码迷,mamicode.com
首页 > 其他好文 > 详细

Juniper srx系列防火墙端口限速

时间:2017-03-31 23:00:26      阅读:296      评论:0      收藏:0      [点我收藏+]

标签:and   input   限制   unit   alt   down   .com   images   out   

技术分享

限制上传速度(应用到内网接口)
set firewall family inet filter upload-limit term 0 from source-address 192.168.0.16/32
set firewall family inet filter upload-limit term 0 then policer upload-1mb
set firewall family inet filter upload-limit term 0 then accept
set firewall family inet filter upload-limit term 1 from source-address 192.168.0.0/24
set firewall family inet filter upload-limit term 1 then policer upload-9mb
set firewall family inet filter upload-limit term 1 then accept
set firewall family inet filter upload-limit term 2 then accept (其它网段不限速)
set firewall policer upload-1mb if-exceeding bandwidth-limit 1m
set firewall policer upload-1mb if-exceeding burst-size-limit 625k
set firewall policer upload-1mb then discard
set firewall policer upload-9mb if-exceeding bandwidth-limit 3m
set firewall policer upload-9mb if-exceeding burst-size-limit 625k
set firewall policer upload-9mb then discard
应用到内网接口
set interfaces vlan unit 100 family inet filter input upload-limit

限制下载速度(应用到内网接口)
set firewall family inet filter download-limit term 0 from destination-address 192.168.0.222/32
set firewall family inet filter download-limit term 0 then policer download-1mb
set firewall family inet filter download-limit term 0 then accept
set firewall family inet filter download-limit term 1 from destination-address 192.168.0.0/24
set firewall family inet filter download-limit term 1 then policer download-9mb
set firewall family inet filter download-limit term 1 then accept
set firewall family inet filter download-limit term 2 then accept (其它网段不限速)
set firewall policer download-1mb if-exceeding bandwidth-limit 1m
set firewall policer download-1mb if-exceeding burst-size-limit 625k
set firewall policer download-1mb then discard
set firewall policer download-9mb if-exceeding bandwidth-limit 3m
set firewall policer download-9mb if-exceeding burst-size-limit 625k
set firewall policer download-9mb then discard
应用到内网接口
set interfaces vlan unit 100 family inet filter output download-limit

Juniper srx系列防火墙端口限速

标签:and   input   限制   unit   alt   down   .com   images   out   

原文地址:http://www.cnblogs.com/id404/p/6653960.html

(0)
(0)
   
举报
评论 一句话评论(0
登录后才能评论!
© 2014 mamicode.com 版权所有  联系我们:gaon5@hotmail.com
迷上了代码!