R1属于AS10,R2属于AS20,R3属于AS30
R1的L0(1.1.1.1/24),发布到BGP中
在R2上使用QPPB来给BGP中学到的路由设置QOS属性,使得从R3发到1.1.1.0/24网段的流量被CAR限速
R1
conf t
int l 0
ip ad 1.1.1.1 255.255.255.0
int f 0/0
ip ad 10.1.1.1 255.255.255.0
no shut
router rip
ver 2
no au
net 10.0.0.0
router bgp 10
no au
no sy
nei 10.1.1.2 remote-as 20
net 1.1.1.0 mask 255.255.255.0
end
 
 
R2
conf t
int f 0/0
ip ad 10.1.1.2 255.255.255.0
no shut
int s 2/0
ip ad 10.1.2.2 255.255.255.0
clock rate 64000
no shut
router rip
ver 2
net 10.0.0.0
router bgp 20
no au
no sy
nei 10.1.1.1 remote-as 10
nei 10.1.2.3 remote-as 30
exit
access-list 1 permit 1.1.1.0
route-map QPPB permit 10
match ip ad 1
set ip qos-group 2
exit
router bgp 20
table-map QPPB
int s2/0
bgp-policy destination ip-qos-map
rate-limit input qos-group 2 5000000 4000 8000 conform-action transmit exceed-action drop
end
 
 
R3
conf t
int s2/0
ip ad 10.1.2.3 255.255.255.0
no shut
router rip
ver 2
no au
net 10.0.0.0
router bgp 30
no au
no sy
nei 10.1.2.2 remote-as 20
end
 
 
校验
R2#sh int s2/0 rate-limit
Serial2/0
  Input
    matches: qos-group 2
      params:  5000000 bps, 4000 limit, 8000 extended limit
      conformed 0 packets, 0 bytes; action: transmit
      exceeded 0 packets, 0 bytes; action: drop
      last packet: 2379508ms ago, current burst: 0 bytes
      last cleared 00:00:24 ago, conformed 0 bps, exceeded 0 bps
 
R2#sh ip int s 2/0
Serial2/0 is up, line protocol is up
  。。。。。。。。。。。。。。  
  BGP Policy Mapping is enabled (output ip-qos-map)
 
QPPB的配置步骤参考
1,基于community list的配置
conf t
route-map <name> [ permit | deny [seq]]
match community-list <num>
set ip precedence [<num> | <name>]
router bgp <as>
table-map <route-map-name>
exit
ip community-list <num> { permit | deny} <community number>
int <id>
bgp-policy {soutce | destination} ip-prec-map
 
2,基于AS path的配置
conf t
route-map <name> [permit | deny [seq] ]
match as-path <path-list-number>
set ip precedence <num>
router bgp <as>
table-map <route-map-name>
exit
ip as-path access-list <num> {permit | deny} <as-regular-expression>
int <id>
bgp-policy {source | destination} ip-prec-map
 
3,基于ACL的配置
conf t
route-map <name> [ permit | deny [<seq>] ]
match ip address <acl>
set ip precedence <num>
router bgp <as>
table-map <route-map-name>
exit
access-list <num> {permit | deny} <source-ip>
int <id>
bgp-policy {source | destination} ip-prec-map