标签:tput dsc form scp 这一 ini RKE put efault
1、PC-SERVER的TELNET流量,标记为precedence 4
要求拥塞时保留带宽的10%,(100%)
执行WRED,当到达25个包时进行丢弃,概率为8分之1
带宽限速,为100KB,正常的转发,超出的丢弃
2、PC-SERVER的http流量,标记为DSCP 40
要求拥塞时带宽为10%
执行WRED,达到30包时开始丢弃,概率为5分之1
带宽限速,最大带宽为2M,最小带宽为1M, 正常的转发,超出的remark pre 2 ,惩罚的丢弃
3、PC-SERVER的icmp ping 流量,标记为predecence 6
要求拥塞时带宽为2%
执行WRED,达到20包时开始丢弃,概率为2分之1 //故意设置成这样,看效果
带宽限速 ,最小带宽为8000kbps, 正常转发发,超出丢弃 .//发送ping包,可以测试size= 1000,就会看到具体的表现,2分之一丢包
4、针对于其它去往SERVER的流量,全部限速为1M,超出drop ,正常流量转发
使用公平队列
并且使用RED进行拥塞避免
1、先做分类标记,,我选择在R2的入接口上做,
policy-map wfy class telnet set ip precedence 4 class http set ip dscp cs5 class ping set ip precedence 6 Extended IP access list 120 10 permit ip any host 23.0.0.3 Extended IP access list http 10 permit tcp host 192.168.1.10 host 23.0.0.3 eq www Extended IP access list ping 10 permit icmp host 192.168.1.10 host 23.0.0.3 Extended IP access list telnet 10 permit tcp host 192.168.1.10 host 23.0.0.3 eq telnet R2#
二、做队列,拥塞避免以及拥塞监管
policy-map out class telnet bandwidth percent 10 random-detect random-detect precedence 4 25 40 8 police cir 100000 conform-action transmit exceed-action drop class http bandwidth percent 10 //10% random-detect dscp-based random-detect dscp 40 30 40 5 police cir 1000000 pir 2000000 be 1000 conform-action transmit exceed-action set-prec-transmit 2 violate-action drop class ping bandwidth percent 2 random-detect random-detect precedence 6 20 40 2 police cir 8000 //这一部份可以验证直接看到结果 conform-action transmit exceed-action drop class class-default fair-queue random-detect police cir 8000000 conform-action transmit exceed-action drop
查看配置
数据包入接口中,配置了分类和标记
R2#show policy-map inter f0/0 FastEthernet0/0 Service-policy input: wfy Class-map: telnet (match-all) 47 packets, 2826 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: access-group name telnet QoS Set precedence 4 Packets marked 47 Class-map: http (match-all) 25 packets, 1500 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: access-group name http QoS Set dscp af11 Packets marked 0 Class-map: ping (match-all) 1179 packets, 1523946 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: access-group name ping QoS Set precedence 6 Packets marked 1179 Class-map: class-default (match-any) 0 packets, 0 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: any R2#
数据出接口
R2#show policy-map inter f0/1 FastEthernet0/1 Service-policy output: out Class-map: telnet (match-all) 47 packets, 2606 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: access-group name telnet Queueing Output Queue: Conversation 265 Bandwidth 10 (%) Bandwidth 1000 (kbps) (pkts matched/bytes matched) 0/0 (depth/total drops/no-buffer drops) 0/0/0 exponential weight: 9 mean queue depth: 0 class Transmitted Random drop Tail drop Minimum Maximum Mark pkts/bytes pkts/bytes pkts/bytes thresh thresh prob 0 0/0 0/0 0/0 20 40 1/10 1 0/0 0/0 0/0 22 40 1/10 2 0/0 0/0 0/0 24 40 1/10 3 0/0 0/0 0/0 26 40 1/10 4 0/0 0/0 0/0 25 40 1/8 5 0/0 0/0 0/0 30 40 1/10 6 0/0 0/0 0/0 32 40 1/10 7 0/0 0/0 0/0 34 40 1/10 rsvp 0/0 0/0 0/0 36 40 1/10 police: cir 100000 bps, bc 3125 bytes conformed 0 packets, 0 bytes; actions: transmit exceeded 0 packets, 0 bytes; actions: drop conformed 0 bps, exceed 0 bps Class-map: http (match-all) 25 packets, 1383 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: access-group name http Queueing Output Queue: Conversation 266 Bandwidth 10 (%) Bandwidth 1000 (kbps) (pkts matched/bytes matched) 0/0 (depth/total drops/no-buffer drops) 0/0/0 exponential weight: 9 mean queue depth: 0 dscp Transmitted Random drop Tail drop Minimum Maximum Mark pkts/bytes pkts/bytes pkts/bytes thresh thresh prob af11 0/0 0/0 0/0 32 40 1/10 af12 0/0 0/0 0/0 28 40 1/10 af13 0/0 0/0 0/0 24 40 1/10 af21 0/0 0/0 0/0 32 40 1/10 af22 0/0 0/0 0/0 28 40 1/10 af23 0/0 0/0 0/0 24 40 1/10 af31 0/0 0/0 0/0 32 40 1/10 af32 0/0 0/0 0/0 28 40 1/10 af33 0/0 0/0 0/0 30 40 1/5 af41 0/0 0/0 0/0 32 40 1/10 af42 0/0 0/0 0/0 28 40 1/10 af43 0/0 0/0 0/0 24 40 1/10 cs1 0/0 0/0 0/0 22 40 1/10 cs2 0/0 0/0 0/0 24 40 1/10 cs3 0/0 0/0 0/0 26 40 1/10 cs4 0/0 0/0 0/0 28 40 1/10 cs5 0/0 0/0 0/0 30 40 1/10 cs6 0/0 0/0 0/0 32 40 1/10 cs7 0/0 0/0 0/0 34 40 1/10 ef 0/0 0/0 0/0 36 40 1/10 rsvp 0/0 0/0 0/0 36 40 1/10 default 0/0 0/0 0/0 20 40 1/10 police: cir 1000000 bps, bc 31250 bytes pir 2000000 bps, be 1000 bytes conformed 0 packets, 0 bytes; actions: transmit exceeded 0 packets, 0 bytes; actions: set-prec-transmit 2 violated 0 packets, 0 bytes; actions: drop conformed 0 bps, exceed 0 bps, violate 0 bps Class-map: ping (match-all) 1179 packets, 1523946 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: access-group name ping Queueing Output Queue: Conversation 267 Bandwidth 2 (%) Bandwidth 200 (kbps) (pkts matched/bytes matched) 0/0 (depth/total drops/no-buffer drops) 0/0/0 exponential weight: 9 mean queue depth: 0 class Transmitted Random drop Tail drop Minimum Maximum Mark pkts/bytes pkts/bytes pkts/bytes thresh thresh prob 0 0/0 0/0 0/0 20 40 1/10 1 0/0 0/0 0/0 22 40 1/10 2 0/0 0/0 0/0 24 40 1/10 3 0/0 0/0 0/0 26 40 1/10 4 0/0 0/0 0/0 28 40 1/10 5 0/0 0/0 0/0 30 40 1/10 6 953/1183782 0/0 0/0 20 40 1/2 7 0/0 0/0 0/0 34 40 1/10 rsvp 0/0 0/0 0/0 36 40 1/10 police: cir 8000 bps, bc 1500 bytes conformed 48 packets, 48612 bytes; actions: transmit exceeded 226 packets, 340164 bytes; actions: drop conformed 0 bps, exceed 0 bps Class-map: class-default (match-any) 382 packets, 39276 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: any Queueing Flow Based Fair Queueing Maximum Number of Hashed Queues 256 (total queued/total drops/no-buffer drops) 0/0/0 exponential weight: 9 class Transmitted Random drop Tail drop Minimum Maximum Mark pkts/bytes pkts/bytes pkts/bytes thresh thresh prob 0 192/19698 0/0 0/0 20 40 1/10 1 0/0 0/0 0/0 22 40 1/10 2 0/0 0/0 0/0 24 40 1/10 3 0/0 0/0 0/0 26 40 1/10 4 0/0 0/0 0/0 28 40 1/10 5 0/0 0/0 0/0 30 40 1/10 6 0/0 0/0 0/0 32 40 1/10 7 0/0 0/0 0/0 34 40 1/10 rsvp 0/0 0/0 0/0 36 40 1/10 police: cir 8000000 bps, bc 250000 bytes conformed 0 packets, 0 bytes; actions: transmit exceeded 0 packets, 0 bytes; actions: drop conformed 0 bps, exceed 0 bps R2#
验证实验结果
pc#ping 23.0.0.3 size 1000
Type escape sequence to abort.
Sending 5, 1000-byte ICMP Echos to 23.0.0.3, timeout is 2 seconds:
!.!.! //这里可以看到二分之一的丢包概率出现了
---------------------------------
CCIE 成长之路 --- 梅利
标签:tput dsc form scp 这一 ini RKE put efault
原文地址:https://www.cnblogs.com/meili333/p/14101188.html