将路由 0.0.0.0/0 eth1 172.16.0.254 S 20 1 Root删除;
重新添加新的路由条目:
* 4 100.0.0.0/8 eth1 172.16.0.254 S 20 1 Root
(回应包路由,到达100.0.0.0网段的数据报将交给Eeh1处理,下一跳的地址为交换机到防火墙的级联口)
* 5 172.15.0.0/16 eth1 172.16.0.254 S 20 1 Root
(回应包路由,到达172.15.0.0/16的任一网段的数据将转发到eth1,下一跳地址为交换机端口地址。)
set route 0.0.0.0/0 interface ethernet3 gateway 216.x.x.241
set route 100.100.10.0/8 interface ethernet1 gateway 172.16.101.254
set route 172.15.0.0/16 interface ethernet1 gateway 172.16.101.254
查询路由
yty-> get route
untrust-vr (0 entries)
--------------------------------------------------------------------------------
C - Connected, S - Static, A - Auto-Exported, I - Imported, R - RIP
trust-vr (5 entries)
ID IP-Prefix Interface Gateway P Pref Mtr Vsys
--------------------------------------------------------------------------------
* 3 0.0.0.0/0 eth3 216.X.X.241 S 20 1 Root
* 1 172.16.0.0/24 eth1 0.0.0.0 C 0 0 Root
* 2 216.X.X.240/28 eth3 0.0.0.0 C 0 0 Root
* 4 100.0.0.0/8 eth1 172.16.0.254 S 20 1 Root
* 5 172.15.0.0/16 eth1 172.16.0.254 S 20 1 Root