试验目的1: 基于源地址的策略路由
           源地址为 192.168.100.1的数据包走r2
           源地址为 192.168.100.2的数据包走r4

R1 配置

router>en
router#conf t
router(config)#host r1
r1(config)#no ip domain-lookup
r1(config)#ena sec 123
r1(config)#bann mot #Welcome to r1#
r1(config)#line vty 0 4
r1(config-line)#no login
r1(config-line)#int f 0/0
r1(config-if)#ip add 192.168.100.254 255.255.255.0
r1(config-if)#desc link to sw1
r1(config-if)#no shut
r1(config-if)#int f 0/1
r1(config-if)#ip add 192.168.2.1 255.255.255.252
r1(config-if)#desc link to r2
r1(config-if)#no shut
r1(config-if)#int e 1/0
r1(config-if)#ip add 192.168.2.5 255.255.255.252
r1(config-if)#desc link to r4
r1(config-if)#no shut
r1(config-if)#router ospf 1
r1(config-if)#network 192.168.100.0 0.0.0.255 area 0
r1(config-if)#network 192.168.2.0 0.0.0.3 area 0
r1(config-if)#network 192.168.2.4 0.0.0.3 area 0
r1(config-if)#exit
r1(config)#access-list 1 permit host 192.168.100.1
r1(config)#access-list 2 permit host 192.168.100.2
r1(config)#route-map cisco permit 10
r1(config-route-map)#match ip add 1
r1(config-route-map)#set ip next-hop 192.168.2.2
r1(config-route-map)#route-map cisco permit 20
r1(config-route-map)#match ip add 2
r1(config-route-map)#set ip next-hop 192.168.2.6
r1(config-route-map)#int f 0/0
r1(config-if)#ip policy route-map cisco
r1(config-if)#end
r1#

r2 配置

router>en
router#conf t
router(config)#host r2
r2(config)#no ip domain-lookup
r2(config)#ena sec 123
r2(config)#bann mot #Welcome to r2#
r2(config)#line vty 0 4
r2(config-line)#no login
r2(config-line)#int f 0/0
r2(config-if)#ip add 192.168.2.2 255.255.255.252
r2(config-if)#desc link to r1
r2(config-if)#no shut
r2(config-if)#int f 0/1
r2(config-if)#ip add 192.168.2.9 255.255.255.252
r2(config-if)#desc link to r3
r2(config-if)#no shut
r2(config-if)#router ospf 1
r2(config-if)#network 192.168.2.0 0.0.0.3 area 0
r2(config-if)#network 192.168.2.8 0.0.0.3 area 0
r2(config-if)#end
r2#

r3 配置

router>en
router#conf t
router(config)#host r3
r3(config)#no ip domain-lookup
r3(config)#ena sec 123
r3(config)#bann mot #Welcome to r3#
r3(config)#line vty 0 4
r3(config-line)#no login
r3(config-line)#int f 0/0
r3(config-if)#ip add 192.168.2.10 255.255.255.252
r3(config-if)#desc link to r2
r3(config-if)#no shut
r3(config-if)#int f 0/1
r3(config-if)#ip add 192.168.200.254 255.255.255.0
r3(config-if)#desc link to sw2
r3(config-if)#no shut
r3(config-if)#int e 1/0
r3(config-if)#ip add 192.168.2.14 255.255.255.252
r3(config-if)#desc link to r4
r3(config-if)#no shut
r3(config-if)#router ospf 1
r3(config-if)#network 192.168.200.0 0.0.0.255 area 0
r3(config-if)#network 192.168.2.8 0.0.0.3 area 0
r3(config-if)#network 192.168.2.12 0.0.0.3 area 0
r3(config-if)#end
r3#

r4 配置

router>en
router#conf t
router(config)#host r4
r4(config)#no ip domain-lookup
r4(config)#ena sec 123
r4(config)#bann mot #Welcome to r4#
r4(config)#line vty 0 4
r4(config-line)#no login
r4(config-line)#int f 0/0
r4(config-if)#ip add 192.168.2.6 255.255.255.252
r4(config-if)#desc link to r1
r4(config-if)#no shut
r4(config-if)#int f 0/1
r4(config-if)#ip add 192.168.2.12 255.255.255.252
r4(config-if)#desc link to r3
r4(config-if)#no shut
r4(config-if)#router ospf 1
r4(config-if)#network 192.168.2.4 0.0.0.3 area 0
r4(config-if)#network 192.168.2.12 0.0.0.3 area 0
r4(config-if)#end
r4#

试验目的2: 基于目的地址的策略路由
           目的地址为 192.168.200.1的数据包走r4
           目的地址为 192.168.200.2的数据包走r2

R1 配置

router>en
router#conf t
router(config)#host r1
r1(config)#no ip domain-lookup
r1(config)#ena sec 123
r1(config)#bann mot #Welcome to r1#
r1(config)#line vty 0 4
r1(config-line)#no login
r1(config-line)#int f 0/0
r1(config-if)#ip add 192.168.100.254 255.255.255.0
r1(config-if)#desc link to sw1
r1(config-if)#no shut
r1(config-if)#int f 0/1
r1(config-if)#ip add 192.168.2.1 255.255.255.252
r1(config-if)#desc link to r2
r1(config-if)#no shut
r1(config-if)#int e 1/0
r1(config-if)#ip add 192.168.2.5 255.255.255.252
r1(config-if)#desc link to r4
r1(config-if)#no shut
r1(config-if)#router ospf 1
r1(config-if)#network 192.168.100.0 0.0.0.255 area 0
r1(config-if)#network 192.168.2.0 0.0.0.3 area 0
r1(config-if)#network 192.168.2.4 0.0.0.3 area 0
r1(config-if)#exit
r1(config)#access-list 101 permit ip any host 192.168.200.1
r1(config)#access-list 102 permit ip any host 192.168.200.2
r1(config)#route-map cisco permit 10
r1(config-route-map)#match ip add 101
r1(config-route-map)#set ip next-hop 192.168.2.6
r1(config-route-map)#route-map cisco permit 20
r1(config-route-map)#match ip add 102
r1(config-route-map)#set ip next-hop 192.168.2.2
r1(config-route-map)#int f 0/0
r1(config-if)#ip policy route-map cisco
r1(config-if)#end
r1#

r2 配置

router>en
router#conf t
router(config)#host r2
r2(config)#no ip domain-lookup
r2(config)#ena sec 123
r2(config)#bann mot #Welcome to r2#
r2(config)#line vty 0 4
r2(config-line)#no login
r2(config-line)#int f 0/0
r2(config-if)#ip add 192.168.2.2 255.255.255.252
r2(config-if)#desc link to r1
r2(config-if)#no shut
r2(config-if)#int f 0/1
r2(config-if)#ip add 192.168.2.9 255.255.255.252
r2(config-if)#desc link to r3
r2(config-if)#no shut
r2(config-if)#router ospf 1
r2(config-if)#network 192.168.2.0 0.0.0.3 area 0
r2(config-if)#network 192.168.2.8 0.0.0.3 area 0
r2(config-if)#end
r2#

r3 配置

router>en
router#conf t
router(config)#host r3
r3(config)#no ip domain-lookup
r3(config)#ena sec 123
r3(config)#bann mot #Welcome to r3#
r3(config)#line vty 0 4
r3(config-line)#no login
r3(config-line)#int f 0/0
r3(config-if)#ip add 192.168.2.10 255.255.255.252
r3(config-if)#desc link to r2
r3(config-if)#no shut
r3(config-if)#int f 0/1
r3(config-if)#ip add 192.168.200.254 255.255.255.0
r3(config-if)#desc link to sw2
r3(config-if)#no shut
r3(config-if)#int e 1/0
r3(config-if)#ip add 192.168.2.14 255.255.255.252
r3(config-if)#desc link to r4
r3(config-if)#no shut
r3(config-if)#router ospf 1
r3(config-if)#network 192.168.200.0 0.0.0.255 area 0
r3(config-if)#network 192.168.2.8 0.0.0.3 area 0
r3(config-if)#network 192.168.2.12 0.0.0.3 area 0
r3(config-if)#end
r3#

r4 配置

router>en
router#conf t
router(config)#host r4
r4(config)#no ip domain-lookup
r4(config)#ena sec 123
r4(config)#bann mot #Welcome to r4#
r4(config)#line vty 0 4
r4(config-line)#no login
r4(config-line)#int f 0/0
r4(config-if)#ip add 192.168.2.6 255.255.255.252
r4(config-if)#desc link to r1
r4(config-if)#no shut
r4(config-if)#int f 0/1
r4(config-if)#ip add 192.168.2.12 255.255.255.252
r4(config-if)#desc link to r3
r4(config-if)#no shut
r4(config-if)#router ospf 1
r4(config-if)#network 192.168.2.4 0.0.0.3 area 0
r4(config-if)#network 192.168.2.12 0.0.0.3 area 0
r4(config-if)#end
r4#

试验目的3: 基于包大小的策略路由
           数据包 0-100 字节时从r4走
           数据包 100-600 字节时从r2走

R1 配置

router>en
router#conf t
router(config)#host r1
r1(config)#no ip domain-lookup
r1(config)#ena sec 123
r1(config)#bann mot #Welcome to r1#
r1(config)#line vty 0 4
r1(config-line)#no login
r1(config-line)#int f 0/0
r1(config-if)#ip add 192.168.100.254 255.255.255.0
r1(config-if)#desc link to sw1
r1(config-if)#no shut
r1(config-if)#int f 0/1
r1(config-if)#ip add 192.168.2.1 255.255.255.252
r1(config-if)#desc link to r2
r1(config-if)#no shut
r1(config-if)#int e 1/0
r1(config-if)#ip add 192.168.2.5 255.255.255.252
r1(config-if)#desc link to r4
r1(config-if)#no shut
r1(config-if)#router ospf 1
r1(config-if)#network 192.168.100.0 0.0.0.255 area 0
r1(config-if)#network 192.168.2.0 0.0.0.3 area 0
r1(config-if)#network 192.168.2.4 0.0.0.3 area 0
r1(config-if)#exit
r1(config)#route-map cisco permit 10
r1(config-route-map)#match length 0 100
r1(config-route-map)#set ip next-hop 192.168.2.6
r1(config-route-map)#route-map cisco permit 20
r1(config-route-map)#match length 100 600
r1(config-route-map)#set ip next-hop 192.168.2.2
r1(config-route-map)#int f 0/0
r1(config-if)#ip policy route-map cisco
r1(config-if)#end
r1#

r2 配置

router>en
router#conf t
router(config)#host r2
r2(config)#no ip domain-lookup
r2(config)#ena sec 123
r2(config)#bann mot #Welcome to r2#
r2(config)#line vty 0 4
r2(config-line)#no login
r2(config-line)#int f 0/0
r2(config-if)#ip add 192.168.2.2 255.255.255.252
r2(config-if)#desc link to r1
r2(config-if)#no shut
r2(config-if)#int f 0/1
r2(config-if)#ip add 192.168.2.9 255.255.255.252
r2(config-if)#desc link to r3
r2(config-if)#no shut
r2(config-if)#router ospf 1
r2(config-if)#network 192.168.2.0 0.0.0.3 area 0
r2(config-if)#network 192.168.2.8 0.0.0.3 area 0
r2(config-if)#end
r2#

r3 配置

router>en
router#conf t
router(config)#host r3
r3(config)#no ip domain-lookup
r3(config)#ena sec 123
r3(config)#bann mot #Welcome to r3#
r3(config)#line vty 0 4
r3(config-line)#no login
r3(config-line)#int f 0/0
r3(config-if)#ip add 192.168.2.10 255.255.255.252
r3(config-if)#desc link to r2
r3(config-if)#no shut
r3(config-if)#int f 0/1
r3(config-if)#ip add 192.168.200.254 255.255.255.0
r3(config-if)#desc link to sw2
r3(config-if)#no shut
r3(config-if)#int e 1/0
r3(config-if)#ip add 192.168.2.14 255.255.255.252
r3(config-if)#desc link to r4
r3(config-if)#no shut
r3(config-if)#router ospf 1
r3(config-if)#network 192.168.200.0 0.0.0.255 area 0
r3(config-if)#network 192.168.2.8 0.0.0.3 area 0
r3(config-if)#network 192.168.2.12 0.0.0.3 area 0
r3(config-if)#end
r3#

r4 配置

router>en
router#conf t
router(config)#host r4
r4(config)#no ip domain-lookup
r4(config)#ena sec 123
r4(config)#bann mot #Welcome to r4#
r4(config)#line vty 0 4
r4(config-line)#no login
r4(config-line)#int f 0/0
r4(config-if)#ip add 192.168.2.6 255.255.255.252
r4(config-if)#desc link to r1
r4(config-if)#no shut
r4(config-if)#int f 0/1
r4(config-if)#ip add 192.168.2.12 255.255.255.252
r4(config-if)#desc link to r3
r4(config-if)#no shut
r4(config-if)#router ospf 1
r4(config-if)#network 192.168.2.4 0.0.0.3 area 0
r4(config-if)#network 192.168.2.12 0.0.0.3 area 0
r4(config-if)#end
r4#

本文出自 “人类一思考，上帝都发笑” 博客，转载请与作者联系！