问题:策略引流避开设备管理IP

acl number 3010
rule 5 permit ip source 106.3.34.0 0.0.0.128
rule 6 permit ip source 106.3.44.0 0.0.0.255
rule 7 permit ip source 106.3.45.0 0.0.0.255
acl number 3011
rule 5 permit ip destination 106.3.34.0 0.0.0.128
rule 6 permit ip destination 106.3.44.0 0.0.0.255
rule 7 permit ip destination 106.3.45.0 0.0.0.255
acl number 3012
rule 1 permit ip source 106.3.45.195 0
rule 2 permit ip source 106.3.45.196 0
rule 3 permit ip source 106.3.45.239 0
rule 4 permit ip source 106.3.45.240 0
acl number 3013
rule 1 permit ip destination 106.3.45.195 0
rule 2 permit ip destination 106.3.45.196 0
rule 3 permit ip destination 106.3.45.239 0
rule 4 permit ip destination 106.3.45.240 0

traffic classifier sxf-in operator or precedence 15
if-match acl 3011
traffic classifier sxf-out operator or precedence 10
if-match acl 3010
traffic classifier sxf2-in operator or precedence 20
if-match acl 3013
traffic classifier sxf2-out operator or precedence 25
if-match acl 3012

traffic behavior sxf-in
redirect ip-nexthop 20.20.20.2
traffic behavior sxf-out
redirect ip-nexthop 20.20.20.2
traffic behavior sxf2-in
permit
traffic behavior sxf2-out
permit

traffic policy sxf-in
classifier sxf-in behavior sxf-in
classifier sxf2-in behavior sxf2-in
traffic policy sxf-out
classifier sxf-out behavior sxf-out
classifier sxf2-out behavior sxf2-out


郑重声明:本文版权归原作者所有,转载文章仅为传播更多信息之目的,如作者信息标记有误,请第一时间联系我们修改或删除,多谢。