QoS实验配置详解

QoS---CQ （定制队列） 学习CQ（定制队列）的配置；本实验首先用ACL定义一些流量。然后再将这些流量进行先后排队，最后将排好队的流量策略应用到接口上 1 过滤流量 R2(config)#access-list 101 permit ospf any any R2(config)#access-list 101 permit eigrp any any R2(config)#access-list 102 permit ip any 192.168.0.1 0.0.0.0 R2(config)#access-list 102 permit ip host 192.168.0.1 any   R2(config)#access-list 103 permit tcp any host 192.168.0.1 eq 23 R2(config)#access-list 103 permit tcp any host 192.168.0.1 eq 21 R2(config)#access-list 103 permit tcp any host 192.168.0.1 eq 20 R2(config)#access-list 104 permit udp any lt 200 any lt 200 R2(config)#access-list 104 permit tcp any range 135 139 any range 135 139 R2(config)#access-list 105 permit udp any range 16333 35252 any range 16333 35252   2 队列排序 R2(config)#queue-list 1 protocol ip 1 list 101  // 将与List101匹配的流量排在第一位 R2(config)#queue-list 1 protocol ip 2 list 102 R2(config)#queue-list 1 protocol ip 3 list 103 R2(config)#queue-list 1 protocol ip 4 list 104 R2(config)#queue-list 1 protocol ip 5 list 105 3 将CQ应用到接口 R2(config)#int s0 R2(config-if)#custom-queue-list 1             // 将这个定制好的队列应用到接口上 4 检验 R2#sh queueing                                             // 查看队列 Current fair queue configuration:   Interface           Discard    Dynamic  Reserved  Link    Priority                       threshold  queues   queues    queues  queues   BRI0                64         16       0         8       1      BRI0:1              64         16       0         8       1      BRI0:2              64         16       0         8       1      Serial1             64         256      0         8       1    Current DLCI priority queue configuration: Current priority queue configuration: Current custom queue configuration: List   Queue  Args 1      1      protocol ip          list 101 1      2      protocol ip          list 102 1      3      protocol ip          list 103 1      4      protocol ip          list 104 1      5      protocol ip          list 105   QoS---PQ1 1 将udp协议的16333端口至35252端口都设为低优先级 2 将rip设为高优先级   R1(config)#priority-list 1 protocol ip low list 100           // 建立优先级列表1，将与access-list 100匹配的流量设为低优先级 R1(config)#access-list 100 permit udp any range 16333 35252 any range 16333 35252   //range 命令是设定一个端口范围 R1(config)#priority-list 1 protocol ip high udp rip R1(config)#int s0 R1(config-if)#priority-group 1                                // 将优先级列表1应用到接口S0上   2 验证 R1#sh queueing Current fair queue configuration:   Interface           Discard     Dynamic      Reserved                       threshold   queue count  queue count   Serial1             64          256          0    Current priority queue configuration: List   Queue  Args 1      low    protocol ip          list-100 1      high   protocol ip          udp port rip   R1#sh ip int s0 Serial0 is administratively down, line protocol is down   Internet protocol processing disabled R1#sh int s0 Serial0 is administratively down, line protocol is down   Hardware is HD64570   MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,      reliability 255/255, txload 1/255, rxload 1/255   Encapsulation HDLC, loopback not set   Keepalive set (10 sec)   Last input never, output 01:37:44, output hang never   Last clearing of "show interface" counters never   Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 159   Queueing strategy: priority-list 1   Output queue (queue priority: size/max/drops):      high: 0/20/0, medium: 0/40/0, normal: 0/60/159, low: 0/80/0   5 minute input rate 0 bits/sec, 0 packets/sec   5 minute output rate 0 bits/sec, 0 packets/sec      0 packets put, 52588119 bytes, 0 no buffer      Received 0 broadcasts, 0 runts, 0 giants, 0 throttles      0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort      0 packets, 52588444 bytes, 0 underruns      0 output errors, 0 collisions, 2 interface resets      0 output buffer failures, 0 output buffers swapped out      6 carrier transitions      DCD=down  DSR=down  DTR=down  RTS=down  CTS=down   QoS----PQ2 1 将主机192.168.0.1设为最高优先级 2 将192.168.0.0/24网段下的其他主机设为中等优先级 3 将所有http流量设为普通优先级 4 将所有ftp流量设为低优先级 配置如下： R1(config)#priority-list 2 protocol ip high list 2                 // 建立优先级列表2 ，将与access-list 2匹配的流量定为高优先级 R1(config)#access-list 2 permit 192.168.0.1 0.0.0.0 R1(config)#priority-list 2 protocol ip medium list 3 R1(config)#access-list 3 deny 192.168.0.1 0.0.0.0 R1(config)#access-list 3 permit 192.168.0.0 0.0.0.255 R1(config)#priority-list 2 protocol ip normal tcp www R1(config)#priority-list 2 protocol ip low tcp ftp R1(config)#priority-list 2 protocol ip low tcp ftp-data R1(config)# int s1 R1(config-if)# priority-group 2                                         // 在接口S1上应用该优先级列表 R1#sh queueing                                                              // 查看队列 Current fair queue configuration: Current priority queue configuration: List   Queue  Args 2      high   protocol ip              list 2 2      medium protocol ip          list 3 2      normal protocol ip            tcp port www 2      low    protocol ip               tcp port ftp 2      low    protocol ip               tcp port ftp-data   QoS---CBWFQ （基于类分配带宽） CBWFQ （基于类分配带宽）基本配置 实验要求：给上一个实验所定义的3种流量，QQ，SMTP，FTP分配不同的带宽 1 定义流量 （直接调用上一个实验的配置） R4(config)#class-map QQ R4(config-cmap)#match access-group name QQ                   // 匹配一个名为QQ的命名ACL R4(config-cmap)#exi R4(config)#ip access-list extended QQ R4(config-ext-nacl)#permit ip any 61.172.240.0 0.0.0.255 R4(config-ext-nacl)#permit udp any any eq 4000          R4(config-ext-nacl)#permit udp any any eq 8000 R4(config-ext-nacl)#exi R4(config)#class-map smtp R4(config-cmap)#match access-group 100 R4(config-cmap)#exi R4(config)#access-list 100 permit tcp any any eq smtp R4(config)#class-map ftp R4(config-cmap)#match access-group 101 R4(config-cmap)#exi R4(config)#access-list 101 permit tcp any any eq 20 R4(config)#access-list 101 permit tcp any any eq 21 2 定义策略 R4(config)#policy-map CBWFQ R4(config-pmap)#class QQ R4(config-pmap-c)#bandwidth percent 5                       // 为类型为QQ的流量分配百分之五的带宽 R4(config-pmap)#class smtp R4(config-pmap-c)#bandwidth percent 25 R4(config-pmap)#class ftp R4(config-pmap-c)#bandwidth percent 20 R4(config-pmap-c)#exi 3 应用到接口上 R4(config)#int s0 R4(config-if)#service-policy output CBWFQ 4 验证 R4# sh policy-map                                         // 查看策略   Policy Map wy     Class QQ      police cir 10000 bc 1500        conform-action drop        exceed-action drop     Class smtp      police cir 10000 bc 1500        conform-action drop        exceed-action drop     Class ftp      police cir 10000 bc 1500        conform-action drop        exceed-action drop   Policy Map CBWFQ     Class QQ       Bandwidth 5 (%) Max Threshold 64 (packets)     Class smtp       Bandwidth 25 (%) Max Threshold 64 (packets)     Class ftp       Bandwidth 20 (%) Max Threshold 64 (packets)

原文地址 [url]http://wolfsky.cublog.cn/[/url]