3550 per-port-per-vlan traffic classify - 思科交换

姓名：大萝卜职业：听人说，技术支持是IT业最鸡肋的职业，于是我便开始郁闷起来! 个性签名: 我以为我们同属于/30，Ping出Timed out才明白处于不同的Vlan。我尝试着用爱做为Route，并用Traceroute来验证，可是Netstat的Syn_received结果让我无比伤心。于是我选择了deny any和deny ip any any,但是我心里一直期待着Vpn那天的到来,请将我放在你的Acl之内。 Mailto:bxz1981#gmail.com

class-map match-all test
match ip precedence 5
match access-group 101
class-map match-all per-vlan
match vlan 10
match class-map test

policy-map test
class per-vlan
set cos 5

interface FastEthernet0/6

service-policy input test

access-list 101 permit ip 10.1.1.0 0.0.0.255 20.1.1.0 0.0.0.255

===========================================
class-map match-all test
match ip precedence 5
match access-group 101
class-map match-all per-vlan
match vlan 10-15
match class-map test
!
!
policy-map test
class per-vlan
police 100000 80000 exceed-action drop

interface FastEthernet0/1
switchport mode access
service-policy input test

access-list 101 permit ip 10.1.1.0 0.0.0.255 20.1.1.0 0.0.0.255

===================================
mls qos aggregate-policer test 50000 20000 exceed-action drop
mls qos

class-map match-all test
match ip precedence 5
match access-group 101
class-map match-all per-vlan
match vlan 10-15
match class-map test

policy-map test
class per-vlan
police 100000 80000 exceed-action drop
policy-map test2
class per-vlan
police aggregate test

interface FastEthernet0/1
switchport mode access
service-policy input test
!
interface FastEthernet0/2
switchport mode access
service-policy input test2

access-list 101 permit ip 10.1.1.0 0.0.0.255 20.1.1.0 0.0.0.255