示例:为 GRE 或 IP-IP 隧道配置 CoS
本主题提供有关如何为 GRE 或 IP-IP 隧道配置服务等级 (CoS) 的示例。
要求
配置此示例之前,不需要除设备初始化之外的特殊配置。
概述
拓扑
在图 1 中,路由器 A 充当隧道入口设备。路由器 A 和ge-1/3/0
路由器 B 中的接口ge-1/0/0
之间的链路为 GRE 或 IP-IP 隧道。路由器 A 会监控从接口ge-1/3/0
接收的流量。通过接口ge-1/0/0
,路由器 C 生成流向路由器 B 的流量。
配置
要配置此示例,请执行以下操作:
CLI 快速配置
要快速配置此示例,请复制以下命令,将其粘贴到文本文件中,删除所有换行符,更改详细信息,以便与网络配置匹配,然后将命令复制并粘贴到层级的 [edit]
CLI 中。
路由器 A
set interfaces ge-1/0/0 unit 0 family inet address 10.80.0.2/24 set interfaces ge-1/0/1 unit 0 family inet filter input zf-catch-all set interfaces ge-1/0/1 unit 0 family inet address 10.90.0.2/24 set interfaces gr-2/1/0 unit 0 tunnel source 10.11.11.11 destination 10.255.245.46 set interfaces gr-2/1/0 unit 0 family inet address 10.21.21.21/24 set interfaces ip-2/1/0 unit 0 tunnel source 10.12.12.12 destination 10.255.245.46 set interfaces ip-2/1/0 unit 0 family inet address 10.22.22.22/24 set routing-options static route 10.1.1.1/32 next-hop gr-2/1/0.0 set routing-options static route 10.2.2.2/32 next-hop ip-2/1/0.0 set class-of-service interfaces ge-1/0/0 unit 0 rewrite-rules inet-precedence zf-tun-rw-ipprec-00 set class-of-service rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class best-effort loss-priority low code-point 000 set class-of-service rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class best-effort loss-priority high code-point 001 set class-of-service rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class expedited-forwarding loss-priority low code-point 010 set class-of-service rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class expedited-forwarding loss-priority high code-point 011 set class-of-service rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class assured-forwarding loss-priority low code-point 100 set class-of-service rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class assured-forwarding loss-priority high code-point 101 set class-of-service rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class network-control loss-priority low code-point 110 set class-of-service rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class network-control loss-priority high code-point 111 set class-of-service rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class best-effort loss-priority low code-point 000000 set class-of-service rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class best-effort loss-priority high code-point 001001 set class-of-service rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class expedited-forwarding loss-priority low code-point 010010 set class-of-service rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class expedited-forwarding loss-priority high code-point 011011 set class-of-service rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class assured-forwarding loss-priority low code-point 100100 set class-of-service rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class assured-forwarding loss-priority high code-point 101101 set class-of-service rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class network-control loss-priority low code-point 110110 set class-of-service rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class network-control loss-priority high code-point 111111 set firewall filter zf-catch-all term term1 then loss-priority high set firewall filter zf-catch-all term term1 then forwarding-class network-control
路由器 B
user@router-B# set interfaces ge-1/3/0 unit 0 family inet address 10.80.0.1/24 user@router-B# set interfaces lo0 unit 0 family inet address 10.255.245.46/32
路由器 C
set interfaces ge-1/0/0 unit 0 family inet address 10.90.0.1/24 set routing-options static route 10.1.1.1/32 next-hop 10.90.0.2 set routing-options static route 10.2.2.2/32 next-hop 10.90.0.2
配置路由器 A
程序
逐步过程
以下示例要求您在配置层次结构中的各个级别上导航。有关导航 CLI 的信息,请参阅 CLI 用户指南中的在配置模式下使用 CLI 编辑器。
要配置路由器 A:
配置设备接口。
[edit interfaces] user@router-A# set ge-1/0/0 unit 0 family inet address 10.80.0.2/24 user@router-A# set ge-1/0/1 unit 0 family inet filter input zf-catch-all user@router-A# set ge-1/0/1 unit 0 family inet address address 10.90.0.2/24 user@router-A# set gr-2/1/0 unit 0 tunnel source 10.11.11.11 destination 10.255.245.46 user@router-A# set gr-2/1/0 unit 0 family inet address 10.21.21.21/24 user@router-A# set ip-2/1/0 unit 0 tunnel source 10.12.12.12 destination 10.255.245.46 user@router-A# set ip-2/1/0 unit 0 family inet address 10.22.22.22/24
配置静态路由。
[edit routing-options static] user@router-A# set static route 10.1.1.1/32 next-hop gr-2/1/0.0 user@router-A# set static route 10.2.2.2/32 next-hop ip-2/1/0.0
将重写规则应用于接口。
[edit class-of-service] user@router-A# set interfaces ge-1/0/0 unit 0 rewrite-rules inet-precedence zf-tun-rw-ipprec-00
定义重写规则。
[edit class-of-service] user@router-A# set rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class best-effort loss-priority low code-point 000 user@router-A# set rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class best-effort loss-priority high code-point 001 user@router-A# set rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class expedited-forwarding loss-priority low code-point 010 user@router-A# set rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class expedited-forwarding loss-priority high code-point 011 user@router-A# set rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class assured-forwarding loss-priority low code-point 100 user@router-A# set rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class assured-forwarding loss-priority high code-point 101 user@router-A# set rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class network-control loss-priority low code-point 110 user@router-A# set rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class network-control loss-priority high code-point 111 user@router-A# set rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class best-effort loss-priority low code-point 000000 user@router-A# set rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class best-effort loss-priority high code-point 001001 user@router-A# set rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class expedited-forwarding loss-priority low code-point 010010 user@router-A# set rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class expedited-forwarding loss-priority high code-point 011011 user@router-A# set rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class assured-forwarding loss-priority low code-point 100100 user@router-A# set rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class assured-forwarding loss-priority high code-point 101101 user@router-A# set rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class network-control loss-priority low code-point 110110 user@router-A# set rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class network-control loss-priority high code-point 111111
配置防火墙过滤器。
[edit firewall] user@router-A# set filter zf-catch-all term term1 then loss-priority high user@router-A# set filter zf-catch-all term term1 then forwarding-class network-control
结果
在配置模式下,输入 show interfaces
、 show routing-options
、 show class-of-service
和 show firewall
命令,以确认您的配置。如果输出未显示预期的配置,请重复此示例中的说明,以更正配置。
user@router-A# show interfaces ge-1/0/0 { unit 0 { family inet { address 10.80.0.2/24; } } } ge-1/0/1 { unit 0 { family inet { filter { input zf-catch-all; } address 10.90.0.2/24; } } } gr-2/1/0 { unit 0 { tunnel { source 10.11.11.11; destination 10.255.245.46; } family inet { address 10.21.21.21/24; } } } ip-2/1/0 { unit 0 { tunnel { source 10.12.12.12; destination 10.255.245.46; } family inet { address 10.22.22.22/24; } } }
user@router-A# show routing-options static { route 10.1.1.1/32 next-hop gr-2/1/0.0; route 10.2.2.2/32 next-hop ip-2/1/0.0; }
user@router-A# show class-of-service interfaces { ge-1/0/0 { unit 0 { rewrite-rules { inet-precedence zf-tun-rw-ipprec-00; } } } } rewrite-rules { inet-precedence zf-tun-rw-ipprec-00 { forwarding-class best-effort { loss-priority low code-point 000; loss-priority high code-point 001; } forwarding-class expedited-forwarding { loss-priority low code-point 010; loss-priority high code-point 011; } forwarding-class assured-forwarding { loss-priority low code-point 100; loss-priority high code-point 101; } forwarding-class network-control { loss-priority low code-point 110; loss-priority high code-point 111; } } } dscp zf-tun-rw-dscp-00 { forwarding-class best-effort { loss-priority low code-point 000000; loss-priority high code-point 001001; } forwarding-class expedited-forwarding { loss-priority low code-point 010010; loss-priority high code-point 011011; } forwarding-class assured-forwarding { loss-priority low code-point 100100; loss-priority high code-point 101101; } forwarding-class network-control { loss-priority low code-point 110110; loss-priority high code-point 111111; } }
user@router-A# show firewall filter zf-catch-all { term term1 { then { loss-priority high; forwarding-class network-control; } } }
完成设备配置后,请从配置模式进入 commit
。
配置路由器 B
程序
逐步过程
以下示例要求您在配置层次结构中的各个级别上导航。有关导航 CLI 的信息,请参阅 CLI 用户指南中的在配置模式下使用 CLI 编辑器。
要配置路由器 B:
配置设备接口。
[edit interfaces] user@router-B# set ge-1/3/0 unit 0 family inet address 10.80.0.1/24 user@router-B# set lo0 unit 0 family inet address 10.255.245.46/32
结果
在配置模式下,输入命令以确认 show interfaces
您的配置。如果输出未显示预期的配置,请重复此示例中的说明,以更正配置。
路由器 B
user@router-B# show interfaces ge-1/3/0 { unit 0 { family inet { address 10.80.0.1/24; } } } lo0 { unit 0 { family inet { address 10.255.245.46/32; } } }
完成设备配置后,请从配置模式进入 commit
。
配置路由器 C
程序
逐步过程
要配置路由器 C:
配置设备接口。
[edit interfaces] user@router-B# set ge-1/0/0 unit 0 family inet address 10.90.0.1/24
配置静态路由。
[edit routing-options static] user@router-A# set static route 10.1.1.1/32 next-hop 10.90.0.2 user@router-A# set static route 10.2.2.2/32 next-hop 10.90.0.2
结果
在配置模式下,输入和 show routing-options
命令以确认show interfaces
您的配置。如果输出未显示预期的配置,请重复此示例中的说明,以更正配置。
路由器 C
user@router-C show interfaces ge-1/0/0 { unit 0 { family inet { address 10.90.0.1/24; } } } user@router-C show routing-options static { route 10.1.1.1/32 next-hop 10.90.0.2; route 10.2.2.2/32 next-hop 10.90.0.2; }
完成设备配置后,请从配置模式进入 commit
。
验证
要验证配置,请运行以下命令: