《华为三层交换机基于ip地址的限速》由会员分享，可在线阅读，更多相关《华为三层交换机基于ip地址的限速（8页珍藏版）》请在金锄头文库上搜索。
1、华为三层交换机基于华为三层交换机基于 ipip 地址的限速地址的限速H3Cdis cur#version 5.20, Release 2202#sysname H3C#clock timezone beijing add 13:01:45#super password level 3 cipher :Aa.-B36EZY#9EO)311!#irf mac-address persistent timerirf auto-update enableundo irf link-delay#domain default enable system#telnet server enable#undo
2、ip ttl-expires#acl number 2000 match-order auto#vlan 1#vlan 1000 to 1010#radius scheme systemserver-type extendedprimary authentication 127.0.0.1 1645primary accounting 127.0.0.1 1646user-name-format without-domain#domain systemaccess-limit disablestate activeidle-cut disableself-service-url disable
3、#traffic classifier ban-gong operator andif-match anytraffic classifier bi-sai operator andif-match anytraffic classifier zhang-xin-da operator andif-match any#traffic behavior ban-gongcar cir 20480 cbs 4000 ebs 4000 green pass red discard yellow passtraffic behavior bi-saicar cir 40960 cbs 4000 ebs
4、 4000 green pass red discard yellow passtraffic behavior zhang-xin-dacar cir 3072 cbs 4000 ebs 4000 green pass red discard yellow pass#qos policy bi-sai-uploadclassifier bi-sai behavior bi-saiqos policy ban-gong-outclassifier ban-gong behavior ban-gongqos policy zhang-xin-da-outclassifier zhang-xin-
5、da behavior zhang-xin-da#user-group system#interface NULL0#interface LoopBack0ip address 119.255.3.49 255.255.255.255#interface Vlan-interface1000description connet-li-gongip address 10.2.59.66 255.255.255.252ospf cost 30#interface Vlan-interface1001description connect-to-kecaiip address 10.2.59.70
6、255.255.255.252#interface Vlan-interface1003#interface Vlan-interface1004ip address 192.168.116.1 255.255.255.252#interface Vlan-interface1005ip address 192.168.117.1 255.255.255.252#interface Vlan-interface1007ip address 192.168.104.1 255.255.255.252#interface Vlan-interface1008ip address 192.168.1
7、03.1 255.255.255.252#interface Vlan-interface1009ip address 192.168.105.1 255.255.255.252#interface Vlan-interface1010ip address 192.168.106.1 255.255.255.252#interface GigabitEthernet1/0/1description connect-to-ligongport access vlan 1000#interface GigabitEthernet1/0/2description connect-to-kecaipo
8、rt access vlan 1001#interface GigabitEthernet1/0/3port access vlan 1003#interface GigabitEthernet1/0/4#interface GigabitEthernet1/0/5description zhang-xin-daport access vlan 1004qos apply policy zhang-xin-da-out inboundqos apply policy zhang-xin-da-out outbound#interface GigabitEthernet1/0/6descript
9、ion zhang-xin-daport access vlan 1005qos apply policy zhang-xin-da-out inboundqos apply policy zhang-xin-da-out outbound#interface GigabitEthernet1/0/7description ban-gongport access vlan 1007qos apply policy ban-gong-out inboundqos apply policy ban-gong-out outbound#interface GigabitEthernet1/0/8de
10、scription ban-gongport access vlan 1008#interface GigabitEthernet1/0/9description bi-saiport access vlan 1009qos apply policy bi-sai-upload inboundqos apply policy bi-sai-upload outbound#interface GigabitEthernet1/0/10description bi-saiport access vlan 1010qos apply policy bi-sai-upload inboundqos a
11、pply policy bi-sai-upload outboundshutdown#bgp 23844import-route direct route-policy first_testimport-route static route-policy first_testundo synchronizationgroup edge internalpeer edge password cipher E9D=OF“=Q=QMAF41!peer edge next-hop-localpeer edge connect-interface LoopBack0peer 203.86.64.16 g
12、roup edge#ospf 17 router-id 119.255.3.49area 0.0.0.1network 10.2.59.66 0.0.0.0network 119.255.3.49 0.0.0.0network 10.2.59.70 0.0.0.0#route-policy first_test permit node 2if-match ip-prefix deny_private#nqa entry admin testtype icmp-echodestination ip 192.168.116.2frequency 100reaction 1 checked-elem
13、ent probe-fail threshold-type consecutive 2 action-typetrigger-only#nqa entry admin1 testtype icmp-echodestination ip 192.168.117.2frequency 100reaction 2 checked-element probe-fail threshold-type consecutive 2 action-typetrigger-only#nqa entry weisheng testtype icmp-echodestination ip 192.168.105.2
14、frequency 100reaction 3 checked-element probe-fail threshold-type consecutive 2 action-typetrigger-only#nqa entry weisheng1 testtype icmp-echodestination ip 192.168.106.2frequency 100reaction 4 checked-element probe-fail threshold-type consecutive 2 action-typetrigger-only#ip ip-prefix deny_private
15、index 9 permit 203.86.66.32 27 greater-equal 27 less-equal 32ip ip-prefix deny_private index 11 permit 118.102.28.0 25 greater-equal 25 less-equal 32ip ip-prefix deny_private index 13 permit 203.86.66.128 25 greater-equal 25 less-equal 32ip ip-prefix deny_private index 14 permit 119.255.3.48 29 grea
16、ter-equal 29 less-equal 32ip ip-prefix deny_private index 20 deny 0.0.0.0 0 less-equal 32#ip route-static 118.102.28.64 255.255.255.192 192.168.105.2 track 3ip route-static 118.102.28.64 255.255.255.192 192.168.106.2 track 4ip route-static 203.86.66.32 255.255.255.224 192.168.116.2 track 1ip route-static 203.86.66.32 255.255.255.224 192.168.117.2 track 2ip route-static 203.86.66.128 255.255.255.128 192.168.104.2#snmp-agentsnmp-agent local-engineid 800063A203000FE2E9B528snmp-agent comm
