![Cisco 10000 Series Скачать руководство пользователя страница 653](http://html.mh-extra.com/html/cisco/10000-series/10000-series_configuration-manual_66373653.webp)
18-13
Cisco 10000 Series Router Quality of Service Configuration Guide
OL-7433-09
Chapter 18 Regulating and Shaping Subscriber Traffic
Subscriber-Based IP Quality of Service
Configuration Example for Per User Multiservice Rate Limiting
Example 18-2
creates two access control lists (ACL 120 and ACL 130) and two class maps (
map1
and
map2
). Each class map includes a
match
statement in which the previously configured ACL is used to
classify the traffic through the interface. The
map1
class
classifies traffic based on the parameters
defined in ACL 130 and the
map2
class classifies traffic based on ACL 120.
In the policy map
mypolicy
, the policing statement defined for each class acts on all traffic that
corresponds to the class. Packets with the destination address 172.16.1.1 are policed at a rate of 8000 bps
and packets with the destination address 172.16.1.2 are policed at a rate of 120,000 bps.
The service policy is applied to the virtual template interface named
Virtual-Template 2
. Input traffic on
all virtual access interfaces (VAIs) cloned from this virtual template interface is policed.
Example 18-2 Configuring Per User Multiservice Rate Limiting Configuration Example
Router(config)# access-list 120 permit ip any host 172.16.1.1
Router(config)# access-list 130 permit ip any host 172.16.1.2
Router(config)# class-map map1
Router(config-cmap)# match access-group 130
Router(config-cmap)# exit
Router(config)# class-map map2
Router(config-cmap)# match access-group 120
Router(config-cmap)# exit
Router(config)# policy-map mypolicy
Router(config-pmap)# class map1
Router(config-pmap)# priority
Router(config-pmap-c)# police 120000 16000 32000 conform-action transmit exceed-action
drop
Router(config-pmap-c)# exit
Router(config-pmap)# class map2
Router(config-pmap-c)# police 8000 16000 32000 conform-action transmit exceed-action drop
Router(config-pmap-c)# exit
Router(config-pmap)# exit
Router(config)# interface Virtual-Template 2
Router(config-if)# service-policy input mypolicy
Router(config-if)# ip unnumbered ethernet 0
Router(config-if)# no peer default ip address
Router(config-if)# ppp authentication chap
Configuration Example for Per Session Service Policy Using RADIUS
To configure per session service policy, perform the following configuration tasks:
•
Configure the RADIUS server on the Cisco 10000 series router as described in the “Configuring
RADIUS” chapter in the
Cisco IOS Security Configuration Guide
, Release 12.2.
•
Create the class map and policy map as described in the
“Configuring per Session Rate Limiting”
section on page 18-9
.
•
Apply the service policy to the RADIUS AAA user profile.