Juniper路由策略中导入或导出的含义

网络工程 杜松 ospf 瞻博网络政策
2022-03-06 10:49:21

当执行这些命令时,junos ospf 协议和 junos 路由实例到底发生了什么?

set policy-options policy-statement POLICY-STATIC term TERM-STATIC from protocol static
set policy-options policy-statement POLICY-STATIC term TERM-STATIC then accept
set protocols ospf export POLICY-STATIC

对于那些不熟悉 junos 的人(包括我自己),这将有助于解释importexport关键字的作用。

1个回答

概述

junosimportexport操作最好从路由实例(或路由表)发生的情况中理解。

导入/导出关键字的含义:

  • import从协议路由到路由实例协议import选择包括但不限于:localdirectstaticisisospfbgp
  • export从路由实例到路由协议的路由(这类似于在 IOS 产品中重新分配路由)

除非另有说明,将路由导出到 OSPF 默认使用 OSPF External Type-2 路由。

上面是做什么的POLICY-STATIC

这项政策在做什么?

set policy-options policy-statement POLICY-STATIC term TERM-STATIC from protocol static
set policy-options policy-statement POLICY-STATIC term TERM-STATIC then accept
set protocols ospf export POLICY-STATIC

上面的前两行匹配此路由实例中的任何静态路由,然后将这些路由导出到此 ospf 实例。除非您另外告诉 junos,否则导出到 ospf 默认为 OSPF External Type-2 路由,度量为 0。

junos 静态路由警告:

请注意,junos 会为内部函数动态生成静态路由,此示例来自源 nat 配置:

root@lab_srx> show configuration | display set | match snat
set security nat source pool SNAT-IPv4-POOL-01 address 192.168.1.10/32 to 192.168.1.30/32
set security nat source pool SNAT-IPv4-POOL-01 port range 10000
set security nat source pool SNAT-IPv4-POOL-01 port range to 63486
set security nat source rule-set SOURCE-NAT-RULE rule SOURCE-NAT-RULE then source-nat pool SNAT-IPv4-POOL-01
set security nat proxy-arp interface ge-0/0/5.0 address 192.168.1.10/32 to 192.168.1.30/32

root@lab_srx> show route
...
192.168.1.10/31    *[Static/1] 18:05:31
                      Receive
192.168.1.12/30    *[Static/1] 18:05:31
                      Receive
192.168.1.16/29    *[Static/1] 18:05:31
                      Receive
192.168.1.24/30    *[Static/1] 18:05:31
                      Receive
192.168.1.28/31    *[Static/1] 18:05:31
                      Receive
192.168.1.30/32    *[Static/1] 18:05:31
                      Receive

OSPF 外部类型 1 默认路由policy-statement

如果您想创建一个 OPSF External Type-1 默认值(来自现有的静态默认路由),您可以使用这个policy-statement

set policy-options policy-statement STATIC-DEFAULT term TERM-STATIC-DEFAULT from protocol static
set policy-options policy-statement STATIC-DEFAULT term TERM-STATIC-DEFAULT from route-filter 0.0.0.0/0 exact
set policy-options policy-statement STATIC-DEFAULT term TERM-STATIC-DEFAULT then external type 1
set policy-options policy-statement STATIC-DEFAULT term TERM-STATIC-DEFAULT then accept
set protocols ospf export STATIC-DEFAULT 

BGPpolicy-statement示例:

set policy-options policy-statement POLICY-BGP-TESTME term MY-COMMUNITY-LP from community 1000:1000
set policy-options policy-statement POLICY-BGP-TESTME term MY-COMMUNITY-LP then local-preference 200
set policy-options policy-statement POLICY-BGP-TESTME term MY-COMMUNITY-LP then accept