思科交換機埠限速實戰
埠限速必須在交換機上啟動QOS
Switch(config)#mls qos //在交換機上啟動QOS
下面是具體實現步驟。
一、建立ACL
由於這是一臺三層交換機，所以雖然是對埠進行限速，但是還要考慮這個埠上通過的網路地址，本例中，我們選擇對CISCO3550交換機的第22口進行限速，該埠屬於VLAN66，IP地址段為10.66/16，所以首先要建立一個ACL，如下所示：
3550#conf t
Enter configuration commands, one per line. End with CNTL/Z.
3550(config)#access-list 15 permit 10.66.0.0 0.0.255.255
二、建立class-map
3550#conf t
Enter configuration commands, one per line. End with CNTL/Z.
3550(config)#class-map dkxs
3550(config-cmap)#match access-group 15
這一步操作的主要目的就是建立了一個class-map，在這裡面引用了我們事先建立好的ACL 15，方便我們以後對22埠進行操作。
三、建立policy-map
出於測試的需要，我們建立了多個policy-map，分別設定不同的限制頻寬，如80k，1m，5m，10m，分別如下：
3550#conf t
Enter configuration commands, one per line. End with CNTL/Z.
3550(config)#policy-map 80k
3550(config-pmap)#class dkxs
3550(config-pmap-c)# police 80000 8000 exceed-action drop
3550#conf t
Enter configuration commands, one per line. End with CNTL/Z.
3550(config)#policy-map 1m
3550(config-pmap)#class dkxs
3550(config-pmap-c)# police 1000000 100000 exceed-action drop
3550#conf t
Enter configuration commands, one per line. End with CNTL/Z.
3550(config)#policy-map 5m
3550(config-pmap)#class dkxs
3550(config-pmap-c)# police 5000000 500000 exceed-action drop
3550#conf t
Enter configuration commands, one per line. End with CNTL/Z.
3550(config)#policy-map 10m
3550(config-pmap)#class dkxs
3550(config-pmap-c)# police 10000000 1000000 exceed-action drop
四、檢視配置資訊
3550#show run
policy-map 5m
class dkxs
police 5000000 500000 exceed-action drop
policy-map 1m
class dkxs
police 1000000 100000 exceed-action drop
policy-map 80k
class dkxs
police 80000 8000 exceed-action drop
policy-map 10m
class dkxs
police 10000000 1000000 exceed-action drop
五、通過iperf軟體進行驗證
即先在一臺伺服器上執行iperf的伺服器端，命令如下：
F:\tools>iperf -s
------------------------------------------------------------
Server listening on TCP port 5001
TCP window size: 8.00 KByte (default)
------------------------------------------------------------
然後在交換機的22口上分別應用表示不同速率的policy-map，每應用一次，通過一臺連線到22埠的膝上型電腦執行iperf的客戶端，進行埠速率測試，結果分別如下：
(交換機設定)
3550(config-if)#service-policy input 80k
(IPERF客戶端測試結果)
F:\tools>iperf -c 10.66.66.8
------------------------------------------------------------
Client connecting to 10.66.66.8, TCP port 5001
TCP window size: 8.00 KByte (default)
------------------------------------------------------------
[1912] local 10.66.123.66 port 1147 connected with 10.66.66.8 port 5001
[ ID] Interval Transfer Bandwidth
[1912] 0.0-12.5 sec 104 KBytes 68.3 Kbits/sec
F:\tools>iperf -c 10.66.66.8
------------------------------------------------------------
Client connecting to 10.66.66.8, TCP port 5001
TCP window size: 8.00 KByte (default)
------------------------------------------------------------
[1912] local 10.66.123.66 port 1151 connected with 10.66.66.8 port 5001
[ ID] Interval Transfer Bandwidth
[1912] 0.0-12.0 sec 104 KBytes 70.8 Kbits/sec
(交換機設定)
3550(config-if)#service-policy input 1m
(IPERF客戶端測試結果)
F:\tools>iperf -c 10.66.66.8
------------------------------------------------------------
Client connecting to 10.66.66.8, TCP port 5001
TCP window size: 8.00 KByte (default)
------------------------------------------------------------
[1912] local 10.66.123.66 port 1155 connected with 10.66.66.8 port 5001
[ ID] Interval Transfer Bandwidth
[1912] 0.0-10.5 sec 1.08 MBytes 860 Kbits/sec
F:\tools>iperf -c 10.66.66.8
------------------------------------------------------------
Client connecting to 10.66.66.8, TCP port 5001
TCP window size: 8.00 KByte (default)
[1912] local 10.66.123.66 port 1159 connected with 10.66.66.8 port 5001
[ ID] Interval Transfer Bandwidth
[1912] 0.0-10.0 sec 1.09 MBytes 910 Kbits/sec
(交換機設定)
3550(config-if)#service-policy input 5m
(IPERF客戶端測試結果)
F:\tools>iperf -c 10.66.66.8
------------------------------------------------------------
Client connecting to 10.66.66.8, TCP port 5001
TCP window size: 8.00 KByte (default)
------------------------------------------------------------
[1912] local 10.66.123.66 port 1163 connected with 10.66.66.8 port 5001
[ ID] Interval Transfer Bandwidth
[1912] 0.0-10.5 sec 5.84 MBytes 4.67 Mbits/sec
F:\tools>iperf -c 10.66.66.8
------------------------------------------------------------
Client connecting to 10.66.66.8, TCP port 5001
TCP window size: 8.00 KByte (default)
------------------------------------------------------------
[1912] local 10.66.123.66 port 1167 connected with 10.66.66.8 port 5001
[ ID] Interval Transfer Bandwidth
[1912] 0.0-10.7 sec 5.98 MBytes 4.68 Mbits/sec
(交換機設定)
3550(config-if)#service-policy input 10m
(IPERF客戶端測試結果)
F:\tools>iperf -c 10.66.66.8
------------------------------------------------------------
Client connecting to 10.66.66.8, TCP port 5001
TCP window size: 8.00 KByte (default)
------------------------------------------------------------
[1912] local 10.66.123.66 port 1171 connected with 10.66.66.8 port 5001
[ ID] Interval Transfer Bandwidth
[1912] 0.0-10.1 sec 11.8 MBytes 9.83 Mbits/sec
F:\tools>iperf -c 10.66.66.8
------------------------------------------------------------
Client connecting to 10.66.66.8, TCP port 5001
TCP window size: 8.00 KByte (default)
------------------------------------------------------------
[1912] local 10.66.123.66 port 1175 connected with 10.66.66.8 port 5001
[ ID] Interval Transfer Bandwidth
[1912] 0.0-10.2 sec 12.0 MBytes 9.87 Mbits/sec
為了使測試的結果更準確，每種速率下都進行了兩次測試，從測試的結果看，埠限速確實生效了。