| [Router] vlan batch 66 88 [Router] acl number 3066 [Router-acl-basic-3066] rule 5 permit ip source 192.168.66.0 0.0.0.255 //配置规则5，允许源地址为192.168.66.0网段的报文通过 [Router-acl-basic-3066] rule 10 permit ip source 192.168.88.0 0.0.0.255 //配置规则10，允许源地址为192.168.88.0网段的报文通过 [Router] acl number 3088 [Router-acl-basic-3088] rule 5 permit ip source 192.168.66.0 0.0.0.255 //配置规则5，允许源地址为192.168.66.0网段的报文通过 [Router] qos queue-profile limit //创建队列模板limit [Router-queue-profile-limit] queue 3 gts cir 64 cbs 1600 //配置队列3的承诺信息速率为64kbit/s [Router] traffic classifier c1 operator or [Router-classifier-c1] if-match acl 3088 //配置流分类c1：匹配规则为ACL 3088 [Router] traffic behavior b1 [Router-behavior-b1] remark local-precedence af3 //配置流行为b1：对匹配流分类的报文重标记本地优先级为AF3，不指定流行为为permit或deny时，默认为permit。 [Router] traffic policy p1 [Router-policy-p1] classifier c1 behavior b1 //配置流策略p1:绑定流分类c1与流行为b1 [Router] interface Vlanif 66 [Router-vlanif66] ip address 192.168.66.1 255.255.255.0 [Router] interface Vlanif 88 [Router-vlanif88] ip address 192.168.88.1 255.255.255.0 [Router] interface GigabitEthernet 0/0/2 [Router-GigabitEthernet 0/0/2]port link-type trunk //配置接口的链路类型为Trunk [Router-GigabitEthernet 0/0/2] port trunk allow-pass vlan 66 88 //配置Trunk类型接口加入vlan 66和vlan 88 [Router-GigabitEthernet 0/0/2] traffic-policy p1 inbound //在接口入方向上应用流策略p1 [Router] interface GigabitEthernet 0/0/1 [Router-GigabitEthernet 0/0/1] ip address 106.3.45.2 255.255.255.0 [Router-GigabitEthernet 0/0/1] qos queue-profile limit //在接口上应用队列模板limit [Router-GigabitEthernet 0/0/1] nat outbound 3066 //在接口上对匹配ACL 3001的报文做NAT [Router] ip route-static 0.0.0.0 0.0.0.0 106.3.45.1 |
