The specific method of speed limit setting for routers illustrated tutorials

Source: Internet
Author: User
Tags port number

First, tl-r4148 router speed limit

1. tl-r4148 Router speed limit setting

First turn on the QoS settings switch, uplink and downlink total broadband will be configured to 100000Kbps router

The QoS rules are then set: "Add new Entries", enter the IP segment and port, the mode is best to choose independent broadband.

2, Huawei h3cer3100 Router speed limit set screenshot

The download value for this router is kbyte/s, which is the actual download number. With the above two router speed limit settings, I can see the same limit download speed of 512KB, but the value is completely different. Just watch to see if it's "Kbps" or "kbyte/s." Two kinds of difference.

3, according to the export bandwidth for the router speed limit settings

10MB fiber is generally 70 or less. More than 70 of the recommended 100MB optical fiber. 10MB Fiber Network, 70 of computers if you often watch movies and downloads online more than recommended to 60KB is enough, so do not affect others to play the game, or more than 20 people at the same time download or watch the film will be very card. 50 computers can give 80KB is enough, 100MB words can each computer to foot 2MB.

Second, Cisco router how to speed limit

This is mainly for Cisco routers, detailed analysis of Cisco routers how to speed limit, we all know that if you want to limit a service, you have to set the ACL (Access control list) on the router to block the services used by the port, thereby preventing the service from running properly. For BT Software, we can try to seal it on the port. In general, BT Software uses 6880-6890 ports, the company's core Cisco router using the following command to block 6880-6890 ports.

Speed limit:

Access-list 130 Remark BT

Access-list 130 Permit TCP any any range 6881 6890

Access-list 130 Permit TCP any range 6881 6890 any

Rate-limit Input Access-group 130 712000 8000 8000 conform-action transmit exceed-action drop

Rate-limit Output access-group 130 712000 8000 8000 conform-action transmit exceed-action drop

Prohibit downloading:

Access-list 130 deny TCP any any of range 6881 6890

Access-list 130 deny TCP any range 6881 6890 any

IP access-group 130 In/out

But now the BT software, after the blockade will automatically change the port, some software or use to 8000, 8080, 2070 and other ports, restricting these ports so that the network is not normal! The second approach is to use Nvar (network-based application recognition, Network application identification). Nbar (network-based application recognition) means network application recognition. Nbar is a dynamic www.hg0088.com technology that can find protocols at four to seven levels, and it can not only achieve the same control of static, Simple Network Application protocol TCP/UDP port number. For example, we are familiar with the use of the Web application of TCP 80, but also to control the general ACLs can not be dynamic port of those protocols, such as the use of VoIP H.323,sip.

To realize the control of BT flow, it is necessary to support PDLM on Cisco router. PDLM is written by packet Description Language module, meaning the packet Description Language module. It is a description of the protocol layer for high-level applications of the network, such as protocol type, service port number, etc. Its advantage is to allow Nbar to adapt to many existing network applications, such as HTTP Url,dns,ftp,voip, and it can also be defined to enable Nbar to support many emerging network applications. such as the Peer2peer tool. PDLM can be downloaded on Cisco's Web site and use PDLM to limit malicious traffic on some networks. Cisco provides three PDLM modules on its official website, The KAZAA2.PDLM,BITTORRENT.PDLM.EMONKEY.PDLM can be used to block the KAZAA,BT, the donkey gets pdlm and then copies BITTORRENT.PDLM to the route via the TFTP server. Use the IP nbar pdlm bittorrent.pdlm command to start the BT function in Nbar. Create a CLASS-MAP and policy map and apply it to the corresponding Cisco router interface. An interface that is typically connected to the Internet (Chinanet) is an fastethernet or 10M Ethernet interface. You can see the following configuration on the Cisco router:

Class-map Match-all BitTorrent

Match protocol BitTorrent

!

!

Policy-map Bittorrent-policy

Class BitTorrent

Drop

!

Interface fastethernet0/

Description Neibujiekou

IP address 192.168.0.1 255.255.255.0

IP nat Inside

Service-policy input Bittorrent-policy

Service-policy Output Bittorrent-policy

!

This allows you to implement some traffic control on your company or organization's Internet access to Cisco routers. At the same time Nbar and PDLM can also be used in your company and the organization of the Intranet, you can ensure the reasonable use of WAN bandwidth.

Three, Tp-link broadband router speed limit setting and Peer-to-peer setting method

Tp-link Broadband Router seal port speed limit setting and Peer-to-peer problem, the Peer-to-peer full name Peer-to-peer, can be defined as: the use of distributed resources in a decentralized way to complete a critical task of a class of systems and applications. The definition has two points to explain:

Resources-including computing capacity, data, network bandwidth, key tasks-distributed computing, file sharing, platform services, collaborative communications. For the general user community, the most used of course is file sharing. This kind of software has several typical representative: BT, Electric Donkey, Thunder, QQ live broadcast, PPStream etc.

1. Seal Port

This method can only limit the use of Peer-to-peer software in a small scope, the effect is not very good, because a lot of peer-to-peer software can manually specify the listening port, even if you can not manually specify the listening port, the software itself to use the listening port range is also relatively large, usually 0~65535. If you just browse the Web, send and receive mail, QQ and other applications, you can completely put most of the ports do not need to be banned. Of course, such a multiport, specifically to prohibit which ports, it depends on your own, as long as it does not affect your work, life on the line. This limits the effect of this type of port is: the intranet in the use of Peer-to-peer host can connect to the external network main opportunities are much less, but, and can not completely limit the application of Peer-to-peer software. Can be set up in the "Security settings-ip address filtering", because the Thunder server usually use 3076,3077,3078 these three ports and client communication, so sealed off these three ports, thunder download speed will be reduced a lot. Similar methods are used to monitor ports on other Peer-to-peer software.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.