Cisco 2960 Switch QoS policy

1. Start the QO on the switch S

MLS QoS

2. Defining access Control Lists

Access-list deny IP 192.168.0.0 0.0.255.255 192.168.0.0 0.0.255.255 #拒绝的网络段

Access-list deny IP 172.0.0.0 0.255.255.255 172.0.0.0 0.255.255.255 # denied network segment

Access-list deny IP 10.0.0.0 0.255.255.255 10.0.0.0 0.255.255.255 # denied network segment

Access-list deny IP host 192.168.1.1 # # rejected hosts

Access-list permit ip any 192.168.1.0 0.0.0.255 #下载的网段

Access-list Permit 192.168.1.0 0.0.0.255 #上传的网段

3. define the class and bind to the Access control list defined above

class-map down #定义下载的map

Match Access-group 100

class-map up #定义上传的map

Match Access-group 10

4. Define the policy, bind the defined class to the policy

Policy-map down

Class down

Trust DSCP

Police 5120K 8000 exceed-action Drop

Policy-map up

Class up

Trust DSCP

Police 5120K 8000 exceed-action Drop

5. Apply on the interface

interface G0/1 #出去的端口

service-policy input down

interface FA0/1 #交换机的接入层端口

service-policy input up

Cisco 2960 Switch QoS policy