inte.net----firewall----(port1)3550emi(port2)---vlan103(192.168.103.0)
(port3)---vlan104(192.168.104.0)
Internet總出口速率為1M,
為vlan103分配200Kbit/s的帶寬,
為vlan104分配400Kbit/s的帶寬.
mls qos
class-map match-all ipclass103
match aclearcase/" target="_blank" >ccess-group 103
class-map match-all ipclass104
match access-group 104
!
!
policy-map flow_internet
class ipclass103
police 200000 8000 exceed-action drop
class ipclass104
police 400000 8000 exceed-action drop
!
!
spanning-tree extend system-id
!
!
!
interface FastEthernet0/1
switchport access vlan 200
switchport mode access
no ip address
flowcontrol receive on
service-policy input flow_internet
access-list 103 permit ip any 192.168.103.0 0.0.0.255
access-list 104 permit ip any 192.168.104.0 0.0.0.255
補充:
interface vlan103
ip address 192.168.103.1 255.255.255.0
interface vlan104
ip address 192.168.104.1 255.255.255.0
再ip routing即可.
access-list103和104是針對qos,與安全過濾無關.