QOS

一、描述

?QOS：策略設(shè)置，一般分為幾個步驟

?第一：分類流量

????? 1.1.1、根據(jù)IP地址分類，配制的時候使用ACL訪問控制列表

????? 1.1.2、根據(jù)思科NBAR[nba:]來分類，它可以根據(jù)七層來識別

Router(config)#class-map map名

Router(config-cmap)#match??
????access-group??????????Access?group
????any???????????????????Any?packets
????class-map?????????????Class?map
????cos???????????????????IEEE?802.1Q/ISL?class?of?service/user?priority?values
????destination-address???Destination?address
????input-interface???????Select?an?input?interface?to?match
????ip????????????????????IP?specific?values
????mpls??????????????????Multi?Protocol?Label?Switching?specific?values
????not???????????????????Negate?this?match?result
????protocol??????????????Protocol???????? /NBAR
????qos-group?????????????Qos-group
????source-address????????Source?address

?第二：標(biāo)記流量（marking）

???? 標(biāo)記可以基于二層ip?precedenc（IP優(yōu)先級）也可以基于三層DSCP來標(biāo)記識別的流量

?????一般在標(biāo)記的時候分為幾大塊：語音流、視頻流、重要業(yè)務(wù)流、其它業(yè)務(wù)流分為從0－7這么幾個級別

7和6保留0也保留

級別??流量種類???dscp標(biāo)記???? ?實(shí)例

5????? 語音??????? ef????????? voip

4????? 流媒體????? af4x????????視頻會議等

3????? 業(yè)務(wù)流量??? af3x????????ERP、SQL等辦公系統(tǒng)

2???? ?傳統(tǒng)流量??? af2x??????? mail、ftp、web等

1????? 垃圾流量??? af1x??????? 搶占帶寬的流量例：bt,迅雷，ppstream等

注：x代表(1-9)是同一個級別內(nèi)在分類

設(shè)置

policy-map?名稱
? class-map?名稱
??????set?ip?dscp?{DSCP}
????? set?ip?precedence?{PRECEDENCE}
??????set?cos?{COS}
設(shè)置標(biāo)記

???

?第三：設(shè)置策略

在policy-map下，匹配class-map后

priority?{Kbps|percent?PERCENT}?[bc]????定義優(yōu)先級流量的帶寬以及突發(fā)流量
bandwidth?{Kbps|percent?PERCENT}????????定義保留帶寬
random-detect???????????????????????????啟用WRED
police?{CIR?BC?BE}?conform-action?{action}?exceed-action?{action}?[violated-action?{action}]??使用令牌桶限速
queue-limit?{PACKETS}???????????????????定義隊列中數(shù)據(jù)報的最大個數(shù)
service-policy?{policy-name}????????????調(diào)用其它的策略進(jìn)行嵌套
shape?{average|peak}?{CIR?[BC]?[BE]}????×××
drop????????????????????????????????????丟棄

?第四：在接口上應(yīng)用

Router(config-if)#service-policy?{input|output}?{policy_map名字}

? input????設(shè)置在進(jìn)口上
? output???設(shè)置在出口上

注：如果對QOS不太懂建議看? http://www.blogcn.com/User5/ghol/blog/51036470.html? 是一個哥兒們寫的筆記很不錯

二、拓?fù)?/span>

?

?

?

圖中，COM路由器接內(nèi)網(wǎng)，ISP路由器是模擬的外網(wǎng)，R2屬于邊界路由器 三、實(shí)驗(yàn)說明 我們在R2的s1/0和s1/1口上配制接口帶寬為 16Kbit/s，然后在s1/0即進(jìn)口上做標(biāo)記， 標(biāo)記為，滿足條件打20的標(biāo)記，超出的打10的標(biāo)記。 在s1/1出口上做策略對于打了10標(biāo)記的流量，做相應(yīng)的drop 四、配制 基本配制 R1: interface Serial1/1 ip address 10.1.1.2 255.255.255.0 no sh ! ip route 20.1.1.0 255.255.255.0 10.1.1.1 R2: access-list 100 permit ip 10.1.1.0 0.0.0.255 20.1.1.0 0.0.0.255

16000為帶寬限制，2000為BC，3000為BE

class-map in-put match access-group 100 exit policy-map in-put class in-put police 16000 2000 3000 conform-action set-dscp-transmit 20 exceed-action set-dscp-transmit 10 exit class-map out-put

對于超出的流量做drop

match ip dscp 10 exit policy-map out-put class out-put police 8000 1500 3000 conform-action transmit?exceed-action drop exit int s1/0 bandwidth 16 ip address 10.1.1.1 255.255.255.0 clock rate 64000 service-policy input in-put no sh ! interface Serial1/1 bandwidth 16 ip address 20.1.1.1 255.255.255.0 clock rate 64000 service-policy output out-put no sh ! R3: interface Serial1/0 ip address 20.1.1.2 255.255.255.0 no sh ! ip route 10.1.1.0 255.255.255.0 20.1.1.1 ! 驗(yàn)證 R1#ping ip Target IP address: 20.1.1.2 Repeat count [5]: 10 Datagram size [100]: 2000 Timeout in seconds [2]: Extended commands [n]: Sweep range of sizes [n]: Type escape sequence to abort. Sending 10, 2000-byte ICMP Echos to 20.1.1.2, timeout is 2 seconds: !.!..!!.!! Success rate is 60 percent (6/10), round-trip min/avg/max = 204/457/596 ms R2#show policy-map Policy Map out-put Class out-put police cir 8000 bc 1500 be 3000 conform-action transmit exceed-action drop Policy Map in-put Class in-put police cir 16000 bc 2000 be 3000 conform-action set-dscp-transmit af22 exceed-action set-dscp-transmit af11 從show policy-map我們就可以知道，我們先前設(shè)置的 police 16000 2000 3000 conform-action set-dscp-transmit 20 exceed-action set-dscp-transmit 10 police 8000 1500 3000 conform-action transmit?exceed-action drop 語名的意義?16000是CAR承諾接入速率 其中bc是令牌桶?be是當(dāng)信令在bc放滿后放到be中 R2#show policy-map ints1/0 Serial1/0 Class-map: in-put (match-all) 405 packets, 460260 bytes 5 minute offered rate 1000 bps, drop rate 0 bps Match: access-group 100 police: cir 16000 bps, bc 2000 bytes conformed 175 packets, 137072 bytes; actions: set-dscp-transmit af22 exceeded 230 packets, 323188 bytes; actions: set-dscp-transmit af11 conformed 1000 bps, exceed 0 bps Class-map: class-default (match-any) 0 packets, 0 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: any R2#show policy-map int s1/1 Serial1/1 Class-map: out-put (match-all) 165 packets, 231820 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: ip dscp af11 (10) police: cir 8000 bps, bc 1500 bytes conformed 88 packets, 117892 bytes; actions: transmit exceeded 77 packets, 113928 bytes; actions: drop conformed 0 bps, exceed 0 bps Class-map: class-default (match-any) 261 packets, 122786 bytes 5 minute offered rate 1000 bps, drop rate 0 bps

?

轉(zhuǎn)載于:https://blog.51cto.com/haolun/993035

總結(jié)

以上是生活随笔為你收集整理的QOS实验的全部內(nèi)容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網(wǎng)站內(nèi)容還不錯，歡迎將生活随笔推薦給好友。