JuniperSRXQOS配置

1、JUNIPER SRX650 QOS配置一、 实验拓扑二、 配置步骤1.配置接口1> 配置接口IP并划分区域set interfaces ge-0/0/1 unit 0 family inetset security zones security-zone trust interfaces ge-0/0/1.0set interfaces ge-0/0/2 unit 0 family inetset security zones security-zone trust interfaces ge-0/0/2.0set interfaces ge-0/0/3 unit 0 family i

2、netset security zones security-zone untrust interfaces ge-0/0/3.02>配置策略set security policies from-zone trust to-zone untrust policy wayho match source-address anyset security policies from-zone trust to-zone untrust policy wayho match destination-address anyset security policies from-zone trust t

3、o-zone untrust policy wayho match application allset security policies from-zone trust to-zone untrust policy wayho then permit2.配置voip 应用IP地址为快速转发模式 set firewall family inet filter Suntak term voip set firewall family inet filter Suntak term voip then forwarding-class expedited-forwarding set firew

4、all family inet filter Suntak term voip then accept 3.配置server 应用IP地址为数据转发保证set firewall family inet filter Suntakset firewall family inet filter Suntak term server then forwarding-class assured-forwardingset firewall family inet filter Suntak term server then accept4.配置其他的应用IP为尽最大能力转发set firewall f

5、amily inet filter Suntak term any then forwarding-class best-effortset firewall family inet filter Suntak term any then accept5.定义流量控制1> voip 控制带宽为1M,突发最大带宽为1.1Mset firewall policer Voip_1m if-exceeding bandwidth-limit 1gset firewall policer Voip_1m if-exceeding burst-size-limit 100kset firewall

6、policer Voip_1m then discard2> sever 控制带宽为2M,突发最大带宽为2.1Mset firewall policer Server-2m if-exceeding bandwidth-limit 2mset firewall policer Server-2m if-exceeding burst-size-limit 100kset firewall policer Server-2m then discard3>其他 控制带宽为1M,突发最大带宽为1.1Mset firewall policer Other-1m if-exceeding b

7、andwidth-limit 1mset firewall policer Other-1m if-exceeding burst-size-limit 100kset firewall policer Other-1m then discard4>将策略应用到网络 set firewall family inet filter Suntak term voip then policer Voip_1m set firewall family inet filter Suntak term server then policer Server-2m set firewall family inet filter Suntak term any then policer Other-1m 6.将策略应用到接口方法1：应用在外口set interfaces ge-0/0/3 unit 0 family inet filter output Suntak 方法2：应用在内口set interfaces ge-0/0/1 unit 0 family inet filter input Suntak set interfaces ge-0/0/2 unit 0 family inet filter input S