其它文章
常用默认端口列表及功能中文注解
IP访问控制列表
维护基于时间的访问控制列表
Cisco网络设备访问安全基础
二、媒体访问控制(MAC)
用SSH替代Telnet建立更安全的连接
运用ACL来构建坚固的防火墙体系
反向访问列表在实际中的应用过程
SC101 NETGEAR网络数据存储中心(图)
怎样使用NetFlow分析网络异常流量二
Cisco技术 / 网络安全 / 访问控制 / 通过ACL控制rate-limit

通过ACL控制rate-limit

作者:     http://cisco.ccxx.net

  interface Hssi0/0/0
  description 45Mbps to R2
  rate-limit output access-group 101 20000000 24000 32000 conform-action set-prec-
  transmit 5 exceed-action set-prec-transmit 0
  rate-limit output access-group 102 10000000 24000 32000 conform-action
  set-prec-transmit 5 exceed-action drop
  rate-limit output 8000000 16000 24000 conform-action set-prec-transmit 5
  exceed-action drop
  ip address 10.1.0.9 255.255.255.0
  !
  access-list 101 permit tcp any any eq www
  access-list 102 permit tcp any any eq ftp
  
  To verify the configuration and monitor CAR statistics, use the show interfaces rate-limit command:
  
  Router# show interfaces hssi 0/0/0 rate-limit
  
  
  Hssi0/0/0 45Mbps to R2
  Input
  matches: access-group 101
  params: 20000000 bps, 24000 limit, 32000 extended limit
  conformed 3 packets, 189 bytes; action: set-prec-transmit 5
  exceeded 0 packets, 0 bytes; action: set-prec-transmit 0
  last packet: 309100ms ago, current burst: 0 bytes
  last cleared 00:08:00 ago, conformed 0 bps, exceeded 0 bps
  matches: access-group 102
  params: 10000000 bps, 24000 limit, 32000 extended limit
  conformed 0 packets, 0 bytes; action: set-prec-transmit 5
  exceeded 0 packets, 0 bytes; action: drop
  last packet: 19522612ms ago, current burst: 0 bytes
  last cleared 00:07:18 ago, conformed 0 bps, exceeded 0 bps
  matches: all traffic
  params: 8000000 bps, 16000 limit, 24000 extended limit
  conformed 5 packets, 315 bytes; action: set-prec-transmit 5
  exceeded 0 packets, 0 bytes; action: drop
  last packet: 9632ms ago, current burst: 0 bytes
  last cleared 00:05:43 ago, conformed 0 bps, exceeded 0 bps
  
  


收藏本页

共 0 人推荐文章 通过ACL控制rate-limit

Copyright © 2006 cisco.ccxx.net 版权所有.提供Cisco技术,Cisco培训,CCNA,CCNP,CCIE培训,Cisco论坛CCIE实验室
上海地区Cisco培训、CCNA培训、CCNP培训、CCIE培训