‹‹ 上一主题 | 下一主题 ››
发新话题
打印

3550如何控制流量（在线等)

gdsnake

金牌会员

Rank: 6Rank: 6

积分
1193 
技术积分
0  
5D金币
0 枚 
注册时间
2005-4-14 
最后登录
2005-7-20 
1楼 大 中 小 发表于 2005-7-20 15:26  只看该作者

3550如何控制流量（在线等)

这里的出口是一台cisco3550，最近老有人用变态下载，想对其中的一个端口作流量限制，怎么做？

TOP

独孤文昌

金牌会员

Rank: 6Rank: 6

积分
2750 
技术积分
0  
5D金币
0 枚 
注册时间
2004-7-5 
最后登录
2008-6-23 

老版主

2楼 大 中 小 发表于 2005-7-21 16:41  只看该作者

re:Building configurati...

Building configuration...

Current configuration : 5488 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname cr20g
!
enable secret 5 $1$Xtuj$E.l2l.ev7mOCVtwPeEXz1.
enable password 7 08771A1D5A4152404B0805172924
!
username jary password 7 070C285F4D0648564E43595B5D7E797179
ip subnet-zero
ip routing
!
mls qos
!
class-map match-all part6
match access-group 116
class-map match-all part5
match access-group 115
class-map match-all part4
match access-group 114
class-map match-all part3
match access-group 113
class-map match-all part2
match access-group 112
!
!
policy-map download
class part2
police 1000000 8000 exceed-action drop
class part3
police 1800000 8000 exceed-action drop
class part4
police 496000 8000 exceed-action drop
class part5
police 496000 8000 exceed-action drop
class part6
police 800000 8000 exceed-action drop
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
!
!
interface FastEthernet0/1
switchport mode access
!
interface FastEthernet0/2
switchport mode access
!
interface FastEthernet0/3
switchport mode access
!
interface FastEthernet0/4
switchport mode access
!
interface FastEthernet0/5
switchport mode access
!
interface FastEthernet0/6
switchport mode access
!
interface FastEthernet0/7
switchport mode access
!
interface FastEthernet0/8
switchport mode access
!
interface FastEthernet0/9
switchport mode access
!
interface FastEthernet0/10
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
service-policy input download
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
service-policy input download
!
interface FastEthernet0/13
switchport access vlan 2
switchport mode access
service-policy input download
!
interface FastEthernet0/14
switchport access vlan 3
switchport mode access
service-policy input download
!
interface FastEthernet0/15
switchport access vlan 4
switchport mode access
service-policy input download
!
interface FastEthernet0/16
switchport access vlan 5
switchport mode access
service-policy input download
!
interface FastEthernet0/17
switchport access vlan 6
switchport mode access
service-policy input download
!
interface FastEthernet0/18
switchport access vlan 6
switchport mode access
service-policy input download
!
interface FastEthernet0/19
switchport mode access
!
interface FastEthernet0/20
switchport mode access
!
interface FastEthernet0/21
switchport mode access
!
interface FastEthernet0/22
switchport mode access
!
interface FastEthernet0/23
switchport mode access
!
interface FastEthernet0/24
switchport mode access
!
interface GigabitEthernet0/1
switchport mode dynamic desirable
!
interface GigabitEthernet0/2
switchport mode dynamic desirable
!
interface Vlan1
ip address 192.168.0.254 255.255.255.0
!
interface Vlan2
ip address 192.168.2.1 255.255.255.0
!
interface Vlan3
ip address 192.168.3.1 255.255.255.0
!
interface Vlan4
ip address 192.168.4.1 255.255.255.0
!
interface Vlan5
ip address 192.168.5.1 255.255.255.0
!
interface Vlan6
ip address 192.168.6.1 255.255.255.0
!
ip default-gateway 192.168.0.1
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.0.1
ip http server
!
!
access-list 112 deny ip 192.168.2.0 0.0.0.255 192.168.3.0 0.0.0.255
access-list 112 deny ip 192.168.2.0 0.0.0.255 192.168.4.0 0.0.0.255
access-list 112 deny ip 192.168.2.0 0.0.0.255 192.168.5.0 0.0.0.255
access-list 112 deny ip 192.168.2.0 0.0.0.255 192.168.6.0 0.0.0.255
access-list 112 deny ip 192.168.2.0 0.0.0.255 192.168.0.0 0.0.0.255
access-list 112 permit ip 192.168.2.0 0.0.0.255 any
access-list 113 deny ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.0.255
access-list 113 deny ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 113 deny ip 192.168.3.0 0.0.0.255 192.168.4.0 0.0.0.255
access-list 113 deny ip 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255
access-list 113 deny ip 192.168.3.0 0.0.0.255 192.168.6.0 0.0.0.255
access-list 113 permit ip 192.168.3.0 0.0.0.255 any
access-list 114 deny ip 192.168.4.0 0.0.0.255 192.168.0.0 0.0.0.255
access-list 114 deny ip 192.168.4.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 114 deny ip 192.168.4.0 0.0.0.255 192.168.3.0 0.0.0.255
access-list 114 deny ip 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255
access-list 114 deny ip 192.168.4.0 0.0.0.255 192.168.6.0 0.0.0.255
access-list 114 permit ip 192.168.4.0 0.0.0.255 any
access-list 115 deny ip 192.168.5.0 0.0.0.255 192.168.0.0 0.0.0.255
access-list 115 deny ip 192.168.5.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 115 deny ip 192.168.5.0 0.0.0.255 192.168.3.0 0.0.0.255
access-list 115 deny ip 192.168.5.0 0.0.0.255 192.168.4.0 0.0.0.255
access-list 115 deny ip 192.168.5.0 0.0.0.255 192.168.6.0 0.0.0.255
access-list 115 permit ip 192.168.5.0 0.0.0.255 any
access-list 116 deny ip 192.168.6.0 0.0.0.255 192.168.0.0 0.0.0.255
access-list 116 deny ip 192.168.6.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 116 deny ip 192.168.6.0 0.0.0.255 192.168.3.0 0.0.0.255
access-list 116 deny ip 192.168.6.0 0.0.0.255 192.168.4.0 0.0.0.255
access-list 116 deny ip 192.168.6.0 0.0.0.255 192.168.5.0 0.0.0.255
access-list 116 permit ip 192.168.6.0 0.0.0.255 any
!
line con 0
password 7 14141B180F0B7B787D7961627B47554352
logging synchronous
login
line vty 0 4
password 7 104D000A061843585555787C7D7C616073
login
line vty 5 15
password 7 104D000A061843585555787C7D7C616073
login
!
end

前方是绝路 希望在转角
不在乎今生拥有什么 只在乎做过什么
全力打造中国网络技术交流社区
http://www.itroute.net

TOP

Herson

金牌会员

Rank: 6Rank: 6

积分
1907 
技术积分
0  
5D金币
0 枚 
注册时间
2005-7-27 
最后登录
2006-7-4 
3楼 大 中 小 发表于 2005-7-29 09:20  只看该作者

re:沒明白誒...請求說明

沒明白誒...
請求說明

TOP

smallbigbox

D3X

论坛元老

Rank: 8Rank: 8

积分
12827 
技术积分
5  
5D金币
4 枚 
注册时间
2004-9-18 
最后登录
2007-8-13 

老版主

4楼 大 中 小 发表于 2005-8-26 10:51  只看该作者

re:做了下载限制的说--police 180...

做了下载限制的说--police 1800000 8000 exceed-action drop

如果真的要关闭bt,还是需要关端口,除了个别的应用,把高层的动态端口尽量关闭

TOP

‹‹ 上一主题 | 下一主题 ››
发新话题
 
TOP
清除 Cookies - 联系我们 - 邮件技术资讯网 - Archiver - WAP - 繁體中文
当前时区 GMT+8, 现在时间是 2008-10-11 16:52

本论坛为非盈利中立机构，论坛所有言论纯属发表者个人意见，与《 邮件技术资讯网》论坛立场无关。内容所涉及的版权和法律相关事宜请参考各自所有者的条款。
如果认定侵犯了您的权利，请联系我们尽快处理。本论坛原创内容请联系本站后再行转载并务必保留我站信息。此声明修改不再另行通知，本论坛保留最终解释权。
*本论坛QQ群：1#群2233231(已满) 2#群2598254(推荐) 3#群15974064(推荐) 4#群14173252(推荐)*
* 建议使用 1024×768 模式查看本论坛 *
Powered by Discuz! 6.1.0