网通巧设路由器 实现电信、网通南北互通 转自中国IT

巧设路由器实现电信、 网通南北互通转自中国IT如何实现“访问网通站点走网通线路访问电信站点走电信线路”呢现在我们以华为AR系列路由器为例说明如何通过配置策略路由的方式满足以上需要。一配置访问控制列表定义访问目的地址为网通的地址段进入系统视图创建ACL 3100 system System View: return to User View withCtrlZ.Quidwayacl num 3100 Quidway-acl-adv-3100可以直接复制粘贴如下规则rule0 permit ip destination 60.0.0.00.7.255.255 rule 1 permit ip destination 60.0.0.0

0.8.255.255 rule 2 permit ip destination 60.0.0.00.9.255.255 rule 3 permit ip destination

60.0.0.00.10.255.255 rule 4 permit ip destination 60.0.0.00.11.255.255 rule 5 permit ipdestination 60.8.0.00.3.255.255 rule 6 permit ip destination 60.12.0.00.0.255.255 rule 7permit ip destination 60.13.0.00.0.63.255 rule 8 permit ip destination 60.13.128.0

0.0.127.255 rule 9 permit ip destination 60.16.0.00.15.255.255 rule 10 permit ipdestination 60.208.0.00.7.255.255 rule 11 permit ip destination 60.216.0.00.1.255.255rule 12 permit ip destination 60.220.0.00.3.255.255 rule 13 permit ip destination

61.48.0.00.3.255.255 rule 14 permit ip destination 61.52.0.00.1.255.255 rule 15 permitip destination 61.54.0.00.0.255.255 rule 16 permit ip destination 61.55.0.00.0.255.255rule 17 permit ip destination 61.133.0.00.0.127.255 rule 18 permit ip destination

61.134.64.00.0.63.255 rule 19 permit ip destination 61.134.128.00.0.127.255 rule 20permit ip destination 61.135.0.00.0.255.255 rule 21 permit ip destination 61.136.0.0

0.0.255.255 rule 22 permit ip destination 61.138.0.00.0.127.255 rule 23 permit ipdestination 61.139.128.00.0.63.255 rule 24 permit ip destination 61.148.0.00.0.255.255rule 25 permit ip destination 61.149.0.00.0.255.255 rule 26 permit ip destination

61.156.0.00.0.255.255 rule 27 permit ip destination 61.158.0.00.0.255.255 rule 28permit ip destination 61.159.0.00.0.63.255 rule 29 permit ip destination 61.161.0.0

0.0.63.255 rule 30 permit ip destination 61.161.128.00.0.127.255 rule 31 permit ipdestination 61.162.0.00.0.255.255 rule 32 permit ip destination 61.163.0.00.0.255.255rule 33 permit ip destination 61.167.0.00.0.255.255 rule 34 permit ip destination

61.168.0.00.0.255.255 rule 35 permit ip destination 61.176.0.00.0.255.255 rule 36permit ip destination 61.179.0.00.0.255.255 rule 37 permit ip destination 61.180.128.0

0.0.127.255 rule 38 permit ip destination 61.181.0.00.0.255.255 rule 39 permit ipdestination 61.182.0.00.0.255.255 rule 40 permit ip destination 61.189.0.00.0.127.255rule 41 permit ip destination 202.32.0.00.31.255.255 rule 42 permit ip destination

202.96.64.00.0.31.255 rule 43 permit ip destination 202.97.128.00.0.127.255 rule 44permit ip destination 202.98.0.00.0.31.255 rule 45 permit ip destination 202.99.0.0

0.0.255.255 rule 46 permit ip destination 202.102.128.00.0.63.255 rule 47 permit ipdestination 202.102.224.00.0.1.255 rule 48 permit ip destination 202.106.0.00.0.255.255rule 49 permit ip destination 202.107.0.00.0.127.255 rule 50 permit ip destination

202.108.0.00.0.255.255 rule 51 permit ip destination 202.110.0.00.0.127.255 rule 52permit ip destination 202.110.192.00.0.63.255 rule 53 permit ip destination

202.111.128.00.0.63.255 rule 54 permit ip destination 210.51.0.00.0.255.255 rule 55permit ip destination 210.52.0.00.1.255.255 rule 56 permit ip destination 218.4.0.0

0.3.255.255 rule 57 permit ip destination 218.10.0.00.1.255.255 rule 58 permit ipdestination 218.21.128.00.0.127.255 rule 59 permit ip destination 218.24.0.00.1.255.255rule 60 permit ip destination 218.26.0.00.0.255.255 rule 61 permit ip destination

218.27.0.00.0.255.255 rule 62 permit ip destination 218.28.0.00.1.255.255 rule 63permit ip destination 218.56.0.00.3.255.255 rule 64 permit ip destination 218.60.0.0

0.1.255.255 rule 65 permit ip destination 218.62.0.00.0.127.255 rule 66 permit ip

destination 218.67.128.00.0.127.255 rule 67 permit ip destination 218.68.0.00.1.255.255rule 68 permit ip destination 219.141.128.00.0.127.255 rule 69 permit ip destination

219.142.0.00.1.255.255 rule 70 permit ip destination 219.154.0.00.1.255.255 rule 71permit ip destination 219.156.0.00.1.255.255 rule 72 permit ip destination 219.158.0.0

0.0.255.255 rule 73 permit ip destination 219.159.0.00.0.63.255 rule 74 permit ipdestination 221.0.0.00.3.255.255 rule 75 permit ip destination 221.4.0.00.1.255.255 rule76 permit ip destination 221.6.0.00.0.255.255 rule 77 permit ip destination 221.7.128.0

0.0.127.255 rule 78 permit ip destination 221.8.0.00.1.255.255 rule 79 permit ipdestination 221.10.0.00.0.255.255 rule 80 permit ip destination 221.11.0.00.0.127.255rule 81 permit ip destination 221.12.0.00.3.255.255 rule 82 permit ip destination

221.12.0.00.0.127.255 rule 83 permit ip destination 221.12.128.00.0.63.255 rule 84permit ip destination 221.192.0.00.3.255.255 rule 85 permit ip destination 221.196.0.0

0.1.255.255 rule 86 permit ip destination 221.199.0.00.0.31.255 rule 87 permit ipdestination 221.199.32.00.0.15.255 rule 88 permit ip destination 221.199.128.0

0.0.63.255 rule 89 permit ip destination 221.199.192.00.0.15.255 rule 90 permit ipdestination 221.200.0.00.3.255.255 rule 91 permit ip destination 221.204.0.00.1.255.255rule 92 permit ip destination 221.207.0.00.0.63.255 rule 93 permit ip destination

221.208.0.00.15.255.255 rule 94 permit ip destination 222.128.0.00.3.255.255 rule 95permit ip destination 222.132.0.00.3.255.255 rule 96 permit ip destination 222.136.0.0

0.7.255.255 rule 97 permit ip destination 222.160.0.00.3.255.255注以上规则已经包含大部分网通地址段如有更新可以动态添加。二定义策略路由指定访问网通地址段的数据报文下一跳为网通网关Quidwayroute-policy auto permit node 1 New sequence ofthis list Quidway-route-policyif-match acl 3100 Quidway-route-policyapply ip-addressnext-hop 10.1.1.2 Quidway-route-policydis this route-policy auto permit node 1if-match acl 3100 apply ip-address next-hop 10.1.1.2 return Quidway-route-policy注上面配置中以地址10.1.1.2为例作为网通网关地址应用中可根据实际需要修改。 三在连接局域网接口下应用此策略路由Quidwayint e3/0 Quidway-Ethernet3/0dis thisinterface Ethernet3/0 ip address 192.168.1.1255.255.255.0 return

Quidway-Ethernet3/0ip policy route-policy auto Quidway-Ethernet3/0dis this interfaceEthernet3/0 ip address 192.168.1.1255.255.255.0 ip policy route-policy auto returnQuidway-Ethernet3/0四配置默认路由器经过电信网关ip route-static 0.0.0.00.0.0.0

20.1.1.2preference 60注上面配置中以地址20.1.1.2为例作为电信网关地址应用中可根据实际需要修改。经过如上三个配置步骤后路由器便能自动区分网通流量和电信流量使访问网通站点走网通线路访问电信站点走电信线路。并且当网通线路出问题后所有流量都会自动切换到电信线路上使用户能够不间断访问网络。编者注对于这个问题在IXPUB论坛里还有更详细的回答与讨论详情请参看: IXPUB论坛:路由器电信、 网通双线路智能切换配置指导