几个常见的配置

1、1、 admin_acl的配置 ip access-list admin_acl seq 10 permit ip .255 any seq 20 permit ip .255 any seq 30 permit ip 92 .15 any seq 31 permit ip 8 .15 any any seq 40 deny tcp any any eq telnet seq 50 deny tcp any any eq ssh seq 60 deny tcp any any eq ftp seq 70

2、deny tcp any any eq ftp-data seq 80 deny tcp any any eq 161 seq 90 deny udp any any eq tftp seq 91 deny udp any any eq snmp seq 100 permit ip any any!admin-access-group admin_acl in count log2、 用户绑定 interface one multibindsubscriber name dslam password dslamport ethernet 1/7 no shutdown encapsulatio

3、n dot1q dot1q pvc 100 bind subscriber dslamlocal password dslam3、 L2TP配置context tunnel_mi domain libellotest1 domain libellotest2 ! no ip domain-lookup ! interface To_MI_LNS1  ip address 13/28 no logging console aaa authentication subscriber none ! subscriber default   tunnel d

4、omain service telnet client ! l2tp-peer name MI_LNS1 media udp-ip remote ip 14 local 13  function lac-only  local-name MT_LAC1  tunnel-auth key mi_access1 ! l2tp-peer name MI_LNS2 media udp-ip remote ip 14 local 13  local-name MT_

5、LAC2  function lac-only  tunnel-auth key mi_access2 ! l2tp-group name grp_routeur1  algorithm priority  deadtime 5  domain libellotest1  domain libellotest2  peer name MI_LNS1 preference 10  peer name MI_LNS2 preference 20 4、The network topology as shown below

6、:the SE800 configuration is  attached in the file config.txtSE800 function as LTS box, using unnamed peer accept l2tp tunnel from LAC, and switch the tunnel to LNS. LNS terminate PPPoE session and assign IP address. In the SE800, the tunnel between LAC and LTS is created on loopback ipaddress,

7、.1 and 0, the slot 11 and slot 11 are GE module and used for route traffic between and 0, card 11 and card 12 configed slot redundant, with same priority. When slot 11 and slot 12 are both online, 1000 pppoe session from LAC (from tester) was load balanced on slot 11 and

8、slot 12, as shown belowlocalSE3#show l2tp global ipcPPA Name Registration Time Chg# Ccts Tun-Cr Tun-Del - - - - - - Slot 2 IPPA Mon Sep 27 15:32:40 2 6 3 0 Slot 2 EPPA Mon Sep 27 15:32:41 4 6 3 0 Slot 11 IPPA Mon Sep 27 15:32:41 6 502 3 0 Slot 11 EPPA Mon Sep 27 15:32:42 10 502 3 0 Slot 12 IPPA Mon

9、Sep 27 15:32:41 8 502 3 0 Slot 12 EPPA Mon Sep 27 15:32:42 12 502 3 0localSE3#the I remove card 11, at begin, all session was switch over to slot 12. as shown below4、 对于PPP用户，QOS策略要施加到帐号上，在pvc上施加策略对ppp用户不起作用。dscp 40 (101)对应4队列的队列1。5、用户从一个PVC，建立两个PPPOE连接，一个到contextpppoe（普通上网），一个到context iptv（IPTV视频）。

10、按不同的用户和应用，数据流被分为四个级别，分别打上DSCP标记：普通上网df，固定IP用户cs3，iptvcs4 在上联的GE10/1，下联DSLAM的ATM3/1，eth5/1上应用队列策略。在ATMPVC上为保证有IPTV需求的用户的带宽，将相应PVC上应用vbr。各种配置如下：context pppoe subscriber default qos policy policing internet 进入VR的数据包打DSCP标记qos policy internet policing定义ingress的qos policy rate 1000 burst 100 conform mark

11、 dscp df*port ethernet 10/1在上联口应用优化级队列test-pq qos policy queuing test-pqatm profile vbr-rt定义vbr-rt的atm profile shaping vbr-rt pcr 2000 cdvt 1000 scr 1500 bt 1000port atm 3/1 qos policy queuing test-atmwfq在下联ATM口应用atm wfq队列 atm pvc explicit 107:101 through 107:932 profile vbr-rt encapsulation pppoe在相

12、应pvc上应用profile vbr-rtport eth 5/1 qos policy queuing test-edrr在下联100M的端口上应用edrr队列context iptv subscriber default qos policy policing iptv进入VR的数据包打DSCP标记qos policy iptv policing定义ingress的qos policy rate 1000 burst 100 conform mark dscp cs4*port ethernet 10/1在上联口应用优化级队列test-pq qos policy queuing test-

13、pqatm profile vbr-rt定义vbr-rt的atm profile shaping vbr-rt pcr 2000 cdvt 1000 scr 1500 bt 1000port atm 3/1 qos policy queuing test-atmwfq在下联ATM口应用atm wfq队列 atm pvc explicit 107:101 through 107:932 profile vbr-rt encapsulation pppoeport eth 5/1 qos policy queuing test-edrr在下联100M的端口上应用edrr队列context b148

14、3qos policy fixip policing定义固定IP用户的DSCP值 mark dscp cs3*atm profile vbr-nrt定义vbr-nrt的atm profile shaping vbr-rt pcr 2000 cdvt 1000 scr 1500 bt 1000port atm 3/1 qos policy queuing test-atmwfq在下联ATM口应用atm wfq队列（egress） atm pvc 0 410 profile vbr-nrt encapsulation route1483 qos policy policing fixip 在pvc

15、上应用策略给该pvc数据打DSCP标记（ingress）port eth 5/1 qos policy queuing test-edrr 在下联100M的端口上应用edrr队列（egress） dot1q pvc 2158 qos policy policing fixip 在pvc上应用策略给该pvc数据打DSCP标记（ingress）port ethernet 10/1 qos policy queuing test-pq 在上联口应用优化级队列test-pq（egress）*qos queue-map default default queue-map num-queues 2 que

16、ue 0 priority 0 queue 1 priority 1 2 3 4 5 6 7 num-queues 4 queue 0 priority 0 queue 1 priority 1 2 queue 2 priority 3 4 5 6 queue 3 priority 7 num-queues 8 queue 0 priority 0 queue 1 priority 1 queue 2 priority 2 queue 3 priority 3 queue 4 priority 4 queue 5 priority 5 queue 6 priority 6 queue 7 pr

17、iority 7 !qos queue-map test自定义的queue-map num-queues 2 queue 0 priority 3 queue 1 priority 4 5 6 7 num-queues 4 queue 0 priority 3 queue 1 priority 4 queue 2 priority 5 6 queue 3 priority 7 !qos policy fixip policing创建策略fixip定义固定IP用户的DSCP mark dscp cs3!qos policy internet policing创建策略internet定义pppoe

18、用户的DSCP rate 1000 burst 100 conform mark dscp df!qos policy iptv policing 创建策略iptv定义iptv用户的DSCP rate 1000 burst 100 conform mark dscp cs4!qos policy test-atmwfq atmwfq 创建atm wfq队列 queue 0 mode strict queue-map test queue 0 congestion red probability 20 weight 10 min-threshold 3000 max-threshold 5000

19、 queue 1 weight 100 queue 1 congestion red probability 15 weight 10 min-threshold 2000 max-threshold 5000 queue 2 weight 50 queue 2 congestion red probability 10 weight 10 min-threshold 2000 max-threshold 4000 queue 3 weight 30 queue 3 congestion red probability 10 weight 10 min-threshold 1500 max-t

20、hreshold 4000!qos policy test-edrr edrr创建edrr队列 num-queues 4 queue-map test queue 0 weight 50 queue 0 red probability 12 weight 10 min-threshold 3048 max-threshold 4064 queue 1 weight 25 queue 1 red probability 10 weight 10 min-threshold 2032 max-threshold 4064 queue 2 weight 15 queue 2 red probabil

21、ity 9 weight 10 min-threshold 2032 max-threshold 4064 queue 3 weight 10 queue 3 red probability 8 weight 10 min-threshold 2032 max-threshold 4064!qos policy test-pq pq创建pq（优化级）队列 num-queues 4 queue-map test queue 0 rate 200000 burst 50000 queue 0 red probability 20 weight 10 min-threshold 2032 max-threshold 4064 queue 1 rate 2000000 burst 50000 queue 1 red probability 15 weight 10 min-threshold 2032 max-threshold 4064 queue 2 rate 2000000 burst 50000 queue 2 red probability 12 weight 10 min-threshold 2032 max-threshold 4064 queue 3 rate 2000000 burst 50000 queue 3 red prob