设为首页收藏本站language 语言切换
查看: 3448|回复: 2
收起左侧

[求助] 如何让国内网站走电信线路,国外网站走海外专线

[复制链接]
发表于 2015-4-9 09:45:56 | 显示全部楼层 |阅读模式
我有一条PPPOE的电信宽带和MPLS VPN海外专线
设备工程师帮我设置了,国内网站走PPPOE,国外网站(GMAIL GOOGLE等)走MPLS
它是怎么做到的呀,具体是哪些命令实现的?


下面是路由和ACL部份

router bgp 65000
bgp always-compare-med
bgp log-neighbor-changes
bgp dampening
neighbor RSVR peer-group
neighbor RSVR remote-as 65000
neighbor RSVR update-source Loopback0
neighbor RSVR soft-reconfiguration inbound
neighbor RSVR route-map bgp-from--RSVR in
neighbor 152.*.*.5 peer-group RSVR
neighbor 152.*.*.209 peer-group RSVR
maximum-paths 2
no auto-summary
!
ip local policy route-map Backup-Monitor
ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip bgp-community new-format
!         
ip nat inside source route-map nat--CN interface Dialer1 overload
ip route 0.0.0.0 0.0.0.0 10.205.20.149 track 2
ip route 0.0.0.0 0.0.0.0 10.201.73.141 111
ip route 1.1.1.1 255.255.255.255 Dialer1
ip route 124.*.*.169 255.255.255.255 Dialer1
ip route 125.*.*.7 255.255.255.255 Dialer1 name backup_tunnel
ip route 152.*.*.5 255.255.255.255 10.205.20.149 name bgp1 track 2
!
ip access-list extended Backup-Monitor
permit ip host 10.201.73.142 host 152.104.228.238
permit ip host 10.201.73.142 host 152.104.168.70
ip access-list extended al--Lan
deny   ip 10.0.0.0 0.0.0.255 10.1.2.0 0.0.0.255
permit ip 10.0.0.0 0.0.0.255 any
ip access-list extended al-ERP
permit ip 10.0.0.0 0.0.0.255 host 10.1.2.2
permit ip 10.0.0.0 0.0.0.255 host 10.1.2.1
ip access-list extended al-VG
permit ip host 10.205.22.10 any
!
ip sla 2
icmp-echo 10.205.20.149 source-ip 10.205.20.150
tos 224  
threshold 3000
timeout 3000
frequency 3
ip sla schedule 2 life forever start-time now
logging esm config
access-list 4 permit 0.0.0.0
access-list 4 deny   any
access-list 5 remark SNMP Read-only Hosts
access-list 5 permit 202.*.67.10
access-list 5 permit 10.201.56.100
access-list 5 permit 202.*.86.248
access-list 5 permit 202.*.94.192 0.0.0.31
access-list 6 remark SNMP Read-Write Hosts
access-list 6 permit 202.*.67.4
access-list 6 permit 202.*.94.201
access-list 7 permit 202.*.64.0 0.0.0.255
access-list 7 permit 202.*.65.0 0.0.0.255
access-list 7 permit 202.*.67.0 0.0.0.255
access-list 7 permit 192.*.100.0 0.0.0.255
access-list 7 permit 202.*.94.0 0.0.0.255
access-list 7 permit 202.*.93.0 0.0.0.255
access-list 7 permit 10.201.56.0 0.0.0.255
access-list 7 deny   any
access-list 110 permit ip 10.0.0.0 0.0.0.255 host 10.1.2.3
access-list 110 permit ip 10.0.0.0 0.0.0.255 host 10.1.2.2
access-list 110 permit ip 10.0.0.0 0.0.0.255 host 10.1.2.1
access-list 110 deny   ip 10.0.0.0 0.0.0.255 10.1.2.0 0.0.0.255
access-list 110 deny   ip 10.0.0.0 0.0.0.255 172.16.0.0 0.0.255.255
access-list 110 permit ip any any
!
!
!
!
route-map bgp-from--RSVR permit 100
match ip address 4
!
route-map bgp-from--RSVR permit 110
set ip next-hop 1.1.1.1
!
route-map Backup-Monitor permit 20
match ip address Backup-Monitor
set ip next-hop 10.201.73.141
!
route-map nat--CN permit 100
match ip address al--Lan
match interface Dialer1
!
!
tacacs-server host *
tacacs-server key *
!
!
control-plane
!
!
banner motd ^CC

 楼主| 发表于 2015-5-5 12:41:27 | 显示全部楼层
有没有人帮我一下,谢稿
板凳 2015-5-5 12:41:27 回复 收起回复
回复 支持 反对

使用道具 举报

您需要登录后才可以回帖 登录 | 论坛注册

本版积分规则

QQ|Archiver|手机版|小黑屋|sitemap|鸿鹄论坛 ( 京ICP备14027439号 )  

GMT+8, 2025-4-30 03:47 , Processed in 0.182464 second(s), 24 queries , Redis On.  

  Powered by Discuz!

  © 2001-2025 HH010.COM

快速回复 返回顶部 返回列表