FW策略路由

要實現172.16.10.0網段的流量從88.88.88.1出，而172.16.20.0網段的流量從99.99.99.1出，可以通過配置策略路由來實現。以下是配置的關鍵步驟：

1. **創建訪問控製列表（ACL）**：定義需要匹配的源IP地址範圍。
```cli
[Device] acl advanced 3000
[Device-acl-ipv4-adv-3000] rule permit ip source 172.16.10.0 0.0.0.255
[Device-acl-ipv4-adv-3000] quit
[Device] acl advanced 3001
[Device-acl-ipv4-adv-3001] rule permit ip source 172.16.20.0 0.0.0.255
[Device-acl-ipv4-adv-3001] quit
```

2. **創建策略路由節點**：設置下一跳地址。
```cli
[Device] policy-based-route 1 permit node 1
[Device-pbr-1-1] if-match acl 3000
[Device-pbr-1-1] apply next-hop 88.88.88.1
[Device-pbr-1-1] quit
[Device] policy-based-route 1 permit node 2
[Device-pbr-1-2] if-match acl 3001
[Device-pbr-1-2] apply next-hop 99.99.99.1
[Device-pbr-1-2] quit
```

3. **應用策略路由**：在接口上應用策略路由。
```cli
[Device] interface GigabitEthernet0/0/1
[Device-GigabitEthernet0/0/1] ip policy-based-route 1
[Device-GigabitEthernet0/0/1] quit
```

4. **驗證配置**：使用`display ip policy-based-route interface GigabitEthernet0/0/1`命令檢查策略路由是否正確應用。

以上配置確保了172.16.10.0和172.16.20.0網段的流量分別從88.88.88.1和99.99.99.1出。