实现DiffServ类型的QoS

R1的F0/0与R2的F0/0相连，R2的S2/0与R3的S2/0相连，
R1：F0/0 10.1.1.1/24
R2：F0/0 10.1.1.2/24  S2/0 10.1.2.2/24
R3：S2/0 10.1.2.3/24
全网启用RIPV2

 

初始配置

R1
conf t
int f 0/0
ip ad 10.1.1.1 255.255.255.0
no shut
router rip
ver 2
no au
net 10.0.0.0
end

 

R2
conf t
int f 0/0
ip ad 10.1.1.2 255.255.255.0
no shut
int s2/0
ip ad 10.1.2.2 255.255.255.0
encap f
no arp f
no frame inver
frame map ip 10.1.2.3 203 b
no shut
router rip
ver 2
no au
net 10.0.0.0
end

 

R3
conf t
int s2/0
ip ad 10.1.2.3 255.255.255.0
encap f
no arp f
no frame inver
frame map ip 10.1.2.2 302 b
no shut
router rip
ver 2
no au
net 10.0.0.0
end

 

对R3到R2的流量进行分类，
voice流量设置DSCP值为46，
TACACS session流量设置DSCP值为10
Telnet, SMTP, FTP流量分别设置DSCP值为18，20，22
WEB流量设置DSCP值为26

当流量从R2转发到R1时：
voice流量保证在出现拥塞情况下的带宽为500K
TACACS session的流量占用35%的带宽
Telnet，SMTP，FTP流量占用25%的带宽
WEB流量占用15%的带宽，并被shape为320Kbps
其余的流量使用best-effort方式传输，并限速56Kbps

 

R2
conf t
access-list 100 permit tcp any any eq tacacs
access-list 101 permit tcp any any eq telnet
access-list 102 permit tcp any any eq smtp
access-list 103 permit tcp any any eq ftp
access-list 104 permit tcp any any eq www
access-list 105 permit ip any any
access-list 110 permit udp any any range 20000 21000

 

class-map voice
match access-group 110
class-map match-all tacacs
match access-group 100
class-map match-all telnet
match access-group 101
class-map match-all smtp
match access-group 102
class-map match-al ftp
match access-group 103
class-map match-all http
match access-group 104

policy-map comein
class voice
set ip dscp 46
class tacacs
set ip dscp 10
class telnet
set ip dscp 18
class smtp
set ip dscp 20
class ftp
set ip dscp 22

int s2/0
service-policy input comein
exit

 

 

class-map VOICE
match ip dscp 46
class-map GOLD_CLASS
match ip dscp 10 12 14
class-map SILVER_CLASS
match ip dscp 18 20 22
class-map BRONZE_CLASS
match ip dscp 26 28 30
class-map best-effort
match access-group 105

policy-map goout
class VOICE
priority 500
class GOLD_CLASS
bandwidth percent 35
class SILVER_CLASS
bandwidth percent 25
class BRONZE_CLASS
bandwidth percent 15
shape average 320000
class best-effort
police 56000 conform-action set-dscp-transmit 0

int f0/0
service-policy output goout
end

 

本文出自 “穿过地狱去看海” 博客，谢绝转载！