1.测试拓扑：
2.基本配置：
R1：
interface FastEthernet0/0
ip address 12.1.1.1 255.255.255.0
no shutdown
interface Loopback0
ip address 1.1.1.1 255.255.255.0
R2：
interface Ethernet0/0
ip address 12.1.1.2 255.255.255.0
no shutdown
!
interface Ethernet0/1
ip address 23.1.1.2 255.255.255.0
no shutdown
!
interface Ethernet0/2
ip address 24.1.1.2 255.255.255.0
no shutdown
R3:
interface FastEthernet0/0
ip address 23.1.1.3 255.255.255.0
no shutdown
!
interface FastEthernet0/1
ip address 50.1.1.3 255.255.255.0
no shutdown
R4:
interface FastEthernet0/0
ip address 24.1.1.4 255.255.255.0
no shutdown
!
interface FastEthernet0/1
ip address 50.1.1.4 255.255.255.0
no shutdown
R5:
interface Loopback0
ip address 5.5.5.5 255.255.255.0
!
interface FastEthernet0/0
ip address 50.1.1.5 255.255.255.0
no shutdown
3.静态路由配置：
R1：
ip route 0.0.0.0 0.0.0.0 12.1.1.2
R2:
ip route 0.0.0.0 0.0.0.0 23.1.1.3
ip route 1.1.1.0 255.255.255.0 12.1.1.1
R3:
ip route 5.5.5.0 255.255.255.0 50.1.1.5
ip route 12.1.1.0 255.255.255.0 23.1.1.2
R4:
ip route 1.1.1.0 255.255.255.0 24.1.1.2
ip route 5.5.5.0 255.255.255.0 50.1.1.5
R5:
ip route 0.0.0.0 0.0.0.0 50.1.1.3
ip route 1.1.1.0 255.255.255.0 50.1.1.4
4.R2策略路由配置：
A.配置访问控制列表，匹配流量：
access-list 110 permit ip 1.1.1.0 0.0.0.255 5.5.5.0 0.0.0.255
B.配置route-map,匹配流量后，设置下一跳
route-map net5 permit 10
match ip address 110
set ip next-hop 24.1.1.4
!
route-map net5 permit 20
C.在访问控制列表对应流量的进入接口应用route-map
interface Ethernet0/0
ip policy route-map net5
5.效果测试：
A.R1直接traceroute 5.5.5.5 ，这时的源地址为12.1.1.1
R1#traceroute 5.5.5.5
Type escape sequence to abort.
Tracing the route to 5.5.5.5
1 12.1.1.2 36 msec 80 msec 44 msec
2 23.1.1.3 92 msec 96 msec 60 msec
3 50.1.1.5 160 msec * 184 msec
R1#
-----可以看到R2根据默认路由配置，将去往5.5.5.5的数据包下一跳扔给了R3。
B.R1指定源地址为1.1.1.1来traceroute 5.5.5.5
R1#traceroute 5.5.5.5 source 1.1.1.1
Type escape sequence to abort.
Tracing the route to 5.5.5.5
1 12.1.1.2 44 msec 100 msec 56 msec
2 24.1.1.4 68 msec 64 msec 96 msec
3 50.1.1.5 124 msec * 140 msec
R1#
2.基本配置：
R1：
interface FastEthernet0/0
ip address 12.1.1.1 255.255.255.0
no shutdown
interface Loopback0
ip address 1.1.1.1 255.255.255.0
R2：
interface Ethernet0/0
ip address 12.1.1.2 255.255.255.0
no shutdown
!
interface Ethernet0/1
ip address 23.1.1.2 255.255.255.0
no shutdown
!
interface Ethernet0/2
ip address 24.1.1.2 255.255.255.0
no shutdown
R3:
interface FastEthernet0/0
ip address 23.1.1.3 255.255.255.0
no shutdown
!
interface FastEthernet0/1
ip address 50.1.1.3 255.255.255.0
no shutdown
R4:
interface FastEthernet0/0
ip address 24.1.1.4 255.255.255.0
no shutdown
!
interface FastEthernet0/1
ip address 50.1.1.4 255.255.255.0
no shutdown
R5:
interface Loopback0
ip address 5.5.5.5 255.255.255.0
!
interface FastEthernet0/0
ip address 50.1.1.5 255.255.255.0
no shutdown
3.静态路由配置：
R1：
ip route 0.0.0.0 0.0.0.0 12.1.1.2
R2:
ip route 0.0.0.0 0.0.0.0 23.1.1.3
ip route 1.1.1.0 255.255.255.0 12.1.1.1
R3:
ip route 5.5.5.0 255.255.255.0 50.1.1.5
ip route 12.1.1.0 255.255.255.0 23.1.1.2
R4:
ip route 1.1.1.0 255.255.255.0 24.1.1.2
ip route 5.5.5.0 255.255.255.0 50.1.1.5
R5:
ip route 0.0.0.0 0.0.0.0 50.1.1.3
ip route 1.1.1.0 255.255.255.0 50.1.1.4
4.R2策略路由配置：
A.配置访问控制列表，匹配流量：
access-list 110 permit ip 1.1.1.0 0.0.0.255 5.5.5.0 0.0.0.255
B.配置route-map,匹配流量后，设置下一跳
route-map net5 permit 10
match ip address 110
set ip next-hop 24.1.1.4
!
route-map net5 permit 20
C.在访问控制列表对应流量的进入接口应用route-map
interface Ethernet0/0
ip policy route-map net5
5.效果测试：
A.R1直接traceroute 5.5.5.5 ，这时的源地址为12.1.1.1
R1#traceroute 5.5.5.5
Type escape sequence to abort.
Tracing the route to 5.5.5.5
1 12.1.1.2 36 msec 80 msec 44 msec
2 23.1.1.3 92 msec 96 msec 60 msec
3 50.1.1.5 160 msec * 184 msec
R1#
-----可以看到R2根据默认路由配置，将去往5.5.5.5的数据包下一跳扔给了R3。
B.R1指定源地址为1.1.1.1来traceroute 5.5.5.5
R1#traceroute 5.5.5.5 source 1.1.1.1
Type escape sequence to abort.
Tracing the route to 5.5.5.5
1 12.1.1.2 44 msec 100 msec 56 msec
2 24.1.1.4 68 msec 64 msec 96 msec
3 50.1.1.5 124 msec * 140 msec
R1#
----可以看到，R2根据策略路由配置，将源地址为1.1.1.1目标地址为5.5.5.5的下一跳扔给了R4。
本文转自 碧云天 51CTO博客，原文链接：http://blog.51cto.com/333234/1066640，如需转载请自行联系原作者
