接入交换机速率模板

2024年2月8日发(作者：)

Cisco 3750

class-map match-all user3071016443

match access-group name user3071016443

policy-map ingresspolicer

class user3071016443

police 20000000 1000000 exceed-action drop

interface FastEthernet1/0/10

description to lechi-netbar(3071016443)

no switchport

ip address 222.178.9.6 255.255.255.252

no ip redirects

no ip unreachables

no ip proxy-arp

load-interval 30

speed 100

no cdp enable

service-policy input 20M

ip access-list extended user3071016443

permit ip any 222.178.9.4 0.0.0.3

interface GigabitEthernet1/0/1

description to-ShaPingBa-12016-1-gi5/2-GE:1(zhongji)

switchport trunk encapsulation dot1q

switchport trunk allowed vlan 459,750-762,764-770,801-900

switchport mode trunk

load-interval 30

service-policy input ingresspolicer

Mpls-3750：

interface FastEthernet1/0/2

description Er-GongJiao-Corp(607100218)

switchport access vlan 782

switchport mode access

load-interval 30

speed 10

srr-queue bandwidth limit 25

queue-set 2

no cdp enable

service-policy input 2M

HW-53ei

interface GigabitEthernet0/0/15

description to chongqingshifandaxue(607134517)

port link-type access

port default vlan 301

traffic-policy 2M inbound

traffic-policy 2M outbound

ntdp enable

undo ndp enable

bpdu enable

undo negotiation auto

speed 10

storm-control broadcast min-rate 100 max-rate 200

storm-control multicast min-rate 100 max-rate 200

storm-control action block

cisco-3550

interface FastEthernet0/5

description to ShangYeYinHang(604110289)

switchport access vlan 1991

switchport mode dot1q-tunnel

load-interval 30

speed 100

storm-control broadcast level 5.00

no cdp enable

service-policy input 10M

service-policy output 10M（该out方向限速模式为旧模式，当更改速率时，请按3750的模板进行更改，新建端口限速时，也请按3750模板进行更改）

cisoc3750

针对用户互联网业务创建访问控制列表

ip access-list extended user307097269（名称不能有空格）

permit ip any 61.186.154.112 0.0.0.3

针对速率模板创建的class-map,此项应在开局时即已配置

class-map match-all default

match ip dscp default

针对用户互联网业务创建class-map，引用了互联网业务的访问控制列表

class-map match-all user307097269

match access-group name user307097269

创建7M速率模板，引用了class-map default,此项应在开局时已配置，如发现无此速率模板需新建

policy-map 7M

class default

police 7000000 875000 exceed-action drop

在policy-map中引用内网及互联网的class-map,并设备相应的速率

policy-map ingresspolicer

class user307097269

police 7000000 875000 exceed-action drop

在用户接入端口下做相应设置，应用速率模板，控制上行速率为7M （若速率为8M及以上，则speed必须改为speed 100）

interface FastEthernet1/0/8

description to XianZhanKeJi(307575806) （专线号不能有空格，不然泰斯通网吧速率比对会出现问题，虽然并不影响用户的速率，但新业务中心会找我们核实是否速率有误）

no switchport

ip address 61.186.154.22 255.255.255.252

no ip redirects

no ip unreachables

no ip proxy-arp

service-policy input 7M

load-interval 30

speed 10

no cdp enable

no shut

end

在上行端口下应用policy-map,控制用户下行的内网及互联网速率，此项应在开局时已配置，如未配置需添加

interface GigabitEthernet1/0/2

service-policy input ingresspolicer