Quidway AR 28-11 限速设置

方法一（效果一般）：QOS IP流量控制（限速实际值会比配置理论值偏低）
一、步骤：
1、配置NAT
2、设置限速IP
3、配置内网口和外网口，把NAT设置添加到外网口，把QOS限速设置添加到内网口，限速30Kbps
4、设置默认路由 
5、保存配置

二、配置：
<Quidway>sys
[Quidway]acl number 2000
[Quidway-acl-basic-2000]rule 0 permit source 172.16.10.0 0.0.0.255
[Quidway-acl-basic-2000]q        
[Quidway]nat address-group 0 202.99.99.100 202.99.99.100
[Quidway]acl number 2100
[Quidway-acl-basic-2100]rule 0 permit source 172.16.10.1 0
[Quidway-acl-basic-2100]q
[Quidway]int e0/0
[Quidway-Ethernet0/0]ip add 202.99.99.100 255.255.255.248
[Quidway-Ethernet0/0]nat outbound 2000 address-group 0
[Quidway-Ethernet0/0]q
[Quidway]int e0/1
[Quidway-Ethernet0/1]ip add 172.16.10.254 255.255.255.0
[Quidway-Ethernet0/1]qos car inbound acl 2100 cir 30000 cbs 15000 ebs 0 green pass red discard
[Quidway-Ethernet0/1]qos car outbound acl 2100 cir 30000 cbs 15000 ebs 0 green pass red discard
[Quidway-Ethernet0/1]q
[Quidway]ip route-static 0.0.0.0 0.0.0.0 202.99.99.99
[Quidway]dis cur
#
 sysname Quidway
#
 cpu-usage cycle 1min
#
 nat address-group 0 202.99.99.100 202.99.99.100
#
radius scheme system
#
domain system
#
local-user admin
 password cipher .]@USE=B,53Q=^Q`MAF4<1!!
 service-type telnet terminal
 level 3
 service-type ftp
#
acl number 2000
 rule 0 permit source 172.16.10.0 0.0.0.255
acl number 2100
 rule 0 permit source 172.16.10.1 0
#
interface Aux0
 async mode flow
#                                         
interface Ethernet0/0
 ip address 202.99.99.100 255.255.255.248
 nat outbound 2100 address-group 0
#
interface Ethernet0/1
 ip address 172.16.10.254 255.255.255.0
 qos car inbound acl 2100 cir 30000 cbs 15000 ebs 0 green pass red discard
 qos car outbound acl 2100 cir 30000 cbs 150000 ebs 0 green pass red discard
#
interface Serial0/0
 clock DTECLK1
 link-protocol ppp
 ip address dhcp-alloc
#
interface NULL0
#
 FTP server enable
#
 ip route-static 0.0.0.0 0.0.0.0 202.99.99.99 preference 60
#
user-interface con 0
user-interface aux 0
user-interface vty 0 4
 authentication-mode scheme               
#
return
[Quidway]q
<Quidway>save
The configuration will be written to the device.
Are you sure?[Y/N]y
Now saving current configuration to the device.
Saving configuration flash:/vrpcfg.cfg. Please wait...
...............
Current configuration has been saved to the device successfully.


方法二（效果好）：QOS  流分类控制（限速实际值与配置理论值相等）
一、步骤
1、配置NAT，配置内外网接口地址：制定内网ACL和公网地址池并将策略应用到公网接口
2、配置默认路由，使能够连接外网
3、配置分类流策略，制定ACL指明限制IP----->配置分类流，使与ACL匹配----->配置分类流控制行为，限速30Kbps
4、配置QOS策略，应用分类流策略
5、在内网端口应用QOS策略
6、保存配置。

二、配置
<Quidway>sys
[Quidway]acl number 2000
[Quidway-acl-basic-2000]rule 0 permit source 172.16.10.0 0.0.0.255
[Quidway-acl-basic-2000]q
[Quidway]nat address-group 0 202.99.99.100 202.99.99.100
[Quidway]int e0/0
[Quidway-Ethernet0/0]ip add 202.99.99.100 255.255.255.248
[Quidway-Ethernet0/0]nat outbound 2000 address-group 0
[Quidway-Ethernet0/0]q
[Quidway]int e0/1
[Quidway-Ethernet0/1]ip add 172.16.10.254 255.255.255.0 
[Quidway-Ethernet0/1]q
[Quidway]ip route-static 0.0.0.0 0.0.0.0 202.99.99.99
[Quidway]acl number 3000
[Quidway-acl-adv-3000]rule 0 permit ip source 172.16.10.1 0
[Quidway-acl-adv-3000]q
[Quidway]traffic classifier 1 operator and
[Quidway-classifier-1]if-match acl 3000
[Quidway-classifier-1]q
[Quidway]traffic behavior 2
[Quidway-behavior-2]car cir 30000 cbs 15000 ebs 0 green pass red discard 
[Quidway-behavior-2]q
[Quidway]qos policy fenleiliu
[Quidway-qospolicy-fenleiliu]classifier 1 behavior 2
[Quidway-qospolicy-fenleiliu]q
[Quidway]int e0/1
[Quidway-Ethernet0/1]qos apply policy fenleiliu inbound     
[Quidway-Ethernet0/1]qos apply policy fenleiliu outbound
[Quidway-Ethernet0/1]q
[Quidway]dis cur
#
 sysname Quidway
#
 cpu-usage cycle 1min
#
 nat address-group 0 202.99.99.100 202.99.99.100
#
radius scheme system
#
domain system
#
local-user admin
 password cipher .]@USE=B,53Q=^Q`MAF4<1!!
 service-type telnet terminal
 level 3
 service-type ftp
#
traffic classifier 1 operator and
 if-match acl 3000
#
traffic behavior 1
traffic behavior 2
 car cir 30000 cbs 15000 ebs 0 green pass red discard
#
qos policy fenleiliu                      
 classifier 1 behavior 2
#
acl number 2000
 rule 0 permit source 172.16.10.0 0.0.0.255
#
acl number 3000
 rule 0 permit ip source 172.16.10.1 0
#
interface Aux0
 async mode flow
#
interface Ethernet0/0
 ip address 202.99.99.100 255.255.255.248
 nat outbound 2000 address-group 0
#
interface Ethernet0/1
 ip address 172.16.10.254 255.255.255.0
 qos apply policy fenleiliu inbound
 qos apply policy fenleiliu outbound
#
interface Serial0/0
 clock DTECLK1
 link-protocol ppp
 ip address dhcp-alloc                    
#
interface NULL0
#
 FTP server enable
#
 ip route-static 0.0.0.0 0.0.0.0 202.99.99.99 preference 60
#
user-interface con 0
user-interface aux 0
user-interface vty 0 4
 authentication-mode scheme
#
return
[Quidway]q
<Quidway>save
The configuration will be written to the device.
Are you sure?[Y/N]y
Now saving current configuration to the device.
Saving configuration flash:/vrpcfg.cfg. Please wait...
...............
Current configuration has been saved to the device successfully.
<Quidway>