QOS配置实验(4)

会计考友

三、实验说明
我们在R2的s1/0和s1/1口上配制接口带宽为 16Kbit/s，然后在s1/0即进口上做标记，
; m& B- Y5 G+ o标记为，满足条件打20的标记，超出的打10的标记。
7 K$ V5 S; s7 A+ E! K7 U$ c在s1/1出口上做策略对于打了10标记的流量，做相应的drop
' }. L1 T& V9 F5 F四、配制
基本配制

R1:
interface Serial1/1
ip address 10.1.1.2 255.255.255.0
7 z6 A" h9 |8 ~+ p' K no sh
!
ip route 20.1.1.0 255.255.255.0 10.1.1.1

# g6 m) B, m$ g: g6 ~0 bR2:
access-list 100 permit ip 10.1.1.0 0.0.0.255 20.1.1.0 0.0.0.255
16000为带宽限制，2000为BC，3000为BE

) I* [7 ]6 Y: h& E  H# j1 A! wclass-map in-put
match access-group 100
exit
policy-map in-put
class in-put
   police 16000 2000 3000 conform-action set-dscp-transmit 20 exceed-action set-dscp-transmit 10
exit
class-map out-put
! R9 v! O! ?. D  V5 H对于超出的流量做drop
6 X+ z/ L8 |% T
match ip dscp 10

exit

会计考友

</p>policy-map out-put
4 S5 @; Z* X9 ?: t! w class out-put
2 Q2 {, I% |) I$ @( h5 [   police 8000 1500 3000 conform-action transmit  exceed-action drop
+ |0 A# D0 N% l8 J9 Fexit
int s1/0
/ r8 V6 U9 u+ q4 ~- y9 S9 ~ bandwidth 16
, i# d4 S6 Y! Y$ n" A# I5 `7 t ip address 10.1.1.1 255.255.255.0
clock rate 64000
( S4 {6 y; h# N1 d" J/ \* \+ _4 M service-policy input in-put
no sh
!
# k6 j! F. z& b7 Einterface Serial1/1
bandwidth 16
ip address 20.1.1.1 255.255.255.0
clock rate 64000
service-policy output out-put
no sh
!
) |3 x) H& Y  t# g8 `! z. ^R3:

interface Serial1/0
ip address 20.1.1.2 255.255.255.0
& }, J* S0 z) ~ no sh
!
ip route 10.1.1.0 255.255.255.0 20.1.1.1
# W8 L1 g, E, }) ^- a" W  `: w$ Z!
- E* W& L1 U  E; K/ T! C
2 z2 r- E/ _0 ?, U( l+ G5 ~验证
" q6 x4 J  l6 N& x1 W8 A/ {
8 S. s1 ^! _2 ?' B/ D' n& pR1#ping ip
Target IP address: 20.1.1.2
Repeat count [5]: 10
Datagram size [100]: 2000
Timeout in seconds [2]:
Extended commands [n]:
& a/ I* g0 z  v8 O; vSweep range of sizes [n]:
& b# v; b% o3 I- W
1 }1 g2 n- ^- VType escape sequence to abort.

会计考友

</p>Sending 10, 2000-byte ICMP Echos to 20.1.1.2, timeout is 2 seconds:
. m$ _' F$ F( \!.!..!!.!!
Success rate is 60 percent (6/10), round-trip min/avg/max = 204/457/596 ms
: G; B; P4 {# \$ o


$ Q$ T7 [, E; `4 g0 W7 @R2#show policy-map
8 H% h) x- V6 |2 k4 \+ G  Policy Map out-put
5 i# p6 u& G. m, w! w6 \  ]    Class out-put
4 z& A: Q! _2 }' H8 j     police cir 8000 bc 1500 be 3000
. P+ `% Q$ P/ }+ K, n       conform-action transmit
9 m$ C2 L& O, z5 P2 J0 {       exceed-action drop
( W9 O. R+ A, e! H9 P
% w2 i. a2 X& n% k  Policy Map in-put
# ?; P1 U) ]" [    Class in-put
! o/ L- k' Q$ [6 l; |     police cir 16000 bc 2000 be 3000
       conform-action set-dscp-transmit af22
       exceed-action set-dscp-transmit af11

' b, h1 h9 C5 [  C& g& F( p从show policy-map我们就可以知道，我们先前设置的
police 16000 2000 3000 conform-action set-dscp-transmit 20 exceed-action set-dscp-transmit 10
) b% Q1 i  d6 n  A' i2 r3 ipolice 8000 1500 3000 conform-action transmit  exceed-action drop
语名的意义  16000是CAR承诺接入速率 其中bc是令牌桶  be是当信令在bc放满后放到be中
R2#show policy-map int s1/0
Serial1/0


    Class-map: in-put (match-all)
      405 packets, 460260 bytes
) O% @5 R# w0 B! Q! C6 C) @% j      5 minute offered rate 1000 bps, drop rate 0 bps
8 ^# \; y  ?7 y$ n( C$ Y      Match: access-group 100
, K. j  N6 x: K+ X" b* @# n$ K      police:
          cir 16000 bps, bc 2000 bytes
8 Q/ @4 h3 k# o3 j2 B        conformed 175 packets, 137072 bytes; actions:
          set-dscp-transmit af22
        exceeded 230 packets, 323188 bytes; actions:
' _! ]6 g- W. x; s/ A, z3 m          set-dscp-transmit af11
6 @( V, L' m3 q  D; {9 L+ _
: z) @9 @$ [5 I: s        conformed 1000 bps, exceed 0 bps

会计考友

</p>
    Class-map: class-default (match-any)
      0 packets, 0 bytes
! P1 K4 _; ~& g. f      5 minute offered rate 0 bps, drop rate 0 bps
) h; K. M0 A; ]/ r8 F      Match: any
R2#show policy-map int s1/1
Serial1/1
9 B& ~, j- @8 X" B8 o

    Class-map: out-put (match-all)
      165 packets, 231820 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: ip dscp af11 (10)
1 |& ]2 o' f9 G1 g' {      police:
4 x1 |$ |& U5 \: N+ X3 l          cir 8000 bps, bc 1500 bytes
        conformed 88 packets, 117892 bytes; actions:
3 _3 l, v  \- n" |5 [) I1 _          transmit
        exceeded 77 packets, 113928 bytes; actions:
  _& Q' B% j, J" o; Z          drop
        conformed 0 bps, exceed 0 bps

+ w0 p/ e' _3 C4 J# A, p    Class-map: class-default (match-any)
0 P+ j8 t2 f5 e- ]. X      261 packets, 122786 bytes
8 C+ ]" A' r" M9 i      5 minute offered rate 1000 bps, drop rate 0 bps