Huawei NE20E-S4 Policy Routing

Experimental Purpose:

Redirect is to let 10.1.40.0 network segment go public Gateway 10.1.99.5, but if Access 10.1.42.0 segment does not go redirect

Scenario: If an administrator wants to manage devices across the network, users in Policy routing have no way to manage devices on another line

Creating ACLs

[Quidway] ACL 3001

[quidway-acl-adv-3001] Rule permit IP source 10.1.40.0 0.0.0.255 destination 10.1.42.0 0.0.0.255

[quidway-acl-adv-3001] Quit

# # # #如果要加管理设备的话: Please add the source address to any or network segment in 3001, the destination address is the IP 0.0.0.0 to be managed

Address, if it is a network segment, you can add a network segment

[Quidway] ACL 3002

[quidway-acl-adv-3002] Rule permit IP source 192.168.40.0 0.0.0.255//Allow source address is 40 network segment to do redirection

[quidway-acl-adv-3002] Quit

Configure Flow classification

# Create a stream-classified message on the Quidway.

[Quidway] Traffic classifier a

[Quidway-classifier-a] if-match ACL 3001

[Quidway-classifier-a] Quit

[Quidway] Traffic classifier b

[Quidway-classifier-b] if-match ACL 3002

[Quidway-classifier-b] Quit

Configure flow behavior

# Create a pop on the Quidway

[Quidway] Traffic behavior A

[QUIDWAY-BEHAVIOR-A] Permit//Allow intranet access

[Quidway-behavior-a] Quit

# Create a pop on Quidway for b

[Quidway] Traffic behavior b

[Quidway-behavior-b] REDIRECT Ip-nexthop 10.1.99.5//Let 40 segment redirect to 99.5

[Quidway-behavior-b] Quit

Configure the flow policy and apply it to the interface

# Create Flow policy A on quidway, bind the stream classification and the corresponding stream behavior.

[Quidway] Traffic Policy A

[Quidway-trafficpolicy-a] Classifier a behavior a

[Quidway-trafficpolicy-a] Classifier b behavior b//redirect Classification and actions

[Quidway-trafficpolicy-a] Statistics enable

[Quidway-trafficpolicy-a] Quit

# Apply the stream policy A to the interface of the 40.0 network segment intranet user gigabitethernet0/0/0 into the direction, or the VLAN of the intranet segment.

[Quidway] Interface gigabitethernet 0/0/0

[quidway-gigabitethernet0/0/0] Traffic-policy a inbound

[quidway-gigabitethernet0/0/0] Quit

This article is from the "Sky Blue Star" blog, please be sure to keep this source http://jingkonglanxing.blog.51cto.com/1152128/1661220

Huawei NE20E-S4 Policy Routing