1 方案背景
1、公司接入
2 配置方案
参考链接：https://forum.huawei.com/enterprise/zh/thread/580912174270922752
1、创建ACL指定匹配规则
<AR> system-view //先从用户视图切换到系统视图再进行配置
[AR] acl number 3999 //创建高级ACL 3999
[AR-acl-adv-3999] rule 5 permit ip //总计数
[AR-acl-adv-3999] rule 5 permit ip destination 192.168.103.0 0.0.0.255 //配置需要访问外网的网段
[AR-acl-adv-3999] rule 5 permit ip destination 192.168.106.0 0.0.0.255
2、配置流量分类
[AR] traffic classifier fenliu1
[AR-classifier-fenliu1] if-match acl 3999 //引用ACL 3999
[AR-classifier-fenliu1] quit
3、配置流行为
[AR] traffic behavior fenliu1
[AR-behavior-fenliu1] redirect ip-nexthop 192.168.99.1 //静态IP方式时重定向到9口下一跳
[AR-behavior-fenliu1] quit
4、配置流策略
[AR] traffic policy fenliu //创建选路策略，绑定流分类和流行为
[AR-trafficpolicy-fenliu] classifier fenliu1 behavior fenliu1
[AR-trafficpolicy-fenliu] quit
5、应用分流策略
[AR] interface GigabitEthernet0/0/6 //进入连接内网上行入口下应用选路策略
[AR-GigabitEthernet0/0/6] traffic-policy fenliu inbound
[AR-GigabitEthernet0/0/6] return