热门标签 | HotTags
当前位置:  开发笔记 > 编程语言 > 正文

华为交换机常见QoS操作

配置接口限速在接口视图下执行命令qoslrinboundcircir-value[cbscbs-value]在接口视图下执行命令qoslroutboundcircir-value[
  1. 配置接口限速
    在接口视图下执行命令qos lr inbound cir cir-value [ cbs cbs-value ]
    在接口视图下执行命令qos lr outbound cir cir-value [ cbs cbs-value ]
  2. 使用流策略进行限速
    (1)根据IP地址进行限速
    [HUAWEI] acl 2000
    [HUAWEI-acl-basic-2000] rule permit source 192.168.1.10 0.0.0.0
    [HUAWEI] traffic classifier c1
    [HUAWEI-classifier-c1] if-match acl 2000
    [HUAWEI] traffic behavior b1
    [HUAWEI-behavior-b1] car cir 4096 //带宽限制为4M
    [HUAWEI] traffic policy p1
    [HUAWEI-trafficpolicy-p1] classifier c1 behavior b1
    [HUAWEI-GigabitEthernet0/0/1]traffic-policy p1 inbound
    (2)根据IP地址和协议进行限速
    [HUAWEI] acl 3000
    [HUAWEI-acl-adv-3000] rule permit tcp destination-port eq 80 source 192.168.1.0 0.0.0.255
    [HUAWEI] traffic classifier c1
    [HUAWEI-classifier-c1] if-match acl 3000
    [HUAWEI] traffic behavior b1
    [HUAWEI-behavior-b1] car cir 10240 //限速10M
    [HUAWEI] traffic policy p1
    [HUAWEI-trafficpolicy-p1] classifier c1 behavior b1
    [HUAWEI-GigabitEthernet0/0/1] traffic-policy p1 inbound
  3. 使用流策略对报文进行过滤
    (1)禁止指定主机访问网络
    [HUAWEI] acl 2000
    [HUAWEI-acl-basic-2000] rule deny source 192.168.1.10 0.0.0.0
    [HUAWEI] traffic classifier c1
    [HUAWEI-classifier-c1] if-match acl 2000
    [HUAWEI] traffic behavior b1
    [HUAWEI-behavior-b1] deny
    [HUAWEI] traffic policy p1
    [HUAWEI-trafficpolicy-p1]classifier c1 behavior b1
    [HUAWEI] interface gigabitethernet 0/0/1
    [HUAWEI-GigabitEthernet0/0/1]traffic-policy p1 inbound
    (2)过滤指定应用协议报文
    [HUAWEI] acl 3000
    [HUAWEI-acl-adv-3000]rule deny tcp destination-port eq 25
    [HUAWEI-acl-adv-3000]rule deny tcp destination-port eq 110
    [HUAWEI-acl-adv-3000]rule deny tcp destination-port eq 80
    [HUAWEI] traffic classifier c1
    [HUAWEI-classifier-c1] if-match acl 3000
    [HUAWEI] traffic behavior b1
    [HUAWEI-behavior-b1] deny
    [HUAWEI] traffic policy p1
    [HUAWEI-trafficpolicy-p1] classifier c1 behavior b1
    [HUAWEI-GigabitEthernet0/0/1]traffic-policy p1 inbound
  4. 使用流策略配置流量统计
    (1)配置指定主机的统计信息
    [HUAWEI] acl 4000
    [HUAWEI-acl-L2-4000] rule permit source-mac 0000-0000-0003 ffff-ffff-ffff
    [HUAWEI] traffic classifier c1
    [HUAWEI-classifier-c1] if-match acl 4000
    [HUAWEI] traffic behavior b1
    [HUAWEI-behavior-b1] statistic enable
    [HUAWEI] traffic policy p1
    [HUAWEI-trafficpolicy-p1] classifier c1 behavior b1
    [HUAWEI-GigabitEthernet0/0/1]traffic-policy p1 inbound
    [HUAWEI-GigabitEthernet0/0/1]traffic-policy p1 outbound
    (2)配置对ICMP报文进行统计
    [HUAWEI] acl 3000
    [HUAWEI-acl-adv-3000]rule 0 permit icmp source 192.168.1.1 0 destination 192.168.2.1 0
    [HUAWEI-acl-adv-3000]rule 5 permit icmp source 192.168.2.1 0 destination 192.168.1.1 0
    [HUAWEI] traffic classifier c1
    [HUAWEI-classifier-c1] if-match acl 3000
    [HUAWEI] traffic behavior b1
    [HUAWEI-behavior-b1] statistic enable
    [HUAWEI] traffic policy p1
    [HUAWEI-trafficpolicy-p1] classifier c1 behavior b1
    [HUAWEI-GigabitEthernet0/0/1] traffic-policy p1 inbound
    [HUAWEI-GigabitEthernet0/0/1] traffic-policy p1 outbound
    (3)配置对ARP报文进行统计
    [HUAWEI] traffic classifier arp-request
    [HUAWEI-classifier-arp-request]if-match l2-protocol arp
    [HUAWEI-classifier-arp-request]if-match source-mac 1111-1111-1111
    [HUAWEI-classifier-arp-request]if-match destination-mac ffff-ffff-ffff
    [HUAWEI] traffic classifier arp-reply
    [HUAWEI-classifier-arp-reply]if-match l2-protocol arp
    [HUAWEI-classifier-arp-reply]if-match source-mac 2222-2222-2222
    [HUAWEI-classifier-arp-reply]if-match destination-mac 1111-1111-1111
    [HUAWEI] traffic behavior b1
    [HUAWEI-behavior-b1] statistic enable
    [HUAWEI] traffic policy arp-request
    [HUAWEI-trafficpolicy-arp-request]classifier arp-request behavior b1
    [HUAWEI] traffic policy arp-reply
    [HUAWEI-trafficpolicy-arp-reply]classifier arp-reply behavior b1
    [HUAWEI-GigabitEthernet0/0/1] traffic-policy arp-request inbound
    [HUAWEI-GigabitEthernet0/0/1] traffic-policy arp-reply outbound
    (4)查看报文统计信息
    display traffic policy statistics interface gigabitethernet 0/0/1 inbound verbose rule-base //显示全局入方向应用流策略后基于匹配规则的报文统计信息

推荐阅读
author-avatar
博瑞装饰王龙骏
这个家伙很懒,什么也没留下!
PHP1.CN | 中国最专业的PHP中文社区 | DevBox开发工具箱 | json解析格式化 |PHP资讯 | PHP教程 | 数据库技术 | 服务器技术 | 前端开发技术 | PHP框架 | 开发工具 | 在线工具
Copyright © 1998 - 2020 PHP1.CN. All Rights Reserved | 京公网安备 11010802041100号 | 京ICP备19059560号-4 | PHP1.CN 第一PHP社区 版权所有