Juniper-SRX_QOS配置

JUNIPER SRX650 QOS配置一、 实验拓扑二、 配置步骤1.配置接口1 配置接口IP并划分区域set interfaces ge-0/0/1 unit 0 family inet address 1.1.1.1/24set security zones security-zone trust interfaces ge-0/0/1.0set interfaces ge-0/0/2 unit 0 family inet address 2.2.2.2/24set security zones security-zone trust interfaces ge-0/0/2.0set interfaces ge-0/0/3 unit 0 family inet address 3.3.3.3/24set security zones security-zone untrust interfaces ge-0/0/3.02配置策略set security policies from-zone trust to-zone untrust policy wayho match source-address anyset security policies from-zone trust to-zone untrust policy wayho match destination-address anyset security policies from-zone trust to-zone untrust policy wayho match application allset security policies from-zone trust to-zone untrust policy wayho then permit2.配置voip 应用IP地址为快速转发模式 set firewall family inet filter Suntak term voip from source-address 1.1.1.2/32 set firewall family inet filter Suntak term voip then forwarding-class expedited-forwarding set firewall family inet filter Suntak term voip then accept 3.配置server 应用IP地址为数据转发保证set firewall family inet filter Suntak term server from source-address 2.2.2.3/32set firewall family inet filter Suntak term server then forwarding-class assured-forwardingset firewall family inet filter Suntak term server then accept4.配置其他的应用IP为尽最大能力转发set firewall family inet filter Suntak term any then forwarding-class best-effortset firewall family inet filter Suntak term any then accept5.定义流量控制1 voip 控制带宽为1M,突发最大带宽为1.1Mset firewall policer Voip_1m if-exceeding bandwidth-limit 1gset firewall policer Voip_1m if-exceeding burst-size-limit 100kset firewall policer Voip_1m then discard2 sever 控制带宽为2M,突发最大带宽为2.1Mset firewall policer Server-2m if-exceeding bandwidth-limit 2mset firewall policer Server-2m if-exceeding burst-size-limit 100kset firewall policer Server-2m then discard3其他 控制带宽为1M,突发最大带宽为1.1Mset firewall policer Other-1m if-exceeding bandwidth-limit 1mset firewall policer Other-1m if-exceeding burst-size-limit 100kset firewall policer Other-1m then discard4将策略应用到网络 set firewall family inet filter Suntak term voip then policer Voip_1m set firewall family inet filter Suntak term server then policer Server-2m set firewall family inet filter Suntak term any then policer Other-1m 6.将策略应用到接口方法1：应用在外口set interfaces ge-0/0/3 unit 0 family inet filter output Suntak 方法2：应用在内口set interfaces ge-0/0/1 unit 0 family inet filter input Suntak set interfaces ge-0/0/2 unit 0 family inet filter in