Learning Strategy Routing:
Today to help friends of the company debugging a basic needs: the company's original 10M fiber network to provide staff access to the Internet, because the network behavior management is not very strict, speed when the speed is slow. Financial personnel every month need to report all kinds of reports on the Internet, seriously affecting the efficiency, hereby applied for an ADSL to financial room dedicated use.
The original network structure is as follows: routing-core exchange-access switching changed to: Routing (fiber) routing (AD)--core switching--access switching
Talk about the requirements, look at the configuration file, only need to add a policy route to the Finance department
The configuration process is as follows:
1. Configure SDM prefer routing
c_c_3750 (config) #sdm?
Prefer Config TCAM and Forwarding RAM sizes. warning:need to the reset switch for configuration to take effect. (Warning: This command takes effect requires a reboot)
c_c_3750 (config) #sdm prefer routing #为交换机提供最大化的路由分配
c_c_3750 (config) #exit
C_c_3750#reload
2. Configuring ACLS
IP Access-list Extended Manager
Permit IP 192.168.4.0 0.0.0.255 any #允许财务全网段访问, you can also define a separate IP or IP segment.
Deny IP any any
3. Configure Route-map
c_c_3750 (config) #route-map man permit #定义策略路由 man for policy name
c_c_3750 (config-route-map) #match IP address manager #指定允许的ACL名称或ACL序号
c_c_3750 (config-route-map) #set IP?
Address Specify IP Address
Default Set default Information
DF Set DF Bit
Next-hop Next Hop Address
Precedence Set Precedence Field
Qos-group Set QOS Group ID
TOS Set type of service field
c_c_3750 (config-route-map) #set IP next-hop 192.168.10.2 #指定下跳网络接口IP
4. Policy Routing applied to the appropriate port or VLAN
C_c_3750#conf T
Enter configuration commands, one per line. End with cntl/z.
c_c_3750 (config) #interface VLAN 40
c_c_3750 (config-if) #ip policy Route-map Man
5. Verifying Policy Routing
Show me first.
C_c_3750#show Route-map
Route-map man, permit, sequence 10
Match clauses:
IP address (access-lists): Manager
Set clauses:
IP next-hop 192.168.10.2
Policy routing matches:0 packets, 0 bytes
Then go to the customer tracert www.baidu.com to see the routing trend.
C:\users\administrator\desktop>tracert www.baidu.com
Up to 30 hops tracking
Routes to www.a.shifen.com [61.135.169.121]:
1 1 ms 1 ms 1 ms XXXXX [192.168.4.1]
2 xxxxx [192.168.10.2] Report: Unable to access the target network.
The trace is complete. #因为未配置ADSL, so the access is not successful, but you can verify that the route has taken the 10.2 address specified by the policy route
Check out show Route-map once again
C_c_3750#show Route-map
Route-map man, permit, sequence 10
Match clauses:
IP address (access-lists): Manager
Set clauses:
IP next-hop 192.168.10.2
Policy routing matches:184 packets, 18531 bytes #已经有流量提示.
The above is the basic 3750G Policy Routing configuration.
Precautions:
In the configuration SDM command is sure to re-device.
The IP routeing command must be turned on.
Turn off the swap port mode.
This article is from the "Fly high into the Sky" blog, please be sure to keep this source http://xjlsky.blog.51cto.com/22754/1651167
Cisco 3750-24g makes Policy Routing