三层交换的限速.doc

Cisco三层交换的限速拓扑:pc1-default vlan 1-3550-24-emi-f0/24-pc2配置:pc1: 22vlan 1:22 f0/24: pc2:0 交换机的情况:Switch#sh runBuilding configuration.Current configuration : 1835 bytes!version 12.1no service padservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname Switch!ip subnet-zeroip routingmls qos!class-map match-all 64kmatch access-group 110!policy-map yikaiclass 64kpolice 512000 32000 exceed-action drop!spanning-tree extend system-id!interface FastEthernet0/1switchport mode accessno ip addressservice-policy input yikai!interface FastEthernet0/2no ip address!interface FastEthernet0/3no ip address!interface FastEthernet0/4no ip address!interface FastEthernet0/5no ip address!interface FastEthernet0/6no ip address!interface FastEthernet0/7no ip address!interface FastEthernet0/8no ip address!interface FastEthernet0/9no ip address!interface FastEthernet0/10no ip address!interface FastEthernet0/11no ip address!interface FastEthernet0/12no ip address!interface FastEthernet0/13no ip address!interface FastEthernet0/14no ip address!interface FastEthernet0/15no ip address!interface FastEthernet0/16no ip address!interface FastEthernet0/17no ip address!interface FastEthernet0/18no ip address!interface FastEthernet0/19no ip address!interface FastEthernet0/20no ip address!interface FastEthernet0/21no ip address!interface FastEthernet0/22no ip address!interface FastEthernet0/23no ip address!interface FastEthernet0/24no switchportip address service-policy input yikai!interface GigabitEthernet0/1no ip address!interface GigabitEthernet0/2no ip address!interface Vlan1ip address 22 !ip classlessip http server!access-list 110 permit ip host 0 anyaccess-list 110 permit ip any any!line con 0line vty 0 4loginline vty 5 15login!end此时在客户机pc2从pc1上拷贝文件,大约40M时间大约:12分钟Switch#sh mls qos interface f 0/1 staFastEthernet0/1Ingressdscp: incoming no_change classified policed dropped (in bytes)Others: 385021895 385021895 0 0 12197478Egressdscp: incoming no_change classified policed dropped (in bytes)Others: 9553871 n/a n/a 0 0Switch#sh mls qos interface f 0/1 staFastEthernet0/1Ingressdscp: incoming no_change classified policed dropped (in bytes)Others: 385369437 385369437 0 0 12259540Egressdscp: incoming no_change classified policed dropped (in bytes)Others: 9562103 n/a n/a 0 0从中发现有大量的dropped,且增加很快.如果在interface f 0/1no service-map input yikai则没有应用policy-map yikai ,此时同样的文件传速速度很快,大约只需要3分钟.华为交换机的限速支持端口限速的，针对以太网端口的入方向用traffic-limit命令，粒度为8kbps.出方向可用流量整形功能，traffic-shape命令。可以支持基于二层MAC的ACL，三层的IPACL或是TCP，UDP端口号的ACL。例如：对端口Ethernet1/1 接收的报文速率限制为200kbps，发送的报文速率限制为1300kpbs，突发尺寸为12kbytes。该端口属于VLAN2。QoS 配置举例配置步骤(1) 定义端口Ethernet1/1 的流量# 创建二层访问控制列表ACL 4000。Quidway acl number 4000# 定义Ethernet1/1 接收的流量的规则。Quidway-acl-link-4000 rule 1 permit ingress any egress any(2) 对Ethernet1/1 接收的流量进行速率限制# 接收的流量速率限制为200kbps。Quidway-vlan2 traffic-limit inbound link-group 4000 rule 1 200 25000 25000Quidway