MSR3620-XS ACL+PBR配置

配置版本：version 7.1.064, Release 6728P25
本来想用acl规则匹配出口地址的，但是会漏，现在直接根据内网地址配置，麻烦各位大佬帮忙看看命令都对吗？如果后面有个别源ip地址想要改到192.168.100.1好像不好改了，希望也能提供点其他思路
system-view # ============ 1. 清理将替换的旧节点 ============ undo policy-based-route pbr2 permit node 1 undo policy-based-route pbr2 permit node 2 undo policy-based-route pbr2 permit node 6 undo policy-based-route pbr2 permit node 10 undo policy-based-route pbr2 permit node 20 undo policy-based-route pbr2 permit node 30 undo policy-based-route pbr2 permit node 50 # ============ 2. 源IP对象组 ============ object-group ip address srcgroup-pbr1 0 network range 192.168.0.2 192.168.0.255 quit object-group ip address srcgroup-pbr2 0 network range 192.168.1.1 192.168.1.255 quit # ============ 3. ACL ============ # callcenter 目的IP acl advanced name acl-callcenter rule 10 permit ip destination 111.230.5.161 0 quit # 192.168.0.x 源IP acl advanced name acl-pbr1 rule 10 permit ip source object-group srcgroup-pbr1 quit # 192.168.1.x 源IP acl advanced name acl-pbr2 rule 10 permit ip source object-group srcgroup-pbr2 quit # 兜底（任意IP） acl advanced name acl-default rule 10 permit ip quit # ============ 4. Node 1：callcenter（仅次 192.168.0.253）============ policy-based-route pbr2 permit node 1 if-match acl name acl-callcenter apply output-interface Dialer2 quit # ============ 5. Node 3：192.168.0.x 主备合一 ============ policy-based-route pbr2 permit node 3 if-match acl name acl-pbr1 apply next-hop 192.168.100.1 track 1 apply output-interface Dialer2 quit # ============ 6. Node 5：192.168.1.x 主备合一 ============ policy-based-route pbr2 permit node 5 if-match acl name acl-pbr2 apply output-interface Dialer2 apply output-interface Dialer3 quit # ============ 7. 后移旧有策略 ============ # 原 node 1 → node 11 policy-based-route pbr2 permit node 11 if-match acl 3000 apply next-hop 192.168.100.1 track 1 quit # 原 node 2 → node 12 policy-based-route pbr2 permit node 12 if-match acl name acl22 apply output-interface Dialer2 quit # 原 node 6 → node 13 policy-based-route pbr2 permit node 13 if-match acl name acl-overseas apply next-hop 192.168.100.1 track 1 quit # 原 node 20 → node 14 policy-based-route pbr2 permit node 14 if-match acl name acl-cn apply output-interface Dialer2 quit # ============ 8. Node 99：兜底 ============ policy-based-route pbr2 permit node 99 if-match acl name acl-default apply next-hop 192.168.100.1 track 1 quit save force