//策略路由
1、ACL
set access-list extended 1 src-ip 192.168.2.0/24 dst-ip 192.168.10.0/24 entry 1
2、match-group
set match-group name VPN
set match-group VPN ext-acl 1 match-entry 1
3、action
set action-group name VPN
set action-group VPN next-interface tunnel.1 action-entry 1
4、PBR调用match-group和action
set pbr policy name VPN
set pbr policy VPN match-group VPN action-group VPN 1

赞。。。。。。。。。