Switches limit LAN speed method: qos limits LAN speed

1. Use Qos to limit the upload speed

Step 1. Define the host range for which you want to limit the speed
S3760> en
S3760 # conf
S3760 (config) # access-list 101 permit ip host 192.168.1.101 any

---- Define the IP address for Speed Limit
S3760 (config) # access-list 102 permit ip host 192.168.1.102 any

Step 2. Create a rule class and apply the previously defined Host Range
S3760 (config) # class-map xiansu101 ---- create a class-map named xiansu101
S3760 (config-cmap) # match access-group 101 ---- match ip address
S3760 (config-cmap) # exit
S3760 (config) # class-map xiansu102 ---- create a class-map named xiansu102
S3760 (config-cmap) # match access-group 102 ---- match ip address
S3760 (config-cmap) # exit

Step 3. Create a policy class: Apply the previously defined rules and configure the speed limit.
S3760 (config) # policy-map xiansu ---- create a policy-map named xiansu
S3760 (config-pmap) # class xiansu101 ---- conforms to class xiansu101
S3760 (config-pmap-c) # police 8000 512 exceed-action drop

---- Speed limit: 8000 Kbit (1 MB)
S3760 (config-pmap) # class xiansu102 ---- conforms to class xiansu102
S3760 (config-pmap-c) # police 4000 512 exceed-action drop

---- The speed limit is 4000 Kbit.
S3760 (config-pmap-c) # end

Step 4. Go to the interface and apply the previously defined policy
S3760 # conf
S3760 (config) # int fa 0/10 ---- enter the interface
S3760 (config-if) # service-policy input xiansu --- apply the speed limit policy to this interface
2. Use rate-limit output to limit the download speed.

How to delete an interface:
Switch (config) # interface G 0/2
Switch (config-if) # no switchport port-security mac-address 00d0. f800.073c ip-address 192.168.12.202 // Delete the binding of 192.168.12.202
 
 
Bound command:
Switch (config) # interface G 0/2
Switch (config-if) # switchport port-security mac-address 00d0. f8001_23c ip-address 192.168.12.202
 
2026 within a vswitch
Sh interface static display port status
Sh mac-address interface fast0 /?? Displays the MAC address obtained from the port.
Sh mac dy: Check the MAC address of each port without the MAC address in the uplink port.
Use sh arp IN S7604 to view the IP address corresponding to the MAC address
Inter fast0 /??
Switchport port-security // s3750

Enable Port Security
Switchport port-security maxmum ??

Set the maximum number of uplink addresses on the port
Switchport port-security violation protect // s3750
 
Protection port. When the number of uplink addresses is full or is not discarded at the same time
Switchport port-security mac-address h.h.h.h.h // s3750 ip a. B. c. d
Set the MAC address of the computer connected to the port
Exit
Arp 192.168 .?.? H. Use ARP to bind the MAC address and IP address
Create different ACCESS-LIST in vswitch 3750
Ip access-list extended 103
10 permit ip host 192.168.6.13 any ip address allowed
20 permit ip host 192.168.6.30 any
30 permit ip host 192.168.6.12 any
40 permit ip host 192.168.10.247 any vswitch management VLAN address
50 deny ip any IP address other than the above IP address cannot be accessed
When adding the ip address to the access list, first use no deny ip address any and then add the ip address,
Add deny ip any to the end of the list.
Interface FastEthernet 0/3
Switchport mode trunk
Switchport trunk allowed vlan remove 5
Ip access-group 103 in cascade port application access list
Description s3750-to-2026-3
This article is from the "Computer Tips" blog