【正文】 試驗(yàn)一 、 QOS 的基本實(shí)驗(yàn)和拓?fù)涞拇罱? 實(shí)驗(yàn)、簡(jiǎn)單的認(rèn)識(shí) MQC 的一個(gè)實(shí)驗(yàn) 拓?fù)淙缟希? 需求：某公司希望你把 ， ftp， icmp， dhcp 都抓取下來(lái)，在上面做一些策略。 1. r2sh classmap Class Map matchall TELNET (id 6) Match protocol tel Class Map matchall OSPF (id 5) Match protocol ospf Class Map matchall ICMP (id 2) Match protocol icmp Class Map matchall HTTP (id 1) Match protocol Class Map matchall DHCP (id 4) Match protocol dhcp Class Map matchany classdefault (id 0) Match any Class Map matchall FTP (id 3) Match protocol ftp 策略 ，調(diào)用所有的 class 進(jìn)入到策略，領(lǐng)導(dǎo)說(shuō)， 把 icmp 干掉。 r2sh policymap Policy Map feng Class HTTP Class FTP Class DHCP Class OSPF Class TELNET Class ICMP 3．我得把策略應(yīng)用到接口上 r2(config)int s1/0 r2(configif)servicepolicy input feng r2sh policymap interface s1/0 Serial1/0 Servicepolicy input: feng Classmap: HTTP (matchall) 5 packets, 411 bytes 5 minute offered rate 0 bps Match: protocol Classmap: FTP (matchall) 4 packets, 184 bytes 5 minute offered rate 0 bps Match: protocol ftp Classmap: DHCP (matchall) 0 packets, 0 bytes 5 minute offered rate 0 bps Match: protocol dhcp Classmap: OSPF (matchall) 6 packets, 504 bytes 5 minute offered rate 0 bps Match: protocol ospf Classmap: TELNET (matchall) 10 packets, 452 bytes 5 minute offered rate 0 bps Match: protocol tel Classmap: ICMP (matchall) 14 packets, 1000 bytes 5 minute offered rate 0 bps Match: protocol icmp Classmap: classdefault (matchany) 6145 packets, 1249329 bytes 5 minute offered rate 39000 bps, drop rate 0 bps Match: any r2(config)policymap feng r2(configpmap)class ICMP r2(configpmapc)drop r2sh policymap int s1/0 in class ICMP Serial1/0 Servicepolicy input: feng Classmap: ICMP (matchall) 71 packets, 5120 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: protocol icmp Drop 實(shí)驗(yàn)、基本的 NBAR 實(shí)驗(yàn)，發(fā)現(xiàn)和策略 需求， 進(jìn)行 NBAR 的發(fā)現(xiàn)，給 HTTP 分配 25k 的帶寬 r2(config)ip cef r2(config)int s1/0 r2(configif)ip nbar protocoldiscovery 開啟 nbar 的協(xié)議發(fā)現(xiàn) r2 sh ip nbar protocoldiscovery int s1/0 來(lái)查看接口下面 flow 里面的協(xié)議 Serial1/0 Input Output Protocol Packet Count Packet Count Byte Count Byte Count 5min Bit Rate (bps) 5min Bit Rate (bps) 5min Max Bit Rate (bps) 5min Max Bit Rate (bps) icmp 16 16 1120 1120 0 0 0 0 ospf 7 6 588 504 0 0 0 0 tel 7 7 316 316 0 0 0 0 3 4 150 471 0 0 0 0 ftp 4 4 184 184 r2sh ip nbar portmap 查看它所有的可以識(shí)別的端口 portmap bgp udp 179 portmap bgp tcp 179 portmap citrix udp 1604 portmap citrix tcp 1494 portmap cuseeme udp 7648 7649 24032 portmap cuseeme tcp 7648 7649 portmap dhcp udp 67 68 portmap dns udp 53 portmap dns tcp 53 portmap edonkey tcp 4662 portmap exchange tcp 135 portmap fasttrack tcp 1214 portmap finger tcp 79 portmap ftp tcp 21 portmap gnutella tcp 6346 6347 6348 6349 6355 5634 portmap gopher udp 70 portmap gopher tcp 70 portmap h323 udp 1300 1718 1719 1720 11720 portmap h323 tcp 1300 1718 1719 1720 11000 11999 portmap tcp 80 portmap imap udp 143 220 portmap imap tcp 143 220 portmap irc udp 194 portmap irc tcp 194 portmap kerberos udp 88 749 portmap kerberos tcp 88 749 portmap l2tp udp 1701 portmap ldap udp 389 portmap ldap tcp 389 portmap mgcp udp 2427 2727 portmap mgcp