CCNP 以Packet Size決定不同Gateway out

 matchlength

Goal:
HK network(R5) connect to China network(R4) via ISP MPLS for smaller packet, and the bigger packet via own VPN

R4
interface FastEthernet0/0
ip address 172.20.20.3 255.255.255.0

ip route 0.0.0.0 0.0.0.0 172.20.20.1
ip route 0.0.0.0 0.0.0.0 172.20.20.2

R1
interface FastEthernet0/0
ip address 192.168.0.252 255.255.255.0
interface FastEthernet0/1
ip address 172.20.20.1 255.255.255.0

ip route 10.0.0.0 255.255.255.0 192.168.0.254

R2
interface FastEthernet0/0
ip address 192.168.0.253 255.255.255.0
interface FastEthernet0/1
ip address 172.20.20.2 255.255.255.0

ip route 10.0.0.0 255.255.255.0 192.168.0.254

R6
interface FastEthernet0/0
ip address 8.8.8.8 255.255.255.0

ip route 10.0.0.0 255.255.255.0 8.8.8.9

R3
interface FastEthernet0/0
ip address 192.168.0.254 255.255.255.0
interface FastEthernet0/1
ip address 10.0.0.2 255.255.255.0
interface FastEthernet1/0
ip address 8.8.8.9 255.255.255.0

ip route 172.20.20.0 255.255.255.0 192.168.0.252
ip route 172.20.20.0 255.255.255.0 192.168.0.253

access-list 101 permit ip any 172.20.20.0 0.0.0.255

route-map lab1 permit 10
match ip address 101
match length 0 100
set ip next-hop 192.168.0.252

route-map lab1 permit 20
match ip address 101
match length 101 2147483647
set ip next-hop 192.168.0.253

R5
interface FastEthernet0/0
ip address 10.0.0.1 255.255.255.0

ip route 0.0.0.0 0.0.0.0 10.0.0.2

Verify:

R3
debug ip policy

R5
Ping
Protocol [ip]:
Target IP address: 172.20.20.3
Repeat count [5]:
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]:
Sweep range of sizes [n]:

matchlength2

Ping
Protocol [ip]:
Target IP address: 172.20.20.3
Repeat count [5]:
Datagram size [100]: 101
Timeout in seconds [2]:
Extended commands [n]:
Sweep range of sizes [n]:

matchlength3

發佈留言

*