三層交換的限速.doc

Cisco三層交換的限速拓撲:pc1-default vlan 1-3550-24-emi-f0/24-pc2配置:pc1: 22vlan 1:22 f0/24: pc2:0 交換機的情況:Switch#sh runBuilding configuration.Current configuration : 1835 bytes!version 12.1no service padservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname Switch!ip subnet-zeroip routingmls qos!class-map match-all 64kmatch access-group 110!policy-map yikaiclass 64kpolice 512000 32000 exceed-action drop!spanning-tree extend system-id!interface FastEthernet0/1switchport mode accessno ip addressservice-policy input yikai!interface FastEthernet0/2no ip address!interface FastEthernet0/3no ip address!interface FastEthernet0/4no ip address!interface FastEthernet0/5no ip address!interface FastEthernet0/6no ip address!interface FastEthernet0/7no ip address!interface FastEthernet0/8no ip address!interface FastEthernet0/9no ip address!interface FastEthernet0/10no ip address!interface FastEthernet0/11no ip address!interface FastEthernet0/12no ip address!interface FastEthernet0/13no ip address!interface FastEthernet0/14no ip address!interface FastEthernet0/15no ip address!interface FastEthernet0/16no ip address!interface FastEthernet0/17no ip address!interface FastEthernet0/18no ip address!interface FastEthernet0/19no ip address!interface FastEthernet0/20no ip address!interface FastEthernet0/21no ip address!interface FastEthernet0/22no ip address!interface FastEthernet0/23no ip address!interface FastEthernet0/24no switchportip address service-policy input yikai!interface GigabitEthernet0/1no ip address!interface GigabitEthernet0/2no ip address!interface Vlan1ip address 22 !ip classlessip http server!access-list 110 permit ip host 0 anyaccess-list 110 permit ip any any!line con 0line vty 0 4loginline vty 5 15login!end此時在客戶機pc2從pc1上拷貝文件,大約40M時間大約:12分鐘Switch#sh mls qos interface f 0/1 staFastEthernet0/1Ingressdscp: incoming no_change classified policed dropped (in bytes)Others: 385021895 385021895 0 0 12197478Egressdscp: incoming no_change classified policed dropped (in bytes)Others: 9553871 n/a n/a 0 0Switch#sh mls qos interface f 0/1 staFastEthernet0/1Ingressdscp: incoming no_change classified policed dropped (in bytes)Others: 385369437 385369437 0 0 12259540Egressdscp: incoming no_change classified policed dropped (in bytes)Others: 9562103 n/a n/a 0 0從中發(fā)現(xiàn)有大量的dropped,且增加很快.如果在interface f 0/1no service-map input yikai則沒有應(yīng)用policy-map yikai ,此時同樣的文件傳速速度很快,大約只需要3分鐘.華為交換機的限速支持端口限速的，針對以太網(wǎng)端口的入方向用traffic-limit命令，粒度為8kbps.出方向可用流量整形功能，traffic-shape命令。可以支持基于二層MAC的ACL，三層的IPACL或是TCP，UDP端口號的ACL。例如：對端口Ethernet1/1 接收的報文速率限制為200kbps，發(fā)送的報文速率限制為1300kpbs，突發(fā)尺寸為12kbytes。該端口屬于VLAN2。QoS 配置舉例配置步驟(1) 定義端口Ethernet1/1 的流量# 創(chuàng)建二層訪問控制列表ACL 4000。Quidway acl number 4000# 定義Ethernet1/1 接收的流量的規(guī)則。Quidway-acl-link-4000 rule 1 permit ingress any egress any(2) 對Ethernet1/1 接收的流量進行速率限制# 接收的流量速率限制為200kbps。Quidway-vlan2 traffic-limit inbound link-group 4000 rule 1 200 25000 25000Quidway