Cisco路由器流量控制实例

《Cisco路由器流量控制实例》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、网上关于Qos资料太多了，但很多不实用，讲了一大堆理论，下面是我们一子公司的路由器上的配置，供大家参考。其实，只要理解了NBAR、CBWFQ、WRED等意义，流量控制就可以随心配置。说明：一家子公司使用2M专线上网，内部网段为192.168.23.0/24（普通员工）和192.168.24.0/24（总经办所在的VLAN），其中路由器IP地址为：192.168.23.1，内部cisco3560交换机IP为：192.168.23.254。现需要作流量控制，使总经办的流量比较优先，并优先传送一些声音与视频及网管流

2、量。其它的服务如：smtp、pop3及ftp等为低优先级，并禁止bt下载等。配置如下：Currentconfiguration:3590bytes!!version12.3servicetimestampsdebugdatetimeservicetimestampslogdatetimeservicepassword-encryption!hostnamexxxxxx!enablesecret5$44adf#dfdfj090$on!clocktimezoneChina8ipsubnet-zeronoipsou

3、rce-routeipcef!!ipname-server192.168.23.2ipname-serverx.x.x.x!noipbootpserver!ipnbarpdlmflash:bittorrent.pdlmclass-mapmatch-anypremium_classdescriptionForpremiummatchprotocolhttpmatchprotocolicmpmatchprotocolnetshowmatchprotocolpcanywherematchprotocolrealau

4、diomatchprotocolsecure-httpmatchaccess-group111注：以上有省略，嘿嘿!class-mapmatch-anynormal_calssdescriptionFornormalmatchprotocolftpmatchprotocolimapmatchprotocolpop3matchprotocolsmtpmatchaccess-group110class-mapmatch-anybt_downloaddescriptionFordropmatchprotocolbi

5、ttorrent!!policy-mapqos_policy_mapclasspremium_classbandwidthpercent50random-detectrandom-detectexponential-weighting-constant4policecir2000000bc10000be10000conform-actiontransmitexceed-actiontransmitclassnormal_calssbandwidthpercent25random-detectrandom-de

6、tectexponential-weighting-constant4policecir2000000bc2000be2000conform-actiontransmitexceed-actiondropclassbt_downloaddrop!!!!interfaceFastEthernet0/0ipaddress192.168.23.1255.255.255.0ipverifyunicastreverse-pathipnatinsideiproute-cachesame-interfaceiproute-

7、cachepolicyduplexautospeedautonocdpenable!interfaceSerial0/0bandwidth2048ipaddress210.88.44.x255.255.255.252ipverifyunicastreverse-pathnoipproxy-arpipnatoutsiderate-limitinput20000002000020000conform-actiontransmitexceed-actiondropiproute-cachepolicyservice

8、-policyoutputqos_policy_mapnocdpenable!ipnatinsidesourcelist10interfaceSerial0/0overloadipclasslessiproute0.0.0.00.0.0.0210.88.44.yiproute192.168.24.0255.255.255.0192.168.23.254noiphttpserver!!access-l