juniper策略路由做法(最新整理)

1、juniper 策略路由做法環(huán)境：網(wǎng)關(guān)在交換機(jī)上，接口連接服務(wù)器，接口配置為 2 層接口。要求特定的地址發(fā)出的包走特定的鏈路。實(shí)現(xiàn)方法有兩個(gè)，juniper 技術(shù)工程師張強(qiáng)給的方案是在 2 層上做轉(zhuǎn)發(fā)，小波哥的方案是把三層轉(zhuǎn)發(fā)應(yīng)用到 vlan 下。張強(qiáng)：set interfaces xe-0/1/3 unit 0 family inet address 117.143.111.254/30出口地址set interfaces vlan unit 3508 family inet address 115.239.254.49/28pbl vlan 地址set interfaces ge-0/0/

2、5 unit 0 family ethernet-switching port-mode trunkset interfaces ge-0/0/5 unit 0 family ethernet-switching vlan members 2set interfaces ge-0/0/5 unit 0 family ethernet-switching vlan members 3508下聯(lián)接口配置set firewall family ethernet-switching filter fil term 1 from source-address 115.239.254.48/28創(chuàng)建 2

3、層數(shù)據(jù)流匹配set firewall family ethernet-switching filter fil term 1 then interface xe-0/1/3.0創(chuàng)建 2 層數(shù)據(jù)流動(dòng)作set interfaces ge-0/0/1 unit 0 family ethernet-switching filter input策略應(yīng)用到接口這個(gè)方案在接口入方向匹配數(shù)據(jù)包，直接從接口扔出去 。所以到網(wǎng)關(guān)不通， 張強(qiáng)的意思是，這個(gè)方案只有這一個(gè)弊端，不影響使用小波哥：set interfaces xe-0/1/3 unit 0 family inet address 117.143.111

4、.254/30出口地址set interfaces vlan unit 3508 family inet address 115.239.254.49/28pbl vlan 地址set interfaces ge-0/0/5 unit 0 family ethernet-switching port-mode trunkset interfaces ge-0/0/5 unit 0 family ethernet-switching vlan members 2set interfaces ge-0/0/5 unit 0 family ethernet-switching vlan member

5、s 3508下聯(lián)接口配置set firewall family inet filter fil term 1 from source-address 115.239.254.48/28 set firewall family inet filter fil term 1 then routing-instance vrf01set firewall family inet filter fil term 2 then accept創(chuàng)建 3 層數(shù)據(jù)流匹配set routing-instances vrf01 instance-type virtual-routerset routing-inst

6、ances vrf01 routing-options static route 0.0.0.0/0 next-hop 117.143.111.253創(chuàng)建虛擬路由2set interfaces vlan unit 3508 family inet filter input fil策略應(yīng)用到 vlan這個(gè)是小波哥給的方案，是已經(jīng)使用過的具體配置可能不同，但是確定是應(yīng)用到 vlan 的入方向?！啊薄啊盿t the end, xiao bian gives you a passage. minand once said, people who learn to learn are very happ

7、y people. in every wonderful life, learning is an eternal theme. as a professional clerical and teaching position, i understand the importance of continuous learning, life is diligent, nothing can be gained, only continuous learning can achieve better self. only by constantly learning and mastering the latest relevant knowledge, can employees from all walks of life keep up with the pace of enterprise development and innovate to meet the needs of the market. this document is also