實例解析QOS端到端應用（一）

不少學習網絡技術的工程師廣泛認爲QOS技術很難學習，這主要是來自於心裏的學習壓力，其實這種技術並不難。舉個例子說明，如北京的交通，爲了防止交通堵車，對車輛進行限號，這其實就是QOS中的對流量進行分類、標記和監管。好比專用公交車道，這就是使用優先隊列的技術。各個路口使用紅綠燈，這其實就是對流量進行×××；對交通進行限行，這就是對流量進行尾丟棄等。下面咱們經過實驗實例來說解決QOS技術。

固然在進行實驗前，仍是對理論知識進行理解和消化。

QoS（Qualit of Service）又名服務質量，是保證業務數據在互聯網中傳輸的質量和可靠性的度量。也能夠理解爲在有限的網絡環境（帶寬）中爲特定的業務數據流提供優質、可靠的服務。

QoS是一個端到端的行爲，並非點到點行爲，若是一臺計算機與遠端的另外一臺計算機進行通訊，爲保障其服務的可靠性，須要在其數據通過的每一個節點都部署QoS。若是隻在某個了點節點部署Qos是不能保障其服務的質量。

QoS服務有二種服務模式，集成服務模式和區分服務模式，在網絡中應用範圍比較普遍的是區分服務模式，下面以區分模式爲主闡述其在網絡中的端到端的應用。

區分服務模式下實現QOS主要經過如下幾個步驟：

數據分類：要提供區分服務的QOS，就必須先將數據分爲不一樣的類別，或者將數據設置爲不一樣的優先級。將數據分爲不一樣的類別，稱爲分類(classification)，分類並不修改原來的數據包。

數據標記：將數據設置爲不一樣的優先級稱爲標記(marking)，而標記會修改原來的數據包。分類和標記是實施QOS的前提，也是基礎。

擁塞管理：當網絡發生擁塞後，數據仍是要被傳遞的，正由於接收到的數據遠多於自身的傳輸能力，因此數據被傳輸時就出現了前後順序，而依照什麼樣的方式來傳數據，就須要隊列的指導，QOS中的隊列定義了數據包被傳輸的前後順序。

擁塞避免：當網絡發生擁塞後，超出的流量將採起其它方式處理，若是處理方式爲管制，那麼數據包就會被丟棄，一般狀況下，網絡設備默認丟棄後到的數據包而傳輸先到的數據包，這樣的丟棄方式稱爲尾丟棄，但也可讓網絡設備在發生擁塞時，先丟低優先級的數據包而傳輸高優先級的數據包。

流量監管：在實施QOS策略時，能夠將用戶的數據限制在特定的帶寬，當用戶的流量超過額定帶寬時，超過的帶寬將不能被傳輸，只能採起其它方式來處理，若是處理方式爲丟棄超出帶寬，那麼這種行爲稱爲管制(Policing)。

流量×××：在實施QOS策略時，若是是將超出的帶寬緩存在內存中，等到下一秒再傳遞，這種行爲稱爲×××（Shaping）。

鏈路層優化：

下面講述如何進行分類和標記。

在網絡環境中，如何對數據進行分類和標記呢，並且數據又分爲二層的數據幀和三層的數據報，在二層數據幀中使用COS字段分類和標記數據，在三層數據報中使用TOS字段來分類和標記數據。

QOS技術不能在原始的以太網幀上標記數據，但可使用ISL或802.1Q數據中的COS字段標記。下圖爲COS字段。

QOS就是使用最高3比特標記數據優先級的，共有7個級別

TOS字段是1B，RFC1122定義IP優先級使用最高3比特，能夠定義8個服務等級。

l 111——網絡控制 (network control)—保留給網絡控制數據使用，如路由

l 110——網間控制 (internetwork control) —保留給網絡控制數據使用，如路由

l 101——關鍵 (critic)—語音數據使用

l 100——疾速 (flash override)—視頻會議和視頻流使用

l 011——閃速 (flash)—語音控制數據使用

l 010——快速 (immediate)—數據業務使用

l 001——優先 (priority)—數據業務使用

l 000——普通 (routine)—默認標記值

IP優先級方案能夠粗略地把數據分爲8個等級/類別，但這種設計有其侷限性，其最明顯的缺點就是類別太少，另外一個缺點就是沒有定義丟棄級別，還有各個廠商對後4比特的定義也不一致，這些都影響了端到端的QOS的發展與應用。在這種狀況下，IETF提出了一種通用的、取代IP優先級分類的方案RFC2474,即用6比特取代了原來的3比特，稱這6比特爲DSCP（區分服務編碼點）

RFC2427定義最高3比特爲級別/類別選擇代碼（class selector codepoints,CS）其意義與IPv4優先級的定義是相同的，CS0~CS7的級別相等於IP優先級0~7。

下面的表格內容很重要，須要理解。

DSCP使用6比特，十進制區間是0~63，能夠定義64個級別，下表描述了IP優先級與DSCP值對應關係。

保證轉發（Assured Forwarding,AF）由RFC2597對CS1~CS4進行進一步定義。其使用第4比特和第5比特作丟棄優先級標誌。

l 01——低丟棄優先級

l 10——中丟棄優先級

l 11——高丟棄優先級

丟棄優先級	CS1	CS2	CS3	CS4
低丟棄優先級	AF11 001010	AF21 010010	AF31 011010	AF41 100010
中丟棄優先級	AF12 001100	AF22 010100	AF32 011100	AF42 100100
高丟棄優先級	AF13 001110	AF23 010110	AF33 011110	AF43 100110

快速轉發（Expedited Forwarding,EF），由RFC2598定義，DSCP值爲46，EF服務適用於低丟包率、低延遲、低抖動及保證帶寬的業務，如VOIP。

可使用命令對數據分類和標記，須要3個步驟：

一、class-map 數據分類

二、policy-map 數據標記

三、service-policy input 應用策略

RA(config)#class-map [match-all | match-any] class-map-name

RA(config-cmap)#match {match-criteria}

Match-all——當設定多個match條件時，知足全部條件的數據纔是匹配的。

Match-any——當設定多個match條件時，知足一個條件便可。

match-criteria——設定的匹配條件,match能夠設定的條件有：

l access-group ——訪問控制列表

l class-map ——調用其它class-map

l cos——使用cos值，最多4個

l destination-address mac——目的MAC地址

l input-interface——入接口

l dscp—— 使用DSCP值，最多7個。

l Precedence——使用IP優先級，最多7個。

l ip rtp ——實時傳輸協議端口

l mpls experimental topmost——MPLS標籤

l not——反向條件選擇

l protocol——協議

l source-address mac——源MAC地址

l protocol RTP ——RTP協議

RA(config)#policy-map policy-name

RA(config-pmap)#class [class-deault|class-name]

RA(config-pmap-c)#set tag

RA(config-if)#service-policy input policy-name

Class-map嵌套，是由一個class-map語句調用另外一個class-map語句，從而達到靈活分類數據的目的。在不少狀況下，在一個class-map中不能同時使用match-all和match-any.

例若有兩類數據class1和class2,若是class1調用了class2，則class2使用的是match-any關鍵，即匹配class2中任意一個條件的數據都是符合要求。Class1調用class2，而且使用的match-all關鍵字，這樣的結果是匹配class2中任意一個條件而且同時匹配class1中其餘條件的數據纔是符合要求的。

Policy-map也能夠嵌套，其是造成的具備分層結構的策略。

經過上面的命令能夠對數據進行分類和標記，其主要目的是爲特定的數據進行調整，QOS調整的數據流的手段一般有兩種方式，流量監管和流量×××。

流量監管判斷流量是否違規的工具就是令牌桶。令牌桶有3個參數，數據突發量（Burst size）、平均速率（mean rage）和必定的時間間隔（Tc）。

關於令牌桶的工做原理，我會在下篇博文詳細講述。

下面爲實驗實例，主要理解分類和標記。

一、192.168.100.0網段是語音數據流，標註爲EF

二、172.16.10.0網段爲TCP流量，標記爲AF21

三、其它則爲普通數據流量 ,標記爲AF13。

RA#sh running-config

Building configuration...

Current configuration : 1824 bytes

!

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname RA

!

boot-start-marker

boot-end-marker

!

no aaa new-model

!

resource policy

!

ip cef

!

class-map match-all class-b

match access-group 101

class-map match-all class-a

match access-group 100

class-map match-all class-other

match dscp af13

class-map match-all class-voice

match dscp ef

class-map match-all class-date

match dscp af21

!

policy-map sample-policy1

class class-a

set dscp ef

class class-b

set dscp af21

class class-default

set dscp af13

policy-map traffic-policing

class class-voice

police 1000000 184000 368000 conform-action transmit exceed-action transmit

class class-date

police 5000000 936000 64000 conform-action transmit exceed-action drop

class class-other

police 3000000 562000 64000 conform-action transmit exceed-action set-dscp-transmit 0 violate-action drop

!

interface FastEthernet0/0

no ip address

shutdown

duplex half

!

interface Ethernet1/0

ip address 10.1.1.2 255.255.255.252

duplex full

service-policy input sample-policy1

!

interface Ethernet1/1

ip address 10.1.1.5 255.255.255.252

duplex half

service-policy output traffic-policing

!

interface Ethernet1/2

no ip address

shutdown

duplex half

!

interface Ethernet1/3

no ip address

shutdown

duplex half

!

router ospf 10

router-id 2.2.2.2

log-adjacency-changes

network 10.1.1.0 0.0.0.3 area 0

network 10.1.1.4 0.0.0.3 area 0

!

no ip http server

no ip http secure-server

!

logging alarm informational

access-list 100 permit ip 192.168.100.0 0.0.0.255 any

access-list 101 permit tcp 172.16.10.0 0.0.0.255 any

!

control-plane

!

line con 0

exec-timeout 0 0

stopbits 1

line aux 0

stopbits 1

line vty 0 4

!

end

RA#

RB#sh running-config

Building configuration...

Current configuration : 1453 bytes

!

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname RB

!

boot-start-marker

boot-end-marker

!

no aaa new-model

!

resource policy

!

ip cef

!

class-map match-all class-other

match dscp af13

class-map match-all class-voice

match dscp ef

class-map match-all class-date

match dscp af21

!

policy-map traffic-policing

class class-voice

police 1000000 184000 368000 conform-action transmit exceed-action transmit

class class-date

police 5000000 936000 64000 conform-action transmit exceed-action drop

class class-other

police 3000000 562000 64000 conform-action transmit exceed-action set-dscp-transmit 0 violate-action drop

!

interface FastEthernet0/0

no ip address

shutdown

duplex half

!

interface Ethernet1/0

ip address 10.1.1.6 255.255.255.252

duplex half

!

interface Ethernet1/1

ip address 10.1.1.9 255.255.255.252

duplex half

service-policy output traffic-policing

!

interface Ethernet1/2

no ip address

shutdown

duplex half

!

interface Ethernet1/3

no ip address

shutdown

duplex half

!

router ospf 10

router-id 3.3.3.3

log-adjacency-changes

network 10.1.1.4 0.0.0.3 area 0

network 10.1.1.8 0.0.0.3 area 0

!

no ip http server

no ip http secure-server

!

logging alarm informational

!

control-plane

!

!

line con 0

exec-timeout 0 0

stopbits 1

line aux 0

stopbits 1

line vty 0 4

!

End

RC#sh running-config

Building configuration...

Current configuration : 1499 bytes

!

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname RC

!

boot-start-marker

boot-end-marker

!

enable password 123

!

no aaa new-model

!

resource policy

!

ip cef

!

class-map match-all class-other

match dscp af13

class-map match-all class-voice

match dscp ef

class-map match-all class-date

match dscp af21

!

policy-map traffic-policing

class class-voice

police 1000000 184000 368000 conform-action transmit exceed-action transmit

class class-date

police 5000000 936000 64000 conform-action transmit exceed-action drop

class class-other

police 3000000 562000 64000 conform-action transmit exceed-action set-dscp-transmit 0 violate-action drop

!

interface FastEthernet0/0

ip address 172.16.1.1 255.255.255.0

duplex half

service-policy output traffic-policing

!

interface Ethernet1/0

ip address 10.1.1.10 255.255.255.252

duplex half

!

interface Ethernet1/1

no ip address

shutdown

duplex half

!

interface Ethernet1/2

no ip address

shutdown

duplex half

!

interface Ethernet1/3

no ip address

shutdown

duplex half

!

router ospf 10

router-id 4.4.4.4

log-adjacency-changes

network 10.1.1.8 0.0.0.3 area 0

network 172.16.1.0 0.0.0.255 area 0

!

no ip http server

no ip http secure-server

!

logging alarm informational

!

control-plane

!

!

line con 0

exec-timeout 0 0

stopbits 1

line aux 0

stopbits 1

line vty 0 4

password 123

login

!

End

SW#sh running-config

Building configuration...

Current configuration : 1275 bytes

!

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname SW

!

boot-start-marker

boot-end-marker

!

enable password 123

!

no aaa new-model

memory-size iomem 5

!

!

ip cef

!

interface FastEthernet0/0

no switchport

ip address 10.1.1.1 255.255.255.252

!

interface FastEthernet0/1

no switchport

ip address 192.168.100.1 255.255.255.0

!

interface FastEthernet0/2

no switchport

ip address 172.16.10.1 255.255.255.0

!

interface FastEthernet0/3

!

interface FastEthernet0/4

!

interface FastEthernet0/5

!

interface FastEthernet0/6

!

interface FastEthernet0/7

!

interface FastEthernet0/8

!

interface FastEthernet0/9

!

interface FastEthernet0/10

!

interface FastEthernet0/11

!

interface FastEthernet0/12

!

interface FastEthernet0/13

!

interface FastEthernet0/14

!

interface FastEthernet0/15

!

interface Vlan1

no ip address

!

router ospf 10

router-id 1.1.1.1

log-adjacency-changes

network 10.1.1.0 0.0.0.3 area 0

network 172.16.10.0 0.0.0.255 area 0

network 192.168.100.0 0.0.0.255 area 0

!

ip http server

no ip http secure-server

!

control-plane

!

line con 0

exec-timeout 0 0

line aux 0

line vty 0 4

password 123

login

!

!

end

RA#sh ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

ia - IS-IS inter area, * - candidate default, U - per-user static route

o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/24 is subnetted, 2 subnets

O 172.16.10.0 [110/11] via 10.1.1.1, 02:06:29, Ethernet1/0

O 172.16.1.0 [110/21] via 10.1.1.6, 02:06:29, Ethernet1/1

10.0.0.0/30 is subnetted, 3 subnets

O 10.1.1.8 [110/20] via 10.1.1.6, 02:06:29, Ethernet1/1

C 10.1.1.0 is directly connected, Ethernet1/0

C 10.1.1.4 is directly connected, Ethernet1/1

O 192.168.100.0/24 [110/11] via 10.1.1.1, 02:06:29, Ethernet1/0

SW#sh ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

ia - IS-IS inter area, * - candidate default, U - per-user static route

o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/24 is subnetted, 2 subnets

C 172.16.10.0 is directly connected, FastEthernet0/2

O 172.16.1.0 [110/22] via 10.1.1.2, 02:09:55, FastEthernet0/0

10.0.0.0/30 is subnetted, 3 subnets

O 10.1.1.8 [110/21] via 10.1.1.2, 02:09:55, FastEthernet0/0

C 10.1.1.0 is directly connected, FastEthernet0/0

O 10.1.1.4 [110/11] via 10.1.1.2, 02:09:55, FastEthernet0/0

C 192.168.100.0/24 is directly connected, FastEthernet0/1

RA#sh policy-map

Policy Map sample-policy1

Class class-a

set dscp ef

Class class-b

set dscp af21

Class class-default

set dscp af13

Policy Map traffic-policing

Class class-voice

police cir 1000000 bc 184000 be 368000

conform-action transmit

exceed-action transmit

Class class-date

police cir 5000000 bc 936000 be 64000

conform-action transmit

exceed-action drop

Class class-other

police cir 3000000 bc 562000 be 64000

conform-action transmit

exceed-action set-dscp-transmit default

violate-action drop

RB#show policy-map

Policy Map traffic-policing

Class class-voice

police cir 1000000 bc 184000 be 368000

conform-action transmit

exceed-action transmit

Class class-date

police cir 5000000 bc 936000 be 64000

conform-action transmit

exceed-action drop

Class class-other

police cir 3000000 bc 562000 be 64000

conform-action transmit

exceed-action set-dscp-transmit default

violate-action drop

RC#sh policy-map

Policy Map traffic-policing

Class class-voice

police cir 1000000 bc 184000 be 368000

conform-action transmit

exceed-action transmit

Class class-date

police cir 5000000 bc 936000 be 64000

conform-action transmit

exceed-action drop

Class class-other

police cir 3000000 bc 562000 be 64000

conform-action transmit

exceed-action set-dscp-transmit default

violate-action drop

測試一：

使用原地址爲192.168.100.1，目標地址爲172.16.1.10，這是一個語音數據流，進行測試，

SW#ping 172.16.1.10 source 192.168.100.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.1.10, timeout is 2 seconds:

Packet sent with a source address of 192.168.100.1

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 8/41/96 ms

SW#ping 172.16.1.10 source 192.168.100.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.1.10, timeout is 2 seconds:

Packet sent with a source address of 192.168.100.1

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 20/26/40 ms

SW#ping 172.16.1.10 source 192.168.100.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.1.10, timeout is 2 seconds:

Packet sent with a source address of 192.168.100.1

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 20/51/88 ms

在172.16.1.10的Linux主機使用wireshark採集報文，以下圖所示。

經過Wireshare能夠看到數據包的DSCP值爲0x2e，爲Expedited Forwarding

測試二：

使用原地址爲172.16.10.10主機去訪問172.16.1.10的Linux主機的FTP服務，這是一個數據流量，以下圖所示。

在172.16.1.10主機上使用wireshark採集數據報文，以下圖所示。

經過Wireshare能夠看到數據包的DSCP值爲0x12，爲Assured Forwarding 21.

測試三：

在交換上與遠程Linux主機進行通訊，這是一個其它數據流，以下所示。

SW#ping 172.16.1.10

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.1.10, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/43/88 ms

SW#ping 172.16.1.10

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.1.10, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/42/64 ms

SW#ping 172.16.1.10

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.1.10, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 20/33/48 ms

SW#ping 172.16.1.10

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.1.10, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 20/39/60 ms

在172.16.1.10主機上使用wireshark採集數據報文，以下圖所示。

經過Wireshare能夠看到數據包的DSCP值爲0x0e，爲Assured Forwarding 13.

測試四：

在路由器上使用show policy-map interface命令查看接口狀態。

 

RA#sh policy-map interface

Ethernet1/0

Service-policy input: sample-policy1

Class-map: class-a (match-all)

35 packets, 3990 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: access-group 100

QoS Set

dscp ef

Packets marked 35

Class-map: class-b (match-all)

69 packets, 4295 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: access-group 101

QoS Set

dscp af21

Packets marked 69

Class-map: class-default (match-any)

1703 packets, 141652 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: any

QoS Set

dscp af13

Packets marked 1703

Ethernet1/1

Service-policy output: traffic-policing

Class-map: class-voice (match-all)

35 packets, 3990 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: dscp ef (46)

police:

cir 1000000 bps, bc 184000 bytes

conformed 35 packets, 3990 bytes; actions:

transmit

exceeded 0 packets, 0 bytes; actions:

transmit

conformed 0 bps, exceed 0 bps

Class-map: class-date (match-all)

69 packets, 4060 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: dscp af21 (18)

police:

cir 5000000 bps, bc 936000 bytes

conformed 69 packets, 4060 bytes; actions:

transmit

exceeded 0 packets, 0 bytes; actions:

drop

conformed 0 bps, exceed 0 bps

Class-map: class-other (match-all)

959 packets, 71399 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: dscp af13 (14)

police:

cir 3000000 bps, bc 562000 bytes, be 64000 bytes

conformed 959 packets, 71399 bytes; actions:

transmit

exceeded 0 packets, 0 bytes; actions:

set-dscp-transmit default

violated 0 packets, 0 bytes; actions:

drop

conformed 0 bps, exceed 0 bps, violate 0 bps

Class-map: class-default (match-any)

1582 packets, 154344 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: any

RB#sh policy-map interface

Ethernet1/1

Service-policy output: traffic-policing

Class-map: class-voice (match-all)

35 packets, 3990 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: dscp ef (46)

police:

cir 1000000 bps, bc 184000 bytes

conformed 35 packets, 3990 bytes; actions:

transmit

exceeded 0 packets, 0 bytes; actions:

transmit

conformed 0 bps, exceed 0 bps

Class-map: class-date (match-all)

69 packets, 4060 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: dscp af21 (18)

police:

cir 5000000 bps, bc 936000 bytes

conformed 69 packets, 4060 bytes; actions:

transmit

exceeded 0 packets, 0 bytes; actions:

drop

conformed 0 bps, exceed 0 bps

Class-map: class-other (match-all)

959 packets, 71399 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: dscp af13 (14)

police:

cir 3000000 bps, bc 562000 bytes, be 64000 bytes

conformed 959 packets, 71399 bytes; actions:

transmit

exceeded 0 packets, 0 bytes; actions:

set-dscp-transmit default

violated 0 packets, 0 bytes; actions:

drop

conformed 0 bps, exceed 0 bps, violate 0 bps

Class-map: class-default (match-any)

1530 packets, 149363 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: any

RC#sh policy-map interface

FastEthernet0/0

Service-policy output: traffic-policing

Class-map: class-voice (match-all)

25 packets, 2850 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: dscp ef (46)

police:

cir 1000000 bps, bc 184000 bytes

conformed 25 packets, 2850 bytes; actions:

transmit

exceeded 0 packets, 0 bytes; actions:

transmit

conformed 0 bps, exceed 0 bps

Class-map: class-date (match-all)

49 packets, 2927 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: dscp af21 (18)

police:

cir 5000000 bps, bc 936000 bytes

conformed 49 packets, 2927 bytes; actions:

transmit

exceeded 0 packets, 0 bytes; actions:

drop

conformed 0 bps, exceed 0 bps

Class-map: class-other (match-all)

882 packets, 66268 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: dscp af13 (14)

police:

cir 3000000 bps, bc 562000 bytes, be 64000 bytes

conformed 882 packets, 66268 bytes; actions:

transmit

exceeded 0 packets, 0 bytes; actions:

set-dscp-transmit default

violated 0 packets, 0 bytes; actions:

drop

conformed 0 bps, exceed 0 bps, violate 0 bps

Class-map: class-default (match-any)

1589 packets, 150453 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: any

煩請各位工程師順便給我投一票喲，先謝謝各位！