0.0.0.255
rule 55 permit ip source 192.168.40.0 0.0.0.255 destination 192.168.20.0 0.0.0.255
rule 60 permit ip source 192.168.40.0 0.0.0.255 destination 192.168.10.0 0.0.0.255
#
旁挂设备配置
#
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 50.50.50.2 255.255.255.0
#
ip route-static 0.0.0.0 0 50.50.50.1
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论