H3C防火墙旁挂使用VRF引流

网上教程太乱了我自己出一个。这是实验的拓扑地址规划如图标记的相关配置VSR88_1[R]disp cu#version7.1.075, ESS8305#sysname R#ipttl-expiresenable#system-working-mode standard xbar load-single password-recoveryenablelpu-type f-series#vlan1#interface Serial0/0/3#interface Serial0/0/4#interface Serial0/0/5#interface Serial0/0/6#interface NULL0#interface LoopBack0ipaddress8.8.8.8255.255.255.255#interface GigabitEthernet0/0/0 port link-mode route comboenablecopper#interface GigabitEthernet0/0/1 port link-mode route comboenablecopperipaddress61.1.1.1255.255.255.252#interface GigabitEthernet0/0/2 port link-mode route comboenablecopper#interface GigabitEthernet0/0/7 port link-mode route comboenablecopper#interface GigabitEthernet0/0/8 port link-mode route comboenablecopper#interface GigabitEthernet0/0/9 port link-mode route comboenablecopper#interface GigabitEthernet0/0/10 port link-mode route comboenablecopper#scheduler logfile size16#line class aux user-role network-operator#line class console user-role network-admin#line classttyuser-role network-operator#line class vty user-role network-operator#line aux0user-role network-operator#line con0user-role network-admin#line vty063user-role network-operator#iproute-static192.168.10.02461.1.1.2iproute-static192.168.100.02461.1.1.2#domain name system#domain defaultenablesystem#role name level-0 description Predefined level-0 role#role name level-1 description Predefined level-1 role#role name level-10 description Predefined level-10 role#role name level-11 description Predefined level-11 role#role name level-12 description Predefined level-12 role#role name level-13 description Predefined level-13 role#role name level-14 description Predefined level-14 role#role name level-2 description Predefined level-2 role#role name level-3 description Predefined level-3 role#role name level-4 description Predefined level-4 role#role name level-5 description Predefined level-5 role#role name level-6 description Predefined level-6 role#role name level-7 description Predefined level-7 role#role name level-8 description Predefined level-8 role#role name level-9 description Predefined level-9 role#user-group system#returnS6850_2#version7.1.070, Alpha7170#sysname CORE#ipvpn-instance A602 route-distinguisher100:100#irf mac-address persistent timer irf auto-updateenableundo irf link-delay irf member1priority1#ipttl-expiresenable#lldp globalenable#system-working-mode standard xbar load-single password-recoveryenablelpu-type f-series#vlan1#vlan10#vlan20#vlan30#vlan100#stp globalenable#interface Bridge-Aggregation10 port link-type trunk port trunk permit vlan12030link-aggregation mode dynamic#interface NULL0#interface Vlan-interface10ipbinding vpn-instance A602ipaddress192.168.10.1255.255.255.0#interface Vlan-interface20ipbinding vpn-instance A602ipaddress20.0.0.1255.255.255.252#interface Vlan-interface30ipaddress30.0.0.1255.255.255.252#interface Vlan-interface100ipaddress192.168.100.1255.255.255.0#interface FortyGigE1/0/53 port link-mode bridge#interface FortyGigE1/0/54 port link-mode bridge#interface GigabitEthernet1/0/1 port link-mode route comboenablefiberipaddress61.1.1.2255.255.255.252#interface GigabitEthernet1/0/2 port link-mode bridge port link-type trunk port trunk permit vlan110100comboenablefiber#interface GigabitEthernet1/0/3 port link-mode bridge port link-type trunk port trunk permit vlan12030comboenablefiber port link-aggregation group10#interface GigabitEthernet1/0/4 port link-mode bridge port link-type trunk port trunk permit vlan12030comboenablefiber port link-aggregation group10#interface GigabitEthernet1/0/5 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/6 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/7 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/8 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/9 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/10 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/11 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/12 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/13 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/14 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/15 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/16 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/17 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/18 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/19 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/20 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/21 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/22 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/23 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/24 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/25 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/26 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/27 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/28 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/29 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/30 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/31 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/32 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/33 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/34 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/35 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/36 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/37 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/38 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/39 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/40 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/41 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/42 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/43 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/44 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/45 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/46 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/47 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/48 port link-mode bridge comboenablefiber#interface M-GigabitEthernet0/0/0#interface Ten-GigabitEthernet1/0/49 port link-mode bridge comboenablefiber#interface Ten-GigabitEthernet1/0/50 port link-mode bridge comboenablefiber#interface Ten-GigabitEthernet1/0/51 port link-mode bridge comboenablefiber#interface Ten-GigabitEthernet1/0/52 port link-mode bridge comboenablefiber#scheduler logfile size16#line class aux user-role network-operator#line class console user-role network-admin#line classttyuser-role network-operator#line class vty user-role network-operator#line aux0user-role network-operator#line con0user-role network-admin#line vty063user-role network-operator#iproute-static0.0.0.0061.1.1.1iproute-static192.168.10.02430.0.0.2iproute-static vpn-instance A6020.0.0.0020.0.0.2#radius scheme system user-name-format without-domain#domain system#domain defaultenablesystem#role name level-0 description Predefined level-0 role#role name level-1 description Predefined level-1 role#role name level-2 description Predefined level-2 role#role name level-3 description Predefined level-3 role#role name level-4 description Predefined level-4 role#role name level-5 description Predefined level-5 role#role name level-6 description Predefined level-6 role#role name level-7 description Predefined level-7 role#role name level-8 description Predefined level-8 role#role name level-9 description Predefined level-9 role#role name level-10 description Predefined level-10 role#role name level-11 description Predefined level-11 role#role name level-12 description Predefined level-12 role#role name level-13 description Predefined level-13 role#role name level-14 description Predefined level-14 role#user-group system#returnF_1090_3FWdisp cu#version7.1.064, Alpha7164#sysname FW#context Adminid1#telnet serverenable#irf mac-address persistent timer irf auto-updateenableundo irf link-delay irf member1priority1#ipttl-expiresenable#sysid FW#xbar load-single password-recoveryenablelpu-type f-series#vlan1#vlan20#vlan30#interface Bridge-Aggregation10 port link-type trunk port trunk permit vlan12030link-aggregation mode dynamic#interface NULL0#interface Vlan-interface20ipaddress20.0.0.2255.255.255.252#interface Vlan-interface30ipaddress30.0.0.2255.255.255.252#interface GigabitEthernet1/0/0 port link-mode route comboenablecopperipaddress192.168.56.200255.255.255.0 manage https inbound manage https outbound#interface GigabitEthernet1/0/1 port link-mode route comboenablecopperipaddress192.168.0.1255.255.255.0#interface GigabitEthernet1/0/2 port link-mode route comboenablecopper#interface GigabitEthernet1/0/5 port link-mode route comboenablecopper#interface GigabitEthernet1/0/6 port link-mode route comboenablecopper#interface GigabitEthernet1/0/7 port link-mode route comboenablecopper#interface GigabitEthernet1/0/8 port link-mode route comboenablecopper#interface GigabitEthernet1/0/9 port link-mode route comboenablecopper#interface GigabitEthernet1/0/10 port link-mode route comboenablecopper#interface GigabitEthernet1/0/11 port link-mode route comboenablecopper#interface GigabitEthernet1/0/12 port link-mode route comboenablecopper#interface GigabitEthernet1/0/13 port link-mode route comboenablecopper#interface GigabitEthernet1/0/14 port link-mode route comboenablecopper#interface GigabitEthernet1/0/15 port link-mode route comboenablecopper#interface GigabitEthernet1/0/16 port link-mode route comboenablecopper#interface GigabitEthernet1/0/17 port link-mode route comboenablecopper#interface GigabitEthernet1/0/18 port link-mode route comboenablecopper#interface GigabitEthernet1/0/19 port link-mode route comboenablecopper#interface GigabitEthernet1/0/20 port link-mode route comboenablecopper#interface GigabitEthernet1/0/21 port link-mode route comboenablecopper#interface GigabitEthernet1/0/22 port link-mode route comboenablecopper#interface GigabitEthernet1/0/23 port link-mode route comboenablecopper#interface GigabitEthernet1/0/3 port link-mode bridge port link-type trunk port trunk permit vlan12030comboenablecopper port link-aggregation group10#interface GigabitEthernet1/0/4 port link-mode bridge port link-type trunk port trunk permit vlan12030comboenablecopper port link-aggregation group10#security-zone name Local#security-zone name Trustimportinterface Vlan-interface20#security-zone name DMZ#security-zone name Untrustimportinterface Vlan-interface30#security-zone name Managementimportinterface GigabitEthernet1/0/1#scheduler logfile size16#line class aux user-role network-operator#line class console user-role network-admin#line classttyuser-role network-operator#line class vty user-role network-operator#line aux0user-role network-admin#line con0user-role network-admin#line vty04authentication-mode scheme user-role network-admin#line vty563user-role network-operator#iproute-static0.0.0.0030.0.0.1iproute-static192.168.10.02420.0.0.1#domain system#aaa session-limitftp16aaa session-limit telnet16aaa session-limitssh16domain defaultenablesystem#role name level-0 description Predefined level-0 role#role name level-1 description Predefined level-1 role#role name level-2 description Predefined level-2 role#role name level-3 description Predefined level-3 role#role name level-4 description Predefined level-4 role#role name level-5 description Predefined level-5 role#role name level-6 description Predefined level-6 role#role name level-7 description Predefined level-7 role#role name level-8 description Predefined level-8 role#role name level-9 description Predefined level-9 role#role name level-10 description Predefined level-10 role#role name level-11 description Predefined level-11 role#role name level-12 description Predefined level-12 role#role name level-13 description Predefined level-13 role#role name level-14 description Predefined level-14 role#user-group system#local-user admin class manage passwordhash$h$6$NAY4HXdjs4G2h2K$/bSpoFyGHzjR7LS005FwJZKg6yrd98Aa43Te7B7Ya49APloUFdbzlUFyuaD9H6yDnvLdnwL/kOWON319bN6Qservice-type telnet terminal http https authorization-attribute user-role level-3 authorization-attribute user-role network-admin authorization-attribute user-role network-operator#iphttpenableiphttpsenable#security-policyiprule0name123action pass#returnS6850_4AGGdisp cu#version7.1.070, Alpha7170#sysname AGG#irf mac-address persistent timer irf auto-updateenableundo irf link-delay irf member1priority1#lldp globalenable#system-working-mode standard xbar load-single password-recoveryenablelpu-type f-series#vlan1#vlan10#vlan100#stp globalenable#interface NULL0#interface FortyGigE1/0/53 port link-mode bridge#interface FortyGigE1/0/54 port link-mode bridge#interface GigabitEthernet1/0/1 port link-mode bridge port access vlan10comboenablefiber#interface GigabitEthernet1/0/2 port link-mode bridge port link-type trunk port trunk permit vlan110100comboenablefiber#interface GigabitEthernet1/0/3 port link-mode bridge port access vlan100comboenablefiber#interface GigabitEthernet1/0/4 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/5 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/6 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/7 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/8 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/9 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/10 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/11 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/12 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/13 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/14 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/15 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/16 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/17 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/18 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/19 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/20 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/21 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/22 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/23 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/24 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/25 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/26 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/27 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/28 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/29 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/30 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/31 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/32 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/33 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/34 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/35 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/36 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/37 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/38 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/39 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/40 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/41 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/42 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/43 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/44 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/45 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/46 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/47 port link-mode bridge comboenablefiber#interface GigabitEthernet1/0/48 port link-mode bridge comboenablefiber#interface M-GigabitEthernet0/0/0#interface Ten-GigabitEthernet1/0/49 port link-mode bridge comboenablefiber#interface Ten-GigabitEthernet1/0/50 port link-mode bridge comboenablefiber#interface Ten-GigabitEthernet1/0/51 port link-mode bridge comboenablefiber#interface Ten-GigabitEthernet1/0/52 port link-mode bridge comboenablefiber#scheduler logfile size16#line class aux user-role network-operator#line class console user-role network-admin#line classttyuser-role network-operator#line class vty user-role network-operator#line aux0user-role network-operator#line con0user-role network-admin#line vty063user-role network-operator#radius scheme system user-name-format without-domain#domain system#domain defaultenablesystem#role name level-0 description Predefined level-0 role#role name level-1 description Predefined level-1 role#role name level-2 description Predefined level-2 role#role name level-3 description Predefined level-3 role#role name level-4 description Predefined level-4 role#role name level-5 description Predefined level-5 role#role name level-6 description Predefined level-6 role#role name level-7 description Predefined level-7 role#role name level-8 description Predefined level-8 role#role name level-9 description Predefined level-9 role#role name level-10 description Predefined level-10 role#role name level-11 description Predefined level-11 role#role name level-12 description Predefined level-12 role#role name level-13 description Predefined level-13 role#role name level-14 description Predefined level-14 role#user-group system#return测试对PC5的192.168.10.0段引流通过防火墙192.168.100.0段走原本路线。PC5跟踪PC6跟踪