首页 科技问答 7Of0uT,流量限速配置没有生效

7Of0uT,流量限速配置没有生效

科技问答 322
1686928626,CRM论坛(CRMbbs.com)——一个让用户更懂CRM的垂直性行业内容平台,CRM论坛致力于互联网、客户管理、销售管理、SCRM私域流量内容输出5年。 如果您有好的内容,欢迎向我们投稿,共建CRM多元化生态体系,创建CRM客户管理一体化生态解决方案。内容来源:知了社区

问题描述:

路由器ms2630-xs 软件版本7.1.064 Release 6728P25

流量限速配置要求:1、对每个ip地址限制下载带宽为15Mbps,上行带宽为10Mbps;

                              2、对于p2p应用配置限制下载带宽为100Kbps,上行带宽为100Kbps

具体配置如下,但是这些配置没有生效,使用测速软件测速发现下载带宽和上行带宽都没有收到限制,p2p应用的限制也没有生效,这个是为什么?

请大佬帮忙指点下


QoS carl 1 source-ip-address object-group usergrp per-address time-range work qos carl 2 destination-ip-address object-group usergrp per-address time-range work
object-group ip address usergrp
 0 network host name 192.168.100.4  10 network host address 192.168.100.254 # #
#
interface GigabitEthernet0/0 port link-mode route description Multiple_Line bandwidth 30000

qos car inbound carl 2 cir 15000 cbs 937500 ebs 0 green pass red discard yellow pass qos car inbound any cir 30000 cbs 1875000 ebs 0 green pass red discard yellow pass qos car outbound carl 1 cir 10000 cbs 625000 ebs 0 green pass red discard yellow pass qos car outbound any cir 30000 cbs 1875000 ebs 0 green pass red discard yellow pass
#
# #
object-policy ip Any-Any rule 0 pass source-ip usergrp app-group p2p_13 logging time-range work rule 1 inspect p2p source-ip usergrp time-range work rule 65534 pass logging counting # security-zone name Local # security-zone name Trust import interface Vlan-interface1 # security-zone name DMZ # security-zone name Untrust import interface GigabitEthernet0/0 # security-zone name Management # zone-pair security source Any destination Any object-policy apply ip Any-Any # scheduler logfile size 16 # line class console user-role network-admin # #
#
#
#
time-range work 09:00 to 18:00 working-day  # acl basic name connlimitAcl_32_256 rule 65534 permit # acl advanced name WebHttpHttps2 rule 65533 deny tcp destination-port eq www rule 65534 deny tcp destination-port eq 443 # acl advanced name WebHttpHttps7 rule 65533 deny tcp destination-port eq www rule 65534 deny tcp destination-port eq 443 # acl mac 4999 rule 0 deny source-mac fcaa-14ff-fc60 ffff-ffff-ffff rule 5 permit # password-control enable  undo password-control aging enable  undo password-control history enable  password-control length 6 password-control login-attempt 3 exceed lock-time 10 password-control update-interval 0 password-control login idle-time 0 # domain system # domain default enable system # user-group system
# #
#
#
app-group p2p_13 description "User-defined application group" include application BitTorrent include application iQiYiPPS include application Letv include application TencentVideo include application Thunder include application XunLeiKanKan # #
attack-defense policy AtkInterface6 signature detect smurf action drop signature detect large-icmp action drop signature detect large-icmpv6 action drop signature detect tcp-invalid-flags action drop signature detect tcp-null-flag action drop signature detect tcp-all-flags action drop signature detect tcp-syn-fin action drop signature detect tcp-fin-only action drop signature detect land action drop signature detect winnuke action drop signature detect fraggle action drop signature detect ip-option record-route action drop signature detect ip-option strict-source-routing action drop signature detect icmp-type destination-unreachable action drop signature detect icmp-type redirect action drop # attack-defense policy AtkInterface7 scan detect level high action logging block-source syn-flood detect non-specific syn-flood action drop  udp-flood detect non-specific udp-flood action drop  icmp-flood detect non-specific icmp-flood action drop  # url-filter policy p2p default-action permit # url-filter category custom severity 65535 # app-profile p2p url-filter apply policy p2p # wlan ap-group default-group vlan 1 # traffic-policy  statistics bandwidth enable  rule 1 name p2p_13    time-range work    action qos profile p2p_13    source-address address-set usergrp    application app BitTorrent    application app iQiYiPPS    application app Letv    application app TencentVideo    application app Thunder    application app XunLeiKanKan  profile name checkdk   per-ip bandwidth-threshold-detect enable    per-ip bandwidth-threshold-learn enable    per-ip bandwidth-threshold-learn duration 2880  profile name p2p_13   bandwidth downstream maximum 100    bandwidth upstream maximum 100  #
# return


组网及组网描述:


5小时前提问

配置没看出啥问题,可以用实际业务测试下

5小时前回答

[msr2630]display traffic-policy statistics bandwidth downstream per-rule Slot 0 : Codes: PP(Passed Packets), PB(Passed Bytes), DP(Dropped Packets), DB(Dropped Bytes), PR(Passed Rate:kbps), DR(Dropped Rate:kbps), FPP(Final Passed Packets), FPB(Final Passed Bytes),FPR(Final Passed Rate:kbps) --------------------------------------------------------------------------------------------------------------------------------- Rule name State Profile name PP PB DP DB PR DR FPP FPB FPR --------------------------------------------------------------------------------------------------------------------------------- p2p_13 Enabled p2p_13 0 0 0 0 0.0 0.0 0 0 0.0 --------------------------------------------------------------------------------------------------------------------------------- ---------------------------------------------------------------------------------------------------------------------------------

查看没有流量

你正在,流量限速配置没有生效

QoS