网络工程师进阶，使用流策略实现流行为控制

原创

网络技术联盟站

修改于 2021-02-23 10:03:37

1.3K0

文章被收录于专栏：网络技术联盟站网络技术联盟站

大家好，昨天出了一个QOS的技术贴，主要介绍的是基础部分，那么今天给大家带来的还是QOS部分的内容，教大家如何使用流策略实现流行为控制。

一、实验目的

掌握配置端到端QoS的方法
掌握使用流策略实现流行为控制的方法

二、实验拓扑

三、实验场景

你是公司的网络管理员。公司网络分成两部分，其中R1与S1在公司总部，R2与S2在公司分部，之间通过专线实现互联。随着网络的发展，内网带宽逐渐增大，而专线的带宽一直没有升级，所以网络中出现了比较严重的重要业务反应较慢，或无法正常使用的情况。

部署端到端QoS，你可以调整相应的QoS特性，保证重要的业务数据能更好的发送到目标，并通过流策略实现对流行为的控制。

四、实验步骤

4.1 步骤一. 基础配置与 IP 编址

给所有路由器和交换机S3，S4配置IP地址和掩码。

R1

<R1>system-view
Enter system view, return user view with Ctrl+Z.
[R1]interface Serial 1/0/0
[R1-Serial1/0/0]ip address 10.0.12.1 255.255.255.0
[R1-Serial1/0/0]quit
[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]ip address 10.0.145.1 255.255.255.0

R2

<R2>system-view
Enter system view, return user view with Ctrl+Z.
[R2]interface Serial 1/0/0
[R2-Serial1/0/0]ip address 10.0.12.2 255.255.255.0
[R2-Serial1/0/0]quit
[R2]interface GigabitEthernet 0/0/2
[R2-GigabitEthernet0/0/2]ip address 10.0.34.2 255.255.255.0

R3

<R3>system-view
Enter system view, return user view with Ctrl+Z.
[R3]interface GigabitEthernet 0/0/2
[R3-GigabitEthernet0/0/2]ip address 10.0.34.3 255.255.255.0

R4

<R4> system-view
Enter system view, return user view with Ctrl+Z.
[R4]interface GigabitEthernet 0/0/1
[R4-GigabitEthernet0/0/1]ip address 10.0.145.4 255.255.255.0

R5

<R5>system-view
Enter system view, return user view with Ctrl+Z.
[R5]interface GigabitEthernet 0/0/1
[R5-GigabitEthernet0/0/1]ip address 10.0.145.5 255.255.255.0

S3

<S3>system-view
Enter system view, return user view with Ctrl+Z.
[S3]interface Vlanif 1
[S3-Vlanif1]ip address 10.0.145.3 255.255.255.0

S4

<S4>system-view
Enter system view, return user view with Ctrl+Z.
[S4]interface Vlanif 1
[S4-Vlanif1]ip address 10.0.34.4 255.255.255.0

配置完成后，测试直连链路的连通性。

R1 ping R2

[R1]ping -c 1 10.0.12.2
PING 10.0.12.2: 56 data bytes, press CTRL_C to break
Reply from 10.0.12.2: bytes=56 Sequence=1 ttl=255 time=36 ms
--- 10.0.12.2 ping statistics ---
1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 36/36/36 ms

R1 ping S3

[R1]ping -c 1 10.0.145.3
PING 10.0.145.3: 56 data bytes, press CTRL_C to break
Reply from 10.0.145.3: bytes=56 Sequence=1 ttl=255 time=35 ms
--- 10.0.145.3 ping statistics ---
1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 35/35/35 ms

R1 ping R4

[R1]ping -c 1 10.0.145.4
PING 10.0.145.4: 56 data bytes, press CTRL_C to break
Reply from 10.0.145.4: bytes=56 Sequence=1 ttl=255 time=6 ms
--- 10.0.145.4 ping statistics ---
1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 6/6/6 ms

R1 ping R5

[R1]ping -c 1 10.0.145.5
PING 10.0.145.5: 56 data bytes, press CTRL_C to break
Reply from 10.0.145.5: bytes=56 Sequence=1 ttl=255 time=6 ms
--- 10.0.145.5 ping statistics ---
  1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 6/6/6 ms

R2 ping R3

[R2]ping -c 1 10.0.34.3
PING 10.0.34.3: 56 data bytes, press CTRL_C to break
Reply from 10.0.34.3: bytes=56 Sequence=1 ttl=255 time=5 ms
--- 10.0.34.3 ping statistics ---
1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 5/5/5 ms

R2 ping S4

[R2]ping -c 1 10.0.34.4
PING 10.0.34.4: 56 data bytes, press CTRL_C to break
Reply from 10.0.34.4: bytes=56 Sequence=1 ttl=255 time=36 ms
--- 10.0.34.4 ping statistics ---
1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 36/36/36 ms

4.2 步骤二. 配置静态路由

在所有路由器和交换机S3，S4上配置静态路由。

[R1]ip route-static 10.0.34.0 255.255.255.0 10.0.12.2
[R2]ip route-static 10.0.145.0 255.255.255.0 10.0.12.1
[R3]ip route-static 0.0.0.0 0.0.0.0 10.0.34.2
[R4]ip route-static 0.0.0.0 0.0.0.0 10.0.145.1
[R5]ip route-static 0.0.0.0 0.0.0.0 10.0.145.1
[S3]ip route-static 0.0.0.0 0.0.0.0 10.0.145.1
[S4]ip route-static 0.0.0.0 0.0.0.0 10.0.34.2

配置完成后，测试网络连通性。

S3

[S3]ping -c 1 10.0.34.4
PING 10.0.34.4: 56 data bytes, press CTRL_C to break
Reply from 10.0.34.4: bytes=56 Sequence=1 ttl=252 time=40 ms
--- 10.0.34.4 ping statistics ---
1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 40/40/40 ms

R4

[R4]ping -c 1 10.0.34.3
PING 10.0.145.4: 56 data bytes, press CTRL_C to break
Reply from 10.0.145.4: bytes=56 Sequence=1 ttl=255 time=3 ms
--- 10.0.145.4 ping statistics ---
1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 3/3/3 ms

R5

[R5]ping -c 1 10.0.34.3
PING 10.0.34.3: 56 data bytes, press CTRL_C to break
Reply from 10.0.34.3: bytes=56 Sequence=1 ttl=253 time=44 ms
--- 10.0.34.3 ping statistics ---
1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 44/44/44 ms

4.3 步骤三. 配置 DSCP 优先级的重标记

公司网络中有语音，视频，数据三种业务，但是由于公司总部与分部之间的专线仍然没有得到升级，所以网络不可避免的出现了拥塞。

通过配置端到端的QoS来实现语音报文的优先发送，视频报文的带宽保证。

将R4与R3之间的流量模拟为语音报文，将R5与R3之间的流量模拟为视频报文，将S3与S4之间的报文模拟为数据报文。接下来将针对语音报文和视频报文做一系列相关的QoS策略，对数据报文采用默认的尽力而为的传输。

现在将语音报文的DSCP值标记为EF，视频报文的DSCP值标记为AF32。

在S1上创建ACL3001，3002，分别匹配R4去往R3，R5去往R3的流量。

[S1]acl number 3001
[S1-acl-adv-3001]rule 0 permit ip source 10.0.145.4 0 destination 10.0.34.3 0
[S1-acl-adv-3001]quit
[S1]acl number 3002
[S1-acl-adv-3002]rule 0 permit ip source 10.0.145.5 0 destination 10.0.34.3 0

在S1上创建流分类class-voice-s1，匹配ACL3001。创建流行为behavior-voice-s1，将DSCP优先级重标记为EF。

创建流策略policy-voice-s1，关联流分类class-voice-s1与流行为behavior-voice-s1，在S1上的G0/0/4接口入方向上调用该流策略。

[S1]traffic classifier class-voice-s1
[S1-classifier-class-voice-s1]if-match acl 3001
[S1-classifier-class-voice-s1]quit
[S1]traffic behavior behavior-voice-s1
[S1-behavior-behavior-voice-s1]remark dscp ef
[S1-behavior-behavior-voice-s1]quit
[S1]traffic policy policy-voice-s1
[S1-trafficpolicy-policy-voice-s1]classifier class-voice-s1 behavior behavior-voice-s1
[S1-trafficpolicy-policy-voice-s1]quit
[S1]interface GigabitEthernet 0/0/4
[S1-GigabitEthernet0/0/4]traffic-policy policy-voice-s1 inbound

在S1上创建流分类class-video-s1，匹配ACL3002。创建流行为behavior-video-s1，将DSCP优先级重标记为AF32。

创建流策略policy-video-s1，关联流分类class-video-s1与流行为behavior-video-s1，在S1上的G0/0/5接口入方向上应用该流策略。

[S1]traffic classifier class-video-s1
[S1-classifier-class-video-s1]if-match acl 3002
[S1-classifier-class-video-s1]quit
[S1]traffic behavior behavior-video-s1
[S1-behavior-behavior-video-s1]remark dscp af32
[S1-behavior-behavior-video-s1]quit
[S1]traffic policy policy-video-s1
[S1-trafficpolicy-policy-video-s1]classifier class-video-s1 behavior behavior-video-s1
[S1-trafficpolicy-policy-video-s1]quit
[S1]interface GigabitEthernet 0/0/5
[S1-GigabitEthernet0/0/5]traffic-policy policy-video-s1 inbound

在S2上创建ACL3001，3002，分别匹配R3去往R4，R3去往R5的流量。

[S2]acl number 3001
[S2-acl-adv-3001]rule 0 permit ip source 10.0.34.3 0 destination 10.0.145.4 0
[S2-acl-adv-3001]quit
[S2]acl number 3002
[S2-acl-adv-3002]rule 0 permit ip source 10.0.34.3 0 destination 10.0.145.5 0

在S2上创建流分类class-voice-s2，匹配ACL3001。创建流行为behavior-voice-s2，将DSCP优先级重标记为EF。

[S2]traffic classifier class-voice-s2
[S2-classifier-class-voice-s2]if-match acl 3001
[S2-classifier-class-voice-s2]quit
[S2]traffic behavior behavior-voice-s2
[S2-behavior-behavior-voice-s2]remark dscp ef

在S2上创建流分类class-video-s2，匹配ACL3002。创建流行为behavior-video-s2，将DSCP优先级重标记为AF32。

[S2]traffic classifier class-video-s2
[S2-classifier-class-video-s2]if-match acl 3002
[S2-classifier-class-video-s2]quit
[S2]traffic behavior behavior-video-s2
[S2-behavior-behavior-video-s2]remark dscp af32

在S2上创建流策略policy-voice-video-s2，关联流分类class-voice-s2与流行为behavior-voice-s2，关联流分类class-video-s2与流行为behavior-video-s2，在S2上的G0/0/3接口入方向上应用该流策略。

[S2]traffic policy policy-voice-video-s2
[S2-trafficpolicy-policy-voice-video-s2]classifier class-voice-s2 behavior behavior-voice-s2
[S2-trafficpolicy-policy-voice-video-s2]classifier class-video-s2 behavior behavior-video-s2
[S2-trafficpolicy-policy-voice-video-s2]quit
[S2]interface GigabitEthernet 0/0/3
[S2-GigabitEthernet0/0/3]traffic-policy policy-voice-video-s2 inbound

4.4 步骤四. 配置流量整形和监管

在公司总部和分部的核心交换机上部署流量整形，缓解流量拥塞的问题。

在S1上的接口G0/0/1出方向上配置流量整形，CIR设为128kbit/s。

[S1]interface GigabitEthernet 0/0/1
[S1-GigabitEthernet0/0/1]qos lr outbound cir 128

查看流量整形配置信息。

[S1]display qos lr outbound interface GigabitEthernet 0/0/1
GigabitEthernet0/0/1 lr outbound:
cir: 128 Kbps, cbs: 16000 Byte

在S2上的接口G0/0/2出方向上配置流量整形，CIR设为128kbit/s。

[S2]interface GigabitEthernet 0/0/2
[S2-GigabitEthernet0/0/2]qos lr outbound cir 128

查看流量整形配置信息。

[S2]display qos lr outbound interface GigabitEthernet 0/0/2
GigabitEthernet0/0/2 lr outbound:
cir: 128 Kbps, cbs: 16000 Byte

在公司总部和分部的出口路由器上部署流量监管，进一步缓解流量拥塞的问题。

在R1上的G0/0/1接口入方向上配置流量监管，CIR设为72kbit/s。

[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]qos car inbound cir 72

在R2上的G0/0/2接口入方向上配置流量监管，CIR设为72kbit/s。

[R2]interface GigabitEthernet 0/0/2
[R2-GigabitEthernet0/0/2]qos car inbound cir 72

4.5 步骤五. 配置基于流策略的拥塞管理与拥塞避免

在公司总部与分部的出口路由器上部署基于流策略的拥塞管理与拥塞避免。

保证语音流量低延迟，优先发送，保证视频流量拥有足够的带宽。

配置R1上的G0/0/1接口配置信任DSCP优先级。

[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]trust dscp

在R1上创建WRED丢弃模板video-r1，使其基于DSCP优先级进行丢弃，将阀值下限设为50，上限设为90，丢弃概率设为30。

[R1]drop-profile video-r1
[R1-drop-profile-video-r1]wred dscp
[R1-drop-profile-video-r1]dscp af32 low-limit 50 high-limit 90 discard-percentage 30

在R1上创建流分类class-af32-r1，匹配DSCP值为AF32的视频流量。创建流行为behavior-af32-r1，配置队列调度方式为AF，最大带宽占接口带宽百分比设为40，并与丢弃模板video-r1绑定。

[R1]traffic classifier class-af32-r1
[R1-classifier-class-af32-r1]if-match dscp af32
[R1-classifier-class-af32-r1]quit
[R1]traffic behavior behavior-af32-r1
[R1-behavior-behavior-af32-r1]queue af bandwidth pct 40
[R1-behavior-behavior-af32-r1]drop-profile video-r1

在R1上创建流分类class-ef-r1，匹配DSCP值为EF的语音流量。创建流行为behavior-ef-r1，配置队列的调度方式为EF，最大带宽占接口带宽百分比设为30。

[R1]traffic classifier class-ef-r1
[R1-classifier-class-ef-r1]if-match dscp ef
[R1-classifier-class-ef-r1]quit
[R1]traffic behavior behavior-ef-r1
[R1-behavior-behavior-ef-r1]queue ef bandwidth pct 30

在R1上创建流策略policy-r1，关联流分类class-af32-r1与流行为behavior-af32-r1，关联流分类class-ef-r1与流行为behavior-ef-r1，并在R1上的S1/0/0接口出方向上应用。

[R1]traffic policy policy-r1
[R1-trafficpolicy-policy-r1]classifier class-af32-r1 behavior behavior-af32-r1
[R1-trafficpolicy-policy-r1]classifier class-ef-r1 behavior behavior-ef-r1
[R1-trafficpolicy-policy-r1]quit
[R1]interface Serial 1/0/0
[R1-Serial1/0/0]traffic-policy policy-r1 outbound

在公司总部R1上配置完后，在公司分部R2上也作相应配置。

配置R2上的G0/0/2接口配置信任DSCP优先级。

[R2]interface GigabitEthernet 0/0/2
[R2-GigabitEthernet0/0/2]trust dscp

在R2上创建WRED丢弃模板video-r2，使其基于DSCP优先级进行丢弃，将阀值下限设为50，上限设为90，丢弃概率设为30。

[R2]drop-profile video-r2
[R2-drop-profile-video-r2]wred dscp
[R2-drop-profile-video-r2]dscp af32 low-limit 50 high-limit 90 discard-percentage 30

在R1上创建流分类class-af32-r2，匹配DSCP值为AF32的视频流量。创建流行为behavior-af32-r2，配置队列调度方式为AF，最大带宽占接口带宽百分比设为40，并与丢弃模板video-r2绑定。

[R2]traffic classifier class-af32-r2
[R2-classifier-class-af32-r2]if-match dscp af32
[R2-classifier-class-af32-r2]quit
[R2]traffic behavior behavior-af32-r2
[R2-behavior-behavior-af32-r2]queue af bandwidth pct 40
[R2-behavior-behavior-af32-r2]drop-profile video-r2

在R1上创建流分类class-ef-r2，匹配DSCP值为EF的语音流量。创建流行为behavior-ef-r2，配置队列的调度方式为EF，最大带宽占接口带宽百分比设为30。

[R2]traffic classifier class-ef-r2
[R2-classifier-class-ef-r2]if-match dscp ef
[R2-classifier-class-ef-r2]quit
[R2]traffic behavior behavior-ef-r2
[R2-behavior-behavior-ef-r2]queue ef bandwidth pct 30

在R1上创建流策略policy-r2，关联流分类class-af32-r2与流行为behavior-af32-r2，关联流分类class-ef-r2与流行为behavior-ef-r2，并在R2上的S1/0/0接口出方向上应用。

[R2]traffic policy policy-r2
[R2-trafficpolicy-policy-r2]classifier class-af32-r2 behavior behavior-af32-r2
[R2-trafficpolicy-policy-r2]classifier class-ef-r2 behavior behavior-ef-r2
[R2]interface Serial 1/0/0
[R2-Serial1/0/0]traffic-policy policy-r2 outbound

4.6 步骤六. 配置基于流策略实现流行为控制

公司总部现在出于优化的的目的将针对部分流量做控制，丢弃掉UDP端口号范围为4000至5000的部分视频流量。

在R1上创建ACL3003，匹配从R5去往R3 UDP端口范围为4000至5000的部分流量。

[R1]acl number 3003
[R1-acl-adv-3003]rule 0 permit udp source-port range 4000 5000 source 10.0.145.5 0 destination
10.0.34.3 0

在R1上创建流分类class-drop，匹配ACL3003。

[R1]traffic classifier class-drop
[R1-classifier-class-drop]if-match acl 3003

在R1上创建流行为behavior-drop，配置命令deny，执行禁止动作。

[R1]traffic behavior behavior-drop
[R1-behavior-behavior-drop]deny

在R1上创建流策略policy-drop，关联流分类class-drop与流行为behavior-drop，并在接口G0/0/5的入方向上应用。

[R1]traffic policy policy-drop
[R1-trafficpolicy-policy-drop]classifier class-drop behavior behavior-drop
[R1-trafficpolicy-policy-drop]quit
[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]traffic-policy policy-drop inbound

查看配置信息。

[R1]display traffic policy user-defined policy-drop
User Defined Traffic Policy Information:
Policy: policy-drop
Classifier: class-drop
Operator: OR
Behavior: behavior-drop
Deny

五、附加实验: 思考并验证

实验完成后，回顾QoS的知识框架，总结QoS中各项策略的使用范围与应用场景。

六、最终设备配置

R1

<R1>display current-configuration
[V200R007C00SPC600]
#
sysname R1
#
acl number 3003
rule 0 permit udp source 10.0.145.5 0 source-port range 4000 5000 destination 10.0.34.3 0
#
drop-profile video-r1
wred dscp
dscp af32 low-limit 50 high-limit 90 discard-percentage 30
#
traffic classifier class-drop operator or
if-match acl 3003
traffic classifier class-ef-r1 operator or
if-match dscp ef
traffic classifier class-af32-r1 operator or
if-match dscp af32
#
traffic behavior behavior-af32-r1
queue af bandwidth pct 40
drop-profile video-r1
traffic behavior behavior-ef-r1
queue ef bandwidth pct 30
traffic behavior behavior-drop
deny
#
traffic policy policy-drop
classifier class-drop behavior behavior-drop
traffic policy policy-r1
classifier class-af32-r1 behavior behavior-af32-r1
classifier class-ef-r1 behavior behavior-ef-r1
  #
interface Serial1/0/0
link-protocol ppp
ip address 10.0.12.1 255.255.255.0
traffic-policy policy-r1 outbound
#
interface GigabitEthernet0/0/1
ip address 10.0.145.1 255.255.255.0
trust dscp
qos car inbound cir 72 cbs 13536 pbs 22536 green pass yellow pass red discard
traffic-policy policy-drop inbound
#
ip route-static 10.0.34.0 255.255.255.0 10.0.12.2
#
return

R2

<R2>display current-configuration
[V200R007C00SPC600]
#
sysname R2
#
drop-profile video-r2
wred dscp
dscp af32 low-limit 50 high-limit 90 discard-percentage 30
#
traffic classifier class-ef-r2 operator or
if-match dscp ef
traffic classifier class-af32-r2 operator or
if-match dscp af32
#
traffic behavior behavior-af32-r2
queue af bandwidth pct 40
drop-profile video-r2
traffic behavior behavior-ef-r2
queue ef bandwidth pct 30
#
traffic policy policy-r2
classifier class-af32-r2 behavior behavior-af32-r2
classifier class-ef-r2 behavior behavior-ef-r2
#
interface Serial1/0/0
link-protocol ppp
ip address 10.0.12.2 255.255.255.0
traffic-policy policy-r2 outbound
#
interface GigabitEthernet0/0/2
ip address 10.0.34.2 255.255.255.0
trust dscp
qos car inbound cir 72 cbs 13536 pbs 22536 green pass yellow pass red discard
#
ip route-static 10.0.145.0 255.255.255.0 10.0.12.1
#
return

R3

<R3>display current-configuration
[V200R007C00SPC600]
#
sysname R3
#
interface GigabitEthernet0/0/2
ip address 10.0.34.3 255.255.255.0
#
ip route-static 0.0.0.0 0.0.0.0 10.0.34.2
#
return

R4

<R4>display current-configuration
[V200R007C00SPC600]
#
sysname R4
#
interface GigabitEthernet0/0/1
ip address 10.0.145.4 255.255.255.0
#
ip route-static 0.0.0.0 0.0.0.0 10.0.145.1
#
return

R5

<R5>display current-configuration
[V200R007C00SPC600]
#
sysname R5
#
interface GigabitEthernet0/0/1
ip address 10.0.145.5 255.255.255.0
#
ip route-static 0.0.0.0 0.0.0.0 10.0.145.1
#
return

S1

<S1>display current-configuration
#
!Software Version V200R008C00SPC500
sysname S1
#
acl number 3001
rule 0 permit ip source 10.0.145.4 0 destination 10.0.34.3 0
acl number 3002
rule 0 permit ip source 10.0.145.5 0 destination 10.0.34.3 0
#
traffic classifier class-video-s1 operator and
if-match acl 3002
traffic classifier class-voice-s1 operator and
if-match acl 3001
#
traffic behavior behavior-video-s1
remark dscp af32
traffic behavior behavior-voice-s1
remark dscp ef
#
traffic policy policy-video-s1
classifier class-video-s1 behavior behavior-video-s1
traffic policy policy-voice-s1
classifier class-voice-s1 behavior behavior-voice-s1
#
interface GigabitEthernet0/0/1
qos lr outbound cir 128 cbs 16000
#
interface GigabitEthernet0/0/4
traffic-policy policy-voice-s1 inbound
#
interface GigabitEthernet0/0/5
traffic-policy policy-video-s1 inbound
#
return

S2

<S2>display current-configuration
#
!Software Version V200R008C00SPC500
sysname S2
#
acl number 3001
rule 0 permit ip source 10.0.34.3 0 destination 10.0.145.4 0
acl number 3002
rule 0 permit ip source 10.0.34.3 0 destination 10.0.145.5 0
#
traffic classifier class-video-s2 operator and
if-match acl 3002
traffic classifier class-voice-s2 operator and
if-match acl 3001
#
traffic behavior behavior-video-s2
remark dscp af32
traffic behavior behavior-voice-s2
remark dscp ef
#
traffic policy policy-voice-video-s2
classifier class-voice-s2 behavior behavior-voice-s2
classifier class-video-s2 behavior behavior-video-s2
#
interface GigabitEthernet0/0/2
qos lr outbound cir 128 cbs 16000
#
interface GigabitEthernet0/0/3
traffic-policy policy-voice-video-s2 inbound
#
return

S3

<S3>display current-configuration
#
!Software Version V200R008C00SPC500
sysname S3
#
interface Vlanif1
ip address 10.0.145.3 255.255.255.0
#
ip route-static 0.0.0.0 0.0.0.0 10.0.145.1
#
return

S4

<S4>display current-configuration
#
!Software Version V200R008C00SPC500
sysname S4
#
interface Vlanif1
ip address 10.0.34.4 255.255.255.0
#
ip route-static 0.0.0.0 0.0.0.0 10.0.34.2
#
return

至此本文结束，大家可以根据此文一步一步完成实验！

如果本文对你有帮助，麻烦点赞、在看，有啥问题和建议欢迎在评论区讨论！

原创声明：本文系作者授权腾讯云开发者社区发表，未经许可，不得转载。

如有侵权，请联系 cloudcommunity@tencent.com 删除。

网络安全

运维

原创声明：本文系作者授权腾讯云开发者社区发表，未经许可，不得转载。

如有侵权，请联系 cloudcommunity@tencent.com 删除。

网络安全

运维

登录后参与评论

0 条评论

热度