QoS之拥塞管理两种配置方法

需求分析

1、voip语音业务为ef快速转发

2、video视频业务为确保转发af31

3、data业务为确保转发af11

4、两边路由入口都进行流量分类与标记(一般入口用复杂流分类mqc做,ds域中间使用简单流分类)

5、QoS拥塞管理配置(两种一种是r1用基于队列的,一种是r2基于mqc的,实现中选择一种就行了)

6、r1上的拥塞管理用基于队伍的拥塞管理ef队列用pq调度,af31和af11用wfq调度(wfq可以配置权重值)

7、r2上的拥塞管理用基于mqc的拥塞管理,voip用llq队列配置最大带宽20M,video确保带宽50M,data确保30M

为什么voip用llq,因为llq用的是流量监管限速,ef用的是流量整形限速,所以llq比ef延迟更低,llq也叫低延迟队列

R1

acl number 3000

rule 5 permit ip source 192.168.1.0 0.0.0.255

acl number 3001

rule 5 permit ip source 192.168.2.0 0.0.0.255

acl number 3002

rule 5 permit ip source 192.168.3.0 0.0.0.255

qos queue-profile p1

queue 1 weight 30

queue 3 weight 50

schedule wfq 1 to 3 pq 5

traffic classifier video operator or

if-match acl 3001

traffic classifier voip operator or

if-match acl 3000

traffic classifier data operator or

if-match acl 3002

traffic behavior ef

remark dscp ef

traffic behavior af11

remark dscp af11

traffic behavior af31

remark dscp af31

traffic policy p1

classifier video behavior af31

classifier voip behavior ef

classifier data behavior af11

interface GigabitEthernet0/0/0

ip address 10.0.12.1 255.255.255.0

trust dscp override

qos queue-profile p1

interface GigabitEthernet0/0/1

ip address 10.0.11.1 255.255.255.0

traffic-policy p1 inbound

ospf 1

default-route-advertise

area 0.0.0.0

network 10.0.11.1 0.0.0.0

ip route-static 0.0.0.0 0.0.0.0 10.0.12.2

r2

acl number 3000

rule 5 permit ip source 172.16.1.0 0.0.0.255

acl number 3001

rule 5 permit ip source 172.16.2.0 0.0.0.255

acl number 3002

rule 5 permit ip source 172.16.3.0 0.0.0.255

traffic classifier video operator or

if-match acl 3001

traffic classifier ef operator or

if-match dscp ef

traffic classifier af_data operator or

if-match dscp af11

traffic classifier voip operator or

if-match acl 3000

traffic classifier af_video operator or

if-match dscp af31

traffic classifier data operator or

if-match acl 3002

traffic behavior llq

queue llq bandwidth 20480 cbs 512000

traffic behavior ef

remark dscp ef

traffic behavior af_data

queue af bandwidth 30720

traffic behavior af_video

queue af bandwidth 51200

traffic behavior af11

remark dscp af11

traffic behavior af31

remark dscp af31

traffic policy p2

classifier ef behavior llq

classifier af_video behavior af_video

classifier af_data behavior af_data

traffic policy p1

classifier video behavior af31

classifier voip behavior ef

classifier data behavior af11

interface GigabitEthernet0/0/0

ip address 10.0.12.2 255.255.255.0

trust dscp override

traffic-policy p2 outbound

interface GigabitEthernet0/0/1

ip address 10.0.22.1 255.255.255.0

traffic-policy p1 inbound

ospf 1

default-route-advertise

area 0.0.0.0

network 10.0.22.1 0.0.0.0

ip route-static 0.0.0.0 0.0.0.0 10.0.12.1

sw1

vlan batch 10 to 11 20 30

dhcp enable

interface Vlanif10

ip address 192.168.1.1 255.255.255.0

dhcp select interface

interface Vlanif11

ip address 10.0.11.2 255.255.255.0

interface Vlanif20

ip address 192.168.2.1 255.255.255.0

dhcp select interface

interface Vlanif30

ip address 192.168.3.1 255.255.255.0

dhcp select interface

interface MEth0/0/1

interface GigabitEthernet0/0/1

port link-type access

port default vlan 11

interface GigabitEthernet0/0/2

port link-type access

port default vlan 10

interface GigabitEthernet0/0/3

port link-type access

port default vlan 20

interface GigabitEthernet0/0/4

port link-type access

port default vlan 30

ospf 1

import-route direct

area 0.0.0.0

network 10.0.11.2 0.0.0.0

sw2

vlan batch 10 20 22 30

dhcp enable

interface Vlanif10

ip address 172.16.1.1 255.255.255.0

dhcp select interface

interface Vlanif20

ip address 172.16.2.1 255.255.255.0

dhcp select interface

interface Vlanif22

ip address 10.0.22.2 255.255.255.0

interface Vlanif30

ip address 172.16.3.1 255.255.255.0

dhcp select interface

interface MEth0/0/1

interface GigabitEthernet0/0/1

port link-type access

port default vlan 22

interface GigabitEthernet0/0/2

port link-type access

port default vlan 10

interface GigabitEthernet0/0/3

port link-type access

port default vlan 20

interface GigabitEthernet0/0/4

port link-type access

port default vlan 30

ospf 1

import-route direct

area 0.0.0.0

network 10.0.22.2 0.0.0.0

mqc配置查看

DS域内只配这个一条命令简单流分类即可,可以不带override,带的话就是能对标记好的流量的优先级进行外部和内部优先级修映射改后再发给另一个ds设备(意思就是可以改dscp-dscp的两列的对应关系映射)

r1-GigabitEthernet0/0/0trust dscp override

r2-GigabitEthernet0/0/0trust dscp override

dscp-dscp内外优先级映射查看0-63

r1出口捉包结果捉包查看

两边三种业务ping后测试发现队列1是video 、3是 data,分别对af31、af11,队列5是voip对应ef,由此R1可以根据此队列进行拥塞管理配置

r1上用基于队列方式配,然后进行拥塞管理权重调整,wfq会根据权重值大的分配带宽高低(默认是10)

r1上配

qos queue-profile p1

queue 1 weight 30

queue 3 weight 50

schedule wfq 1 to 3 pq 5

int g 0/0/0

qos queue-profile p1

查看权重值调整结果

r2上用基于mqc的方式配

traffic classifier ef operator or

if-match dscp ef

traffic classifier af_data operator or

if-match dscp af11

traffic classifier af_video operator or

if-match dscp af31

traffic behavior llq

queue llq bandwidth 20480 cbs 512000

traffic behavior af_data

queue af bandwidth 30720

traffic behavior af_video

queue af bandwidth 51200

traffic policy p2

classifier ef behavior llq

classifier af_video behavior af_video

classifier af_data behavior af_data

interface GigabitEthernet0/0/0

ip address 10.0.12.2 255.255.255.0

trust dscp override

traffic-policy p2 outbound

流策略查看

相关推荐
小嘉丶学长2 小时前
Day14 · 字典与集合
java·开发语言·网络·python·学习·1024程序员节
pt10434 小时前
Cisco设备网络安全系列-18:SIEM与SOAR安全解决方案
网络·安全
Tel199253080044 小时前
温度湿度信号转WiFi/MQTT/Modbus TCP采集模块 无线传输
网络·网络协议·tcp/ip·工业自动化·工控设备
yyuuuzz5 小时前
云服务器安全组规则优先级的机制记录
运维·服务器·网络·安全·阿里云·aws
youce_1235 小时前
测速跑满,但是打开网页、刷视频总转圈?问题不在带宽
网络·智能路由器
2501_946244786 小时前
开源鸿蒙平台 CMP 三方库「compose-continuous-rounded-corner-shape」适配全流程
华为·开源·harmonyos
2501_946244787 小时前
开源鸿蒙平台 CMP 三方库「Waterfall」适配全流程
华为·开源·harmonyos
lazy H7 小时前
【计算机网络】第 13 篇:NAT 和端口映射是什么?为什么本地服务外网访问不了?
java·网络·网络协议·学习·计算机网络·408
Linux运维技术栈7 小时前
WAF部署在防火墙后面,获取不到真实IP怎么办?
服务器·网络·tcp/ip·安全·防火墙·waf
2401_zq136y037 小时前
开源鸿蒙平台 CMP 三方库「Jewel」适配全流程
华为·开源·harmonyos