ASA QOS配置
第一步,在外网接口启用QOS队列
priority-queue JL //在JL接口启用优先级队列
queue-limit 20 //设定优先级队列的大小为20
tx-ring-limit 20000 //设定在给定时间内允许等待的最大的包的数量
第二步,定义ACL匹配应用流量:(可以用object-group)
object-group network qos-10M
network-object 172.24.41.0 255.255.255.0
network-object 172.24.42.0 255.255.255.0
network-object 172.24.43.0 255.255.255.0
object-group network qos-15M
network-object 172.24.44.0 255.255.255.0
network-object 172.24.45.0 255.255.255.0
然后
access-list QOS-10M extended permit ip object-group qos-10M any
access-list QOS-15M extended permit ip object-group qos-15M any
第三步,定义class-map匹配相关ACL:
class-map qos-15M
match access-list QOS-15M
class-map qos-10M
match access-list QOS-10M
第四步,定义policy-map,设置好带宽
policy-map JL_qos-001
class qos-10M
police input 10000000
police output 10000000
class qos-15M
police input 15000000
police output 15000000
第五步,绑定policy-map于相应的接口
service-policy JL_qos-001 interface JL 用于接口
service-policy JL_qos-001 Global 用于全局模式(推荐)