7Of0uT,流量限速配置没有生效
问题描述:
路由器ms2630-xs 软件版本7.1.064 Release 6728P25
流量限速配置要求:1、对每个ip地址限制下载带宽为15Mbps,上行带宽为10Mbps;
2、对于p2p应用配置限制下载带宽为100Kbps,上行带宽为100Kbps
具体配置如下,但是这些配置没有生效,使用测速软件测速发现下载带宽和上行带宽都没有收到限制,p2p应用的限制也没有生效,这个是为什么?
请大佬帮忙指点下
object-group ip address usergrp
0 network host name 192.168.100.4 10 network host address 192.168.100.254 # #
#
interface GigabitEthernet0/0 port link-mode route description Multiple_Line bandwidth 30000
qos car inbound carl 2 cir 15000 cbs 937500 ebs 0 green pass red discard yellow pass qos car inbound any cir 30000 cbs 1875000 ebs 0 green pass red discard yellow pass qos car outbound carl 1 cir 10000 cbs 625000 ebs 0 green pass red discard yellow pass qos car outbound any cir 30000 cbs 1875000 ebs 0 green pass red discard yellow pass
#
# #
object-policy ip Any-Any rule 0 pass source-ip usergrp app-group p2p_13 logging time-range work rule 1 inspect p2p source-ip usergrp time-range work rule 65534 pass logging counting # security-zone name Local # security-zone name Trust import interface Vlan-interface1 # security-zone name DMZ # security-zone name Untrust import interface GigabitEthernet0/0 # security-zone name Management # zone-pair security source Any destination Any object-policy apply ip Any-Any # scheduler logfile size 16 # line class console user-role network-admin # #
#
#
#
time-range work 09:00 to 18:00 working-day # acl basic name connlimitAcl_32_256 rule 65534 permit # acl advanced name WebHttpHttps2 rule 65533 deny tcp destination-port eq www rule 65534 deny tcp destination-port eq 443 # acl advanced name WebHttpHttps7 rule 65533 deny tcp destination-port eq www rule 65534 deny tcp destination-port eq 443 # acl mac 4999 rule 0 deny source-mac fcaa-14ff-fc60 ffff-ffff-ffff rule 5 permit # password-control enable undo password-control aging enable undo password-control history enable password-control length 6 password-control login-attempt 3 exceed lock-time 10 password-control update-interval 0 password-control login idle-time 0 # domain system # domain default enable system # user-group system
# #
#
#
app-group p2p_13 description "User-defined application group" include application BitTorrent include application iQiYiPPS include application Letv include application TencentVideo include application Thunder include application XunLeiKanKan # #
attack-defense policy AtkInterface6 signature detect smurf action drop signature detect large-icmp action drop signature detect large-icmpv6 action drop signature detect tcp-invalid-flags action drop signature detect tcp-null-flag action drop signature detect tcp-all-flags action drop signature detect tcp-syn-fin action drop signature detect tcp-fin-only action drop signature detect land action drop signature detect winnuke action drop signature detect fraggle action drop signature detect ip-option record-route action drop signature detect ip-option strict-source-routing action drop signature detect icmp-type destination-unreachable action drop signature detect icmp-type redirect action drop # attack-defense policy AtkInterface7 scan detect level high action logging block-source syn-flood detect non-specific syn-flood action drop udp-flood detect non-specific udp-flood action drop icmp-flood detect non-specific icmp-flood action drop # url-filter policy p2p default-action permit # url-filter category custom severity 65535 # app-profile p2p url-filter apply policy p2p # wlan ap-group default-group vlan 1 # traffic-policy statistics bandwidth enable rule 1 name p2p_13 time-range work action qos profile p2p_13 source-address address-set usergrp application app BitTorrent application app iQiYiPPS application app Letv application app TencentVideo application app Thunder application app XunLeiKanKan profile name checkdk per-ip bandwidth-threshold-detect enable per-ip bandwidth-threshold-learn enable per-ip bandwidth-threshold-learn duration 2880 profile name p2p_13 bandwidth downstream maximum 100 bandwidth upstream maximum 100 #
# return
组网及组网描述:
配置没看出啥问题,可以用实际业务测试下
5小时前回答[msr2630]display traffic-policy statistics bandwidth downstream per-rule Slot 0 : Codes: PP(Passed Packets), PB(Passed Bytes), DP(Dropped Packets), DB(Dropped Bytes), PR(Passed Rate:kbps), DR(Dropped Rate:kbps), FPP(Final Passed Packets), FPB(Final Passed Bytes),FPR(Final Passed Rate:kbps) --------------------------------------------------------------------------------------------------------------------------------- Rule name State Profile name PP PB DP DB PR DR FPP FPB FPR --------------------------------------------------------------------------------------------------------------------------------- p2p_13 Enabled p2p_13 0 0 0 0 0.0 0.0 0 0 0.0 --------------------------------------------------------------------------------------------------------------------------------- ---------------------------------------------------------------------------------------------------------------------------------
查看没有流量
你正在,流量限速配置没有生效