华为三层交换机基于ip地址的限速

qq524061227

[H3C]dis cur　　#

　　version 5.20,>　　#
　　sysname H3C
　　#
　　clock timezone beijing add 13:01:45
　　#
　　super password level 3 cipher :Aa.-B3\6E@ZY#9\EO)311!!
　　#
　　irf mac-address persistent timer
　　irf auto-update enable
　　undo irf link-delay
　　#
　　domain default enable system
　　#
　　telnet server enable
　　#
　　undo ip ttl-expires
　　#
　　acl number 2000 match-order auto
　　#
　　vlan 1
　　#
　　vlan 1000 to 1010
　　#
　　radius scheme system
　　server-type extended
　　primary authentication 127.0.0.1 1645
　　primary accounting 127.0.0.1 1646
　　user-name-format without-domain
　　#
　　domain system
　　access-limit disable
　　state active
　　idle-cut disable
　　self-service-url disable
　　#

　　traffic>　　if-match any

　　traffic>　　if-match any

　　traffic>　　if-match any
　　#
　　traffic behavior ban-gong
　　car cir 20480 cbs 4000 ebs 4000 green pass red discard yellow pass
　　traffic behavior bi-sai
　　car cir 40960 cbs 4000 ebs 4000 green pass red discard yellow pass
　　traffic behavior zhang-xin-da
　　car cir 3072 cbs 4000 ebs 4000 green pass red discard yellow pass
　　#
　　qos policy bi-sai-upload
　　classifier bi-sai behavior bi-sai
　　qos policy ban-gong-out
　　classifier ban-gong behavior ban-gong
　　qos policy zhang-xin-da-out
　　classifier zhang-xin-da behavior zhang-xin-da
　　#
　　user-group system
　　#
　　interface NULL0
　　#
　　interface LoopBack0
　　ip address 119.255.3.49 255.255.255.255
　　#
　　interface Vlan-interface1000
　　description connet-li-gong
　　ip address 10.2.59.66 255.255.255.252
　　ospf cost 30
　　#
　　interface Vlan-interface1001
　　description connect-to-kecai
　　ip address 10.2.59.70 255.255.255.252
　　#
　　interface Vlan-interface1003
　　#
　　interface Vlan-interface1004
　　ip address 192.168.116.1 255.255.255.252
　　#
　　interface Vlan-interface1005
　　ip address 192.168.117.1 255.255.255.252
　　#
　　interface Vlan-interface1007
　　ip address 192.168.104.1 255.255.255.252
　　#
　　interface Vlan-interface1008
　　ip address 192.168.103.1 255.255.255.252
　　#
　　interface Vlan-interface1009
　　ip address 192.168.105.1 255.255.255.252
　　#
　　interface Vlan-interface1010
　　ip address 192.168.106.1 255.255.255.252
　　#
　　interface GigabitEthernet1/0/1
　　description connect-to-ligong
　　port access vlan 1000
　　#
　　interface GigabitEthernet1/0/2
　　description connect-to-kecai
　　port access vlan 1001
　　#
　　interface GigabitEthernet1/0/3
　　port access vlan 1003
　　#
　　interface GigabitEthernet1/0/4
　　#
　　interface GigabitEthernet1/0/5
　　description zhang-xin-da
　　port access vlan 1004
　　qos apply policy zhang-xin-da-out inbound
　　qos apply policy zhang-xin-da-out outbound
　　#
　　interface GigabitEthernet1/0/6
　　description zhang-xin-da
　　port access vlan 1005
　　qos apply policy zhang-xin-da-out inbound
　　qos apply policy zhang-xin-da-out outbound
　　#
　　interface GigabitEthernet1/0/7
　　description ban-gong
　　port access vlan 1007
　　qos apply policy ban-gong-out inbound
　　qos apply policy ban-gong-out outbound
　　#
　　interface GigabitEthernet1/0/8
　　description ban-gong
　　port access vlan 1008
　　#
　　interface GigabitEthernet1/0/9
　　description bi-sai
　　port access vlan 1009
　　qos apply policy bi-sai-upload inbound
　　qos apply policy bi-sai-upload outbound
　　#
　　interface GigabitEthernet1/0/10
　　description bi-sai
　　port access vlan 1010
　　qos apply policy bi-sai-upload inbound
　　qos apply policy bi-sai-upload outbound
　　shutdown
　　#
　　bgp 23844
　　import-route direct route-policy first_test
　　import-route static route-policy first_test
　　undo synchronization
　　group edge internal
　　peer edge password cipher 'E'9D=OF"='Q=^Q`MAF4<1!!
　　peer edge next-hop-local
　　peer edge connect-interface LoopBack0
　　peer 203.86.64.16 group edge
　　#
　　ospf 17 router-id 119.255.3.49
　　area 0.0.0.1
　　network 10.2.59.66 0.0.0.0
　　network 119.255.3.49 0.0.0.0
　　network 10.2.59.70 0.0.0.0
　　#
　　route-policy first_test permit node 2
　　if-match ip-prefix deny_private
　　#
　　nqa entry admin test
　　type icmp-echo
　　destination ip 192.168.116.2
　　frequency 100
　　reaction 1 checked-element probe-fail threshold-type consecutive 2 action-type
　　trigger-only
　　#
　　nqa entry admin1 test
　　type icmp-echo
　　destination ip 192.168.117.2
　　frequency 100
　　reaction 2 checked-element probe-fail threshold-type consecutive 2 action-type
　　trigger-only
　　#
　　nqa entry weisheng test
　　type icmp-echo
　　destination ip 192.168.105.2
　　frequency 100
　　reaction 3 checked-element probe-fail threshold-type consecutive 2 action-type
　　trigger-only
　　#
　　nqa entry weisheng1 test
　　type icmp-echo
　　destination ip 192.168.106.2
　　frequency 100
　　reaction 4 checked-element probe-fail threshold-type consecutive 2 action-type
　　trigger-only
　　#
　　ip ip-prefix deny_private index 9 permit 203.86.66.32 27 greater-equal 27 less-
　　equal 32
　　ip ip-prefix deny_private index 11 permit 118.102.28.0 25 greater-equal 25 less
　　-equal 32
　　ip ip-prefix deny_private index 13 permit 203.86.66.128 25 greater-equal 25 les
　　s-equal 32
　　ip ip-prefix deny_private index 14 permit 119.255.3.48 29 greater-equal 29 less
　　-equal 32
　　ip ip-prefix deny_private index 20 deny 0.0.0.0 0 less-equal 32
　　#
　　ip route-static 118.102.28.64 255.255.255.192 192.168.105.2 track 3
　　ip route-static 118.102.28.64 255.255.255.192 192.168.106.2 track 4
　　ip route-static 203.86.66.32 255.255.255.224 192.168.116.2 track 1
　　ip route-static 203.86.66.32 255.255.255.224 192.168.117.2 track 2
　　ip route-static 203.86.66.128 255.255.255.128 192.168.104.2
　　#
　　snmp-agent
　　snmp-agent local-engineid 800063A203000FE2E9B528
　　snmp-agent community read pop-nortel
　　snmp-agent sys-info version all
　　#
　　track 1 nqa entry admin test reaction 1
　　track 2 nqa entry admin1 test reaction 2
　　track 3 nqa entry weisheng test reaction 3
　　track 4 nqa entry weisheng1 test reaction 4
　　#
　　nqa schedule admin test start-time now lifetime forever
　　nqa schedule admin1 test start-time now lifetime forever
　　nqa schedule weisheng test start-time now lifetime forever
　　nqa schedule weisheng1 test start-time now lifetime forever
　　#
　　user-interface aux 0 8
　　user-interface vty 0 4
　　set authentication password cipher E!GR*G<E.T/Q=^Q`MAF4<1!!
　　#
　　return
　　[H3C]