Cisco 3640策略路由配置_思

3640#show run
Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname 3640
!
!
ip subnet-zero R>!
!
!
!
!
interface Ethernet0/0
ip address 172.16.0.1 255.255.255.0
no ip redirects
no ip directed-broadcast
standby 1 priority 120 preempt /双机热备配置/
standby 1 ip 172.16.0.100
standby 1 track Serial0/0 50 /双机热备配置/
interface Serial0/0
ip address 10.10.10.1 255.255.255.0
no ip directed-broadcast
encapsulation ppp
no ip mroute-cache
no fair-queue
!
interface Serial0/1
ip address 10.10.10.10 255.255.255.0
no ip directed-broadcast
encapsulation ppp
no ip mroute-cache
no fair-queue
!
interface Serial1/0
no ip address
no ip directed-broadcast
shutdown
!
interface Serial1/1
no ip address
no ip directed-broadcast
shutdown
!
interface Serial1/2
no ip address
no ip directed-broadcast
shutdown
priority-group 5 /CQ 5 配置应用/ CQ:定制队列
!
interface Serial1/3
no ip address
no ip directed-broadcast
shutdown
priority-group 2 /PQ 2 配置应用/ PQ:优先级队列
!
interface Serial3/0
no ip address
no ip directed-broadcast
ip policy route-map mail /策略路由mail应用/
shutdown
!
interface Serial3/1
no ip address
no ip directed-broadcast
ip route-cache policy /启动策略路由mytest的快速转发/
ip policy route-map mytest /策略路由mytest应用/
shutdown
no fair-queue
!
interface Serial3/2
no ip address
no ip directed-broadcast
shutdown
!

interface Serial3/3
no ip address
no ip directed-broadcast
shutdown
!
router eigrp 200
redistribute rip metric 100000 100 255 1 1500 /RIP路由重分发/
network 192.18.0.0
!
router eigrp 100
passive-interface Serial3/2 /在serial3/2端口抑制路由更新/
network 10.0.0.0
distribute-list 6 out /过滤外向的更新只包括除10.20.0.0之外的所有路由/
distribute-list 5 in /过滤传入的路由更新,只包括192.168.1.0路由/
distance 100 192.168.3.0 0.0.0.255 /把EIGRP的管理距离调整至100/
!
router ospf 200
redistribute rip metric 10 subnets /RIP路由重分发(包括子网),度量值为10/
redistribute eigrp 200 metric 5 subnets /EIGRP路由重分发(包括子网),度量值为5/
network 172.0.0.0 0.255.255.255 area 0
!
router rip
redistribute eigrp 101 /EIGRP路由重分发/
network 10.0.0.0
network 192.172.1.0
default-metric 5 /给EIGRP默认度量值5/
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.10.10.2
ip route 0.0.0.0 0.0.0.0 10.10.10.3
no ip http server
!
access-list 1 permit 67.2.21.5
access-list 5 permit 192.168.1.0
access-list 6 deny 10.20.0.0
access-list 6 permit any
access-list 101 permit tcp any any eq pop3
access-list 101 permit tcp any any eq smtp
access-list 120 permit tcp any any eq telnet
queue-list 5 protocol ip 1 tcp www #CQ 5 的配置# /HTTP流量分配到队列1/
queue-list 5 protocol ip 2 tcp smtp /SMTP流量分配到队列2/
queue-list 5 default 3 /其它IP流量分配到队列3/
queue-list 5 queue 1 byte-count 4500 /队列1的带宽为30%/
queue-list 5 queue 2 byte-count 1500 /队列2的带宽为10%/
queue-list 5 queue 3 byte-count 9000 #CQ 5 的配置# /队列3的带宽为60%/
priority-list 2 protocol ip high list 1 #PQ 2 的配置# /来自67.2.21.5的IP流量被分配HIGH 的优先级队列/
priority-list 2 protocol ip medium tcp telnet /所有的TELNET流量被分配medium的优先级队列/
priority-list 2 protocol ip low tcp www /所有的WWW流量被分配LOW的优先级队列/
priority-list 2 protocol ip low tcp smtp #PQ 2 的配置# /所有的SMTP流量被分配LOW的优先 级队列/
route-map mytest permit 9 /定义策略路由MYTEST/
match ip address 120 /与ACL120定义的IP流量匹配/
set ip precedence flash /定义策略路由MYTEST的动作,IP流量的优先级为FLASH/
!
route-map mytest permit 20 /定义策略路由MYTEST/
set ip precedence routin /定义策略路由MYTEST的动作,除ACL120定义之外的IP流量优先级 为FLASH/
!
route-map mail permit 10 /定义策略路由MAIL/E
match ip address 101 /与ACL101定义的IP流量匹配/
set interface Serial3/3 /定义策略路由MAIL的动作,应用到SERIAL3/3端口/
!
!
line con 0
login
transport input none
line aux 0
line vty 0 4
!
end

Published At
Categories with 认证考试
Tagged with
comments powered by Disqus