策略路由选路实验

流量走向:Pcl访向Intent-----PC1-R3-R2回程流量-----R2-R3-FW-R3-PC1静态路由配置思路R3去程流量:缺省路由指向R2回程流量:pbr引导到防火墙FW回程流量:静态路由192.168.1.0/24--R3查看R2已有配置查看路由表和接口配置配置回程路由[r2]ip route-static 192.168.1.0 24 10.1.1.3查看R3已有配置查看路由表和接口配置配置缺省[r3]ip route-static 0.0.0.0 0 10.1.1.2PBR配置ACL抓取流量[r3]acl 3000[r3-acl-adv-3000]rule permit ip destination 192.168.1.0 0.0.0.255流分类[r3]traffic classifier 1[r3-classifier-1]if-match acl 3000流行为[r3]traffic behavior 1[r3-behavior-1]redirect ip-nexthop 10.1.2.1流策略[r3]traffic policy 1调用[r3]interface GigabitEthernet 0/0/2[r3-GigabitEthernet0/0/2]traffic-policy 1 inbound查看FW配置ip route-static 192.168.1.0 255.255.255.0 10.1.3.3security-policy rule name trust-untrust action permit