示例:为 GRE 或 IP-IP 隧道配置 CoS
本主题提供有关如何为 GRE 或 IP-IP 隧道配置服务等级 (CoS) 的示例。
要求
配置此示例之前,不需要除设备初始化之外的特殊配置。
概述
拓扑
在图 1 中,路由器 A 充当隧道入口设备。路由器 A 和ge-1/3/0路由器 B 中的接口ge-1/0/0之间的链路为 GRE 或 IP-IP 隧道。路由器 A 会监控从接口ge-1/3/0接收的流量。通过接口ge-1/0/0,路由器 C 生成流向路由器 B 的流量。
CoS
配置
要配置此示例,请执行以下操作:
CLI 快速配置
要快速配置此示例,请复制以下命令,将其粘贴到文本文件中,删除所有换行符,更改详细信息,以便与网络配置匹配,然后将命令复制并粘贴到层级的 [edit] CLI 中。
路由器 A
set interfaces ge-1/0/0 unit 0 family inet address 10.80.0.2/24 set interfaces ge-1/0/1 unit 0 family inet filter input zf-catch-all set interfaces ge-1/0/1 unit 0 family inet address 10.90.0.2/24 set interfaces gr-2/1/0 unit 0 tunnel source 10.11.11.11 destination 10.255.245.46 set interfaces gr-2/1/0 unit 0 family inet address 10.21.21.21/24 set interfaces ip-2/1/0 unit 0 tunnel source 10.12.12.12 destination 10.255.245.46 set interfaces ip-2/1/0 unit 0 family inet address 10.22.22.22/24 set routing-options static route 10.1.1.1/32 next-hop gr-2/1/0.0 set routing-options static route 10.2.2.2/32 next-hop ip-2/1/0.0 set class-of-service interfaces ge-1/0/0 unit 0 rewrite-rules inet-precedence zf-tun-rw-ipprec-00 set class-of-service rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class best-effort loss-priority low code-point 000 set class-of-service rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class best-effort loss-priority high code-point 001 set class-of-service rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class expedited-forwarding loss-priority low code-point 010 set class-of-service rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class expedited-forwarding loss-priority high code-point 011 set class-of-service rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class assured-forwarding loss-priority low code-point 100 set class-of-service rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class assured-forwarding loss-priority high code-point 101 set class-of-service rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class network-control loss-priority low code-point 110 set class-of-service rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class network-control loss-priority high code-point 111 set class-of-service rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class best-effort loss-priority low code-point 000000 set class-of-service rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class best-effort loss-priority high code-point 001001 set class-of-service rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class expedited-forwarding loss-priority low code-point 010010 set class-of-service rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class expedited-forwarding loss-priority high code-point 011011 set class-of-service rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class assured-forwarding loss-priority low code-point 100100 set class-of-service rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class assured-forwarding loss-priority high code-point 101101 set class-of-service rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class network-control loss-priority low code-point 110110 set class-of-service rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class network-control loss-priority high code-point 111111 set firewall filter zf-catch-all term term1 then loss-priority high set firewall filter zf-catch-all term term1 then forwarding-class network-control
路由器 B
user@router-B# set interfaces ge-1/3/0 unit 0 family inet address 10.80.0.1/24 user@router-B# set interfaces lo0 unit 0 family inet address 10.255.245.46/32
路由器 C
set interfaces ge-1/0/0 unit 0 family inet address 10.90.0.1/24 set routing-options static route 10.1.1.1/32 next-hop 10.90.0.2 set routing-options static route 10.2.2.2/32 next-hop 10.90.0.2
配置路由器 A
程序
逐步过程
以下示例要求您在配置层次结构中的各个级别上导航。有关导航 CLI 的信息,请参阅 CLI 用户指南中的在配置模式下使用 CLI 编辑器。
要配置路由器 A:
配置设备接口。
[edit interfaces] user@router-A# set ge-1/0/0 unit 0 family inet address 10.80.0.2/24 user@router-A# set ge-1/0/1 unit 0 family inet filter input zf-catch-all user@router-A# set ge-1/0/1 unit 0 family inet address address 10.90.0.2/24 user@router-A# set gr-2/1/0 unit 0 tunnel source 10.11.11.11 destination 10.255.245.46 user@router-A# set gr-2/1/0 unit 0 family inet address 10.21.21.21/24 user@router-A# set ip-2/1/0 unit 0 tunnel source 10.12.12.12 destination 10.255.245.46 user@router-A# set ip-2/1/0 unit 0 family inet address 10.22.22.22/24
配置静态路由。
[edit routing-options static] user@router-A# set static route 10.1.1.1/32 next-hop gr-2/1/0.0 user@router-A# set static route 10.2.2.2/32 next-hop ip-2/1/0.0
将重写规则应用于接口。
[edit class-of-service] user@router-A# set interfaces ge-1/0/0 unit 0 rewrite-rules inet-precedence zf-tun-rw-ipprec-00
定义重写规则。
[edit class-of-service] user@router-A# set rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class best-effort loss-priority low code-point 000 user@router-A# set rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class best-effort loss-priority high code-point 001 user@router-A# set rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class expedited-forwarding loss-priority low code-point 010 user@router-A# set rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class expedited-forwarding loss-priority high code-point 011 user@router-A# set rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class assured-forwarding loss-priority low code-point 100 user@router-A# set rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class assured-forwarding loss-priority high code-point 101 user@router-A# set rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class network-control loss-priority low code-point 110 user@router-A# set rewrite-rules inet-precedence zf-tun-rw-ipprec-00 forwarding-class network-control loss-priority high code-point 111 user@router-A# set rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class best-effort loss-priority low code-point 000000 user@router-A# set rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class best-effort loss-priority high code-point 001001 user@router-A# set rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class expedited-forwarding loss-priority low code-point 010010 user@router-A# set rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class expedited-forwarding loss-priority high code-point 011011 user@router-A# set rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class assured-forwarding loss-priority low code-point 100100 user@router-A# set rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class assured-forwarding loss-priority high code-point 101101 user@router-A# set rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class network-control loss-priority low code-point 110110 user@router-A# set rewrite-rules dscp zf-tun-rw-dscp-00 forwarding-class network-control loss-priority high code-point 111111
配置防火墙过滤器。
[edit firewall] user@router-A# set filter zf-catch-all term term1 then loss-priority high user@router-A# set filter zf-catch-all term term1 then forwarding-class network-control
结果
在配置模式下,输入 show interfaces、 show routing-options、 show class-of-service和 show firewall 命令,以确认您的配置。如果输出未显示预期的配置,请重复此示例中的说明,以更正配置。
user@router-A# show interfaces
ge-1/0/0 {
unit 0 {
family inet {
address 10.80.0.2/24;
}
}
}
ge-1/0/1 {
unit 0 {
family inet {
filter {
input zf-catch-all;
}
address 10.90.0.2/24;
}
}
}
gr-2/1/0 {
unit 0 {
tunnel {
source 10.11.11.11;
destination 10.255.245.46;
}
family inet {
address 10.21.21.21/24;
}
}
}
ip-2/1/0 {
unit 0 {
tunnel {
source 10.12.12.12;
destination 10.255.245.46;
}
family inet {
address 10.22.22.22/24;
}
}
}
user@router-A# show routing-options
static {
route 10.1.1.1/32 next-hop gr-2/1/0.0;
route 10.2.2.2/32 next-hop ip-2/1/0.0;
}
user@router-A# show class-of-service
interfaces {
ge-1/0/0 {
unit 0 {
rewrite-rules {
inet-precedence zf-tun-rw-ipprec-00;
}
}
}
}
rewrite-rules {
inet-precedence zf-tun-rw-ipprec-00 {
forwarding-class best-effort {
loss-priority low code-point 000;
loss-priority high code-point 001;
}
forwarding-class expedited-forwarding {
loss-priority low code-point 010;
loss-priority high code-point 011;
}
forwarding-class assured-forwarding {
loss-priority low code-point 100;
loss-priority high code-point 101;
}
forwarding-class network-control {
loss-priority low code-point 110;
loss-priority high code-point 111;
}
}
}
dscp zf-tun-rw-dscp-00 {
forwarding-class best-effort {
loss-priority low code-point 000000;
loss-priority high code-point 001001;
}
forwarding-class expedited-forwarding {
loss-priority low code-point 010010;
loss-priority high code-point 011011;
}
forwarding-class assured-forwarding {
loss-priority low code-point 100100;
loss-priority high code-point 101101;
}
forwarding-class network-control {
loss-priority low code-point 110110;
loss-priority high code-point 111111;
}
}
user@router-A# show firewall
filter zf-catch-all {
term term1 {
then {
loss-priority high;
forwarding-class network-control;
}
}
}
完成设备配置后,请从配置模式进入 commit 。
配置路由器 B
程序
逐步过程
以下示例要求您在配置层次结构中的各个级别上导航。有关导航 CLI 的信息,请参阅 CLI 用户指南中的在配置模式下使用 CLI 编辑器。
要配置路由器 B:
配置设备接口。
[edit interfaces] user@router-B# set ge-1/3/0 unit 0 family inet address 10.80.0.1/24 user@router-B# set lo0 unit 0 family inet address 10.255.245.46/32
结果
在配置模式下,输入命令以确认 show interfaces 您的配置。如果输出未显示预期的配置,请重复此示例中的说明,以更正配置。
路由器 B
user@router-B# show interfaces
ge-1/3/0 {
unit 0 {
family inet {
address 10.80.0.1/24;
}
}
}
lo0 {
unit 0 {
family inet {
address 10.255.245.46/32;
}
}
}
完成设备配置后,请从配置模式进入 commit 。
配置路由器 C
程序
逐步过程
要配置路由器 C:
配置设备接口。
[edit interfaces] user@router-B# set ge-1/0/0 unit 0 family inet address 10.90.0.1/24
配置静态路由。
[edit routing-options static] user@router-A# set static route 10.1.1.1/32 next-hop 10.90.0.2 user@router-A# set static route 10.2.2.2/32 next-hop 10.90.0.2
结果
在配置模式下,输入和 show routing-options 命令以确认show interfaces您的配置。如果输出未显示预期的配置,请重复此示例中的说明,以更正配置。
路由器 C
user@router-C show interfaces
ge-1/0/0 {
unit 0 {
family inet {
address 10.90.0.1/24;
}
}
}
user@router-C show routing-options
static {
route 10.1.1.1/32 next-hop 10.90.0.2;
route 10.2.2.2/32 next-hop 10.90.0.2;
}
完成设备配置后,请从配置模式进入 commit 。
验证
要验证配置,请运行以下命令: