Добрый день,
нужно ограничить скорость на каждый IP в локальной сети, чтобы у каждого Ip максимальная скорость была не больше 5 Mbps.Я ограничил общую скорость на виртуальном интерфейсе,
interface GigabitEthernet0/1.150
rate-limit input 20480000 3840000 7680000 conform-action transmit exceed-action drop
rate-limit output 20480000 3840000 7680000 conform-action transmit exceed-action drop
а как можно сделать чтобы контролировать еще скорость каждого ip?
Я сделал так, но это не сработало
создал ACL, добавил сеть IP , которые хочу резать
access-list 106 remark __--agf+mga_servers--__
access-list 106 permit ip 192.168.140.0 0.0.0.255 any
access-list 106 permit ip 192.168.150.0 0.0.0.255 any
interface GigabitEthernet0/1.150
rate-limit input 20480000 3840000 7680000 conform-action transmit exceed-action drop
rate-limit input access-group 106 10240000 1920000 3840000 conform-action transmit exceed-action drop
rate-limit output 20480000 3840000 7680000 conform-action transmit exceed-action drop
rate-limit output access-group 106 10240000 1920000 3840000 conform-action transmit exceed-action drop
В какую сторону копать ?
Версия IOS
CoreRouter-WestBlockC1#show version
Cisco IOS Software, C3900e Software (C3900e-UNIVERSALK9-M), Version 15.1(1)T2, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by Cisco Systems, Inc.
Compiled Sat 23-Oct-10 05:29 by prod_rel_team
ROM: System Bootstrap, Version 15.1(1r)T2, RELEASE SOFTWARE (fc1)
CoreRouter-WestBlockC1 uptime is 4 days, 2 hours, 25 minutes
System returned to ROM by power-on
System restarted at 15:13:22 AZT Thu May 8 2014
System image file is "flash0:c3900e-universalk9-mz.SPA.151-1.T2.bin"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
Cisco CISCO3925-CHASSIS (revision 1.0) with C3900-SPE200/K9 with 691200K/291840K bytes of memory.
Processor board ID FTX1448AHZZ
4 Gigabit Ethernet interfaces
1 Virtual Private Network (VPN) Module
DRAM configuration is 72 bits wide with parity enabled.
256K bytes of non-volatile configuration memory.
254464K bytes of ATA System CompactFlash 0 (Read/Write)
License Info:
License UDI:
-------------------------------------------------
Device# PID SN
-------------------------------------------------
*0 C3900-SPE200/K9 FOC14454S03
