| 场景 | 双运营商出口按策略分流 |
|---|---|
| 适用 | 三厂路由器 |
| 要点 | 策略路由只决定走哪条线；NAT 仍要在对应出口单独配置 |
华为 VRP
华为 VRP
acl number 3000
rule 5 permit ip destination 1.2.3.0 0.0.0.255
policy-based-route ISP1 permit node 10
if-match acl 3000
apply output-interface GigabitEthernet0/0/1
interface GigabitEthernet0/0/0
ip policy-based-route ISP1
display policy-based-route思科 IOS
思科 IOS
ip access-list extended ISP1_TRAFFIC
permit ip any 1.2.3.0 0.0.0.255
route-map ISP1 permit 10
match ip address ISP1_TRAFFIC
set interface GigabitEthernet0/1
interface GigabitEthernet0/0
ip policy route-map ISP1
show route-mapH3C Comware
H3C Comware
acl advanced 3000
rule 0 permit ip destination 1.2.3.0 0.0.0.255
policy-based-route ISP1 permit node 10
if-match acl 3000
apply output-interface GigabitEthernet1/0/1
interface GigabitEthernet1/0/0
ip policy-based-route ISP1
display policy-based-route差异：思科用 route-map + set interface 指定出口；华为/H3C 用 policy-based-route + apply output-interface。分流后忘给某条线路配 NAT，会出现该线路流量“出去全丢”的隐蔽故障。