如图所示:某公司通过专线连接分支机构(图中左侧网络)与总部(图中右侧网络),专线中传输的流量主要有三类:FTP流量、业务软件流量、IP语音流量。由于专线带宽资源有限,在总部的边缘设备SwitchB上已经配置了相应的流量监管功能:
l IP语音流量的承诺速率为1024Kbps
l 业务软件流量的承诺速率为768Kbps
l FTP流量的承诺速率为512Kbps
为配合总部的流量监管,要求在分支机构的边缘设备SwitchA上配置流量整形功能,对各类流量中突发的超出部分进行缓存,避免数据丢失。
同时,由于整个专线的速率为2Mbps,因此要求在SwitchA上配置发往专线的所有数据总速率不得超过2Mbps。
配置:
1.重标记功能配置
SwitchA:
创建ACL2000 匹配IP电话流量
acl number 3000
rule 0 permit source 192.168.3.0 0.0.0.255
创建流voice,匹配acl 2000
traffic classifier voice
if-match acl 2000
创建ACL 2001 匹配业务软件发送的流量
acl number 2001
rule 0 permit source 192.168.2.0 0.0.0.255
创建流service ,匹配acl2001
traffic classifier service
if-match acl 2001
创建acl 3000 匹配FTP流量
acl number 3000
rule 0 permit tcp destination-port eq 20 source 192.168.1.0 0.0.0.255
创建流FTP,匹配acl 3000
traffic classifier ftp
if-match acl 3000
创建3个流行为,分别标记本地优先级6,4,2
创建流行为voice,优先级6
traffic behavior voice
remark local-precedence 6
创建流行为service,优先级4
traffic behavior service
remark local-precedence 4
创建流行为ftp,优先级2
traffic behavior ftp
remark local-precedence 2
创建QoS策略Shaping,将上面三组流和流行为进行关联
qos policy shaping
classifier voice behavior voice
classifier service behavior service
classifier ftp behavior ftp
将QoS策略应用到G1/0/2端口的入方向
int G1/0/2
qos apply policy shaping inbound
2.流量整形配置
SwitchA:
语音报文 cir 1024Kbps
int gi 1/0/2
qos gts queue 6 cir 1024 cbs 65536
业务报文 cir 768Kbps
int gi 1/0/2
qos gte queue 4 cir 768 cbs 4912
ftp报文 cir 512Kbps
int gi 1/0/2
qos gts queue 2 cir 512 cbs 32768
3.端口限速
SwitchA
int gi 1/0/1
qos lr outbond cir 2048 cbs 131072
完整配置
#
acl number 2000
rule 0 permit source 192.168.3.0 0.0.0.255
acl number 2001
rule 0 permit source 192.168.2.0 0.0.0.255
#
acl number 3000
rule 0 permit tcp source 192.168.1.0 0.0.0.255 destination-port eq ftp-data
#
traffic classifier service operator and
if-match acl 2001
traffic classifier ftp operator and
if-match acl 3000
traffic classifier voice operator and
if-match acl 2000
#
traffic behavior service
remark local-precedence 4
traffic behavior ftp
remark local-precedence 2
traffic behavior 2
traffic behavior voice
remark local-precedence 6
#
qos policy shaping
classifier voice behavior voice
classifier service behavior service
classifier ftp behavior ftp
#
interface GigabitEthernet1/0/1
qos gts queue 6 cir 1024 cbs 65536
qos gts queue 4 cir 768 cbs 49152
qos gts queue 2 cir 512 cbs 32768
#
interface GigabitEthernet1/0/2
qos lr outbound cir 2048 cbs 131072
qos apply policy shaping inbound