18.2 流量监管和流量整形配置

1.SW1配置

[SW1]vlan batch 10 20 30
[SW1]interface GigabitEthernet 0/0/1
[SW1-GigabitEthernet0/0/1]port link-type access
[SW1-GigabitEthernet0/0/1]port default vlan 10
[SW1]interface GigabitEthernet 0/0/2
[SW1-GigabitEthernet0/0/2]port link-type access          
[SW1-GigabitEthernet0/0/2]port default vlan 20           
[SW1]interface GigabitEthernet 0/0/3
[SW1-GigabitEthernet0/0/3]port link-type access          
[SW1-GigabitEthernet0/0/3]port default vlan 30           
[SW1]interface GigabitEthernet 0/0/4          
[SW1-GigabitEthernet0/0/4]port link-type trunk 
[SW1-GigabitEthernet0/0/4]port trunk allow-pass vlan all 

2. R1配置ACL

[R1]acl number 2000
[R1-acl-basic-2000]rule permit source 192.168.0.0 0.0.255.255

3.R1配置流分类，匹配vlan-id

[R1]vlan batch 10 20 30
[R1]traffic classifier vlan10 
[R1-classifier-vlan10]if-match vlan-id 10
[R1]traffic classifier vlan20
[R1-classifier-vlan20]if-match vlan-id 20      
[R1]traffic classifier vlan30
[R1-classifier-vlan30]if-match vlan-id 30 

4.R1配置流行为，流量监管方面配置合理的速率，流量整形方面对于匹配到的流标记规定的802.1q优先级

[R1]traffic behavior vlan10
[R1-behavior-vlan10]car cir 4000 cbs 752000 pbs 1252000 green pass yellow pass red discard 
[R1-behavior-vlan10]statistic enable
//使能接口的流量统计功能
[R1-behavior-vlan10]remark 8021p 5
//标记优先级为5

[R1]traffic behavior vlan20
[R1-behavior-vlan20]car cir 2000 cbs 376000 pbs 626000 green pass yellow pass red discard
[R1-behavior-vlan20]statistic enable
[R1-behavior-vlan20]remark 8021p 2

[R1]traffic behavior vlan30
[R1-behavior-vlan30]car cir 256 cbs 48128 pbs 80128 green pass yellow pass red discard
[R1-behavior-vlan30] statistic enable
[R1-behavior-vlan30] remark 8021p 6

5.R1配置流策略，绑定对应的流分类与流行为

[R1]traffic policy vlan10
[R1-trafficpolicy-vlan10]classifier vlan10 behavior vlan10
[R1]traffic policy vlan20
[R1-trafficpolicy-vlan20]classifier vlan20 behavior vlan20
[R1]traffic policy vlan30            
[R1-trafficpolicy-vlan30]classifier vlan30 behavior vlan30

6.R1配置基于队列的流量整形

[R1]qos queue-profile qp
[R1-qos-queue-profile-qp]queue 2 gts cir 2000 cbs 50000
[R1-qos-queue-profile-qp]queue 5 gts cir 4000 cbs 10000
[R1-qos-queue-profile-qp]queue 6 gts cir 256 cbs 6400
[R1-qos-queue-profile-qp]schedule wfq 0 to 5 pq 6 to 7

7.接口配置

[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]qos queue-profile qp
//在接口应用队列模板
[R1-GigabitEthernet0/0/0]qos gts cir 8000 cbs 200000
//将端口速率限制在8000kbit/s
[R1-GigabitEthernet0/0/0]nat outbound 2000
//配置nat（easy ip）
[R1]interface GigabitEthernet0/0/1
[R1-GigabitEthernet0/0/1]trust 8021p
//接口信任802.1q优先级
[R1-GigabitEthernet0/0/1]qos car inbound cir 10000 cbs 1880000 pbs 3130000 green pass yellow pass red discard
//配置入口的速率限制在10000kbit/s

[R1]interface GigabitEthernet0/0/1.10
[R1-GigabitEthernet0/0/1.10]dot1q termination vid 10
//配置子接口Dot1q终结的单层VLAN ID
[R1-GigabitEthernet0/0/1.10]ip address 192.168.10.254 255.255.255.0
[R1-GigabitEthernet0/0/1.10]traffic-policy vlan10 inbound
//应用流策略
[R1-GigabitEthernet0/0/1.10]arp broadcast enable
//使能子接口的ARP广播功能

[R1]interface GigabitEthernet0/0/1.20
[R1-GigabitEthernet0/0/1.20]dot1q termination vid 20
[R1-GigabitEthernet0/0/1.20]ip address 192.168.20.254 255.255.255.0
[R1-GigabitEthernet0/0/1.20]traffic-policy vlan20 inbound
[R1-GigabitEthernet0/0/1.20]arp broadcast enable

[R1]interface GigabitEthernet0/0/1.30
[R1-GigabitEthernet0/0/1.30]dot1q termination vid 30
[R1-GigabitEthernet0/0/1.30]ip address 192.168.30.254 255.255.255.0
[R1-GigabitEthernet0/0/1.30]traffic-policy vlan30 inbound
[R1-GigabitEthernet0/0/1.30]arp broadcast enable