CISCO4507R交换机基于源地址策略路由

文章作者 100test 发表时间 2007:10:10 11:18:59
来源 100Test.Com百考试题网

　　CISCO4507R路由交换机做策略路由，由于4507R原先的IOS映象文件不支持基于源地址的策略路由，后经过在CISCO网站上查找版本说明，升级IOS文件，CISCO4507R连接到两个ISP（internet和ISP2），下接两个小BRAS，BRAS中配置了不同ISP的IP地址段，4507R基于源地址做策略路由。4507R具体配置如下。

4507#sh run Building configuration... Current configuration : 2104 bytes ! version 12.1 no service pad service timestamps debug uptime service timestamps log uptime service password-encryption service compress-config ! hostname 4507 ! boot system flash bootflash:cat4000-i5s-mz.121-20.EW.bin boot system flash bootflash:cat4000-is-mz.121-12c.EW1.bin enable password 7 06571E20561C1E0A1D ! ip subnet-zero ! spanning-tree extend system-id ! redundancy mode rpr main-cpu auto-sync standard ! ! interface GigabitEthernet1/1 description to Internet no switchport ip address 222.112.123.110 255.255.255.252 ! interface GigabitEthernet1/2 ! interface GigabitEthernet3/1 description to bras1 no switchport ip address 162.153.123.113 255.255.255.252 ip policy route-map isp2 speed nonegotiate ! interface GigabitEthernet3/2 description to bras2 no switchport ip address 162.153.123.117 255.255.255.252 ip policy route-map isp2 speed nonegotiate ! interface GigabitEthernet3/3 ! interface GigabitEthernet3/4 ! interface GigabitEthernet3/5 ! interface GigabitEthernet3/6 ! interface GigabitEthernet4/1 description to isp2 no switchport ip address 211.211.44.254 255.255.255.252 speed nonegotiate ! interface GigabitEthernet4/2 ! interface GigabitEthernet4/3 ! interface GigabitEthernet4/4 ! interface GigabitEthernet4/5 ! interface GigabitEthernet4/6 ! interface Vlan1 no ip address ! ip classless ip route 0.0.0.0 0.0.0.0 222.112.123.109 ip route 211.211.218.0 255.255.252.0 162.153.123.113 ip route 211.211.232.0 255.255.254.0 162.153.123.117 ip route 222.122.16.0 255.255.252.0 162.153.123.113 ip route 221.122.20.0 255.255.252.0 162.153.123.117 no ip http server ! access-list 10 permit 211.211.218.0 0.0.3.255 access-list 10 permit 211.211.232.0 0.0.1.255 route-map edu permit 10 match ip address 10 set ip next-hop 211.211.44.253 ! ! ! line con 0 stopbits 1 line vty 0 4 exec-timeout 3 0 password 7 06571E20561C1E0A1D login line vty 5 15 exec-timeout 3 0 password 7 03554A0A1C5D365F56 login ! ! end