取消
显示结果 
搜索替代 
您的意思是: 
cancel
7406
查看次数
0
有帮助
6
回复

cisco ASA5505 如何做qos 优先级流量控制

water_4
Level 1
Level 1
1 个已接受解答

已接受的解答

pebao
Cisco Employee
Cisco Employee
6 条回复6

pebao
Cisco Employee
Cisco Employee
ASA上QOS的配置和路由器的几乎一样。
http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/82310-qos-voip-vpn.html
这是一个非常好的例子。

baiyunhu75
Level 1
Level 1
ASA Version 8.2(1)
!
hostname Qos
enable password 2KFQnbNIdI.2KYOU encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface Vlan1
nameif inside
security-level 100
ip address 172.16.8.1 255.255.255.0
!
interface Vlan2
nameif outside
security-level 0
ip address 192.168.1.251 255.255.255.0
!
interface Ethernet0/0
switchport access vlan 2
!
clock timezone BJ 8
!
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
!
access-list 3 extended permit ip any host 172.16.8.3
access-list 4 extended permit ip any host 172.16.8.4
access-list 5 extended permit ip any host 172.16.8.5
access-list 6 extended permit ip any host 172.16.8.6
access-list 7 extended permit ip any host 172.16.8.7
access-list 8 extended permit ip any host 172.16.8.8
access-list 9 extended permit ip any host 172.16.8.9
access-list 10 extended permit ip any host 172.16.8.10
access-list 11 extended permit ip any host 172.16.8.11
access-list 12 extended permit ip any host 172.16.8.12
access-list 13 extended permit ip any host 172.16.8.13
access-list 14 extended permit ip any host 172.16.8.14
access-list 15 extended permit ip any host 172.16.8.15
access-list 16 extended permit ip any host 172.16.8.16
access-list 17 extended permit ip any host 172.16.8.17
access-list 18 extended permit ip any host 172.16.8.18
access-list 19 extended permit ip any host 172.16.8.19
access-list 20 extended permit ip any host 172.16.8.20
access-list 21 extended permit ip any host 172.16.8.21
access-list 22 extended permit ip any host 172.16.8.22
access-list 23 extended permit ip any host 172.16.8.23
access-list 24 extended permit ip any host 172.16.8.24
access-list 25 extended permit ip any host 172.16.8.25
access-list 26 extended permit ip any host 172.16.8.26
access-list 27 extended permit ip any host 172.16.8.27
access-list 28 extended permit ip any host 172.16.8.28
access-list 29 extended permit ip any host 172.16.8.29
access-list 30 extended permit ip any host 172.16.8.30
access-list 31 extended permit ip any host 172.16.8.31
access-list 32 extended permit ip any host 172.16.8.32
access-list 33 extended permit ip any host 172.16.8.33
access-list 34 extended permit ip any host 172.16.8.34
access-list 35 extended permit ip any host 172.16.8.35
access-list 36 extended permit ip any host 172.16.8.36
access-list 37 extended permit ip any host 172.16.8.37
access-list 38 extended permit ip any host 172.16.8.38
access-list 39 extended permit ip any host 172.16.8.39
access-list 40 extended permit ip any host 172.16.8.40
access-list 41 extended permit ip any host 172.16.8.41
access-list 42 extended permit ip any host 172.16.8.42
access-list 43 extended permit ip any host 172.16.8.43
access-list 44 extended permit ip any host 172.16.8.44
access-list 45 extended permit ip any host 172.16.8.45
access-list 46 extended permit ip any host 172.16.8.46
access-list 47 extended permit ip any host 172.16.8.47
access-list 48 extended permit ip any host 172.16.8.48
access-list 49 extended permit ip any host 172.16.8.49
access-list 50 extended permit ip any host 172.16.8.50
access-list 51 extended permit ip any host 172.16.8.51
access-list 52 extended permit ip any host 172.16.8.52
access-list 53 extended permit ip any host 172.16.8.53
access-list 54 extended permit ip any host 172.16.8.54
access-list 55 extended permit ip any host 172.16.8.55
access-list 56 extended permit ip any host 172.16.8.56
access-list 57 extended permit ip any host 172.16.8.57
access-list 58 extended permit ip any host 172.16.8.58
access-list 59 extended permit ip any host 172.16.8.59
access-list 60 extended permit ip any host 172.16.8.60
!
icmp permit any outside
icmp permit any inside
!
global (outside) 1 interface
nat (inside) 1 172.16.8.0 255.255.255.0
route outside 0.0.0.0 0.0.0.0 192.168.1.11 1
!
aaa authentication ssh console LOCAL
!
dhcpd address 172.16.8.2-172.16.8.100 inside
dhcpd enable inside
!
ntp server 202.118.1.130
ntp server 202.65.114.202
webvpn
username cisco password 3USUcOPFUiMCO4Jk encrypted privilege 15
!
class-map qos9
match access-list 9
class-map qos8
match access-list 8
class-map qos5
match access-list 5
class-map qos4
match access-list 4
class-map qos7
match access-list 7
class-map qos6
match access-list 6
class-map qos3
match access-list 3
class-map qos49
match access-list 49
class-map qos58
match access-list 58
class-map qos48
match access-list 48
class-map qos59
match access-list 59
class-map qos18
match access-list 18
class-map qos19
match access-list 19
class-map qos29
match access-list 29
class-map qos38
match access-list 38
class-map qos28
match access-list 28
class-map qos39
match access-list 39
class-map qos14
match access-list 14
class-map qos27
match access-list 27
class-map qos36
match access-list 36
class-map qos41
match access-list 41
class-map qos50
match access-list 50
class-map qos15
match access-list 15
class-map qos26
match access-list 26
class-map qos37
match access-list 37
class-map qos40
match access-list 40
class-map qos51
match access-list 51
class-map qos16
match access-list 16
class-map qos25
match access-list 25
class-map qos34
match access-list 34
class-map qos43
match access-list 43
class-map qos52
match access-list 52
class-map qos17
match access-list 17
class-map qos24
match access-list 24
class-map qos35
match access-list 35
class-map qos42
match access-list 42
class-map qos53
match access-list 53
class-map qos60
match access-list 60
class-map qos10
match access-list 10
class-map qos23
match access-list 23
class-map qos32
match access-list 32
class-map qos45
match access-list 45
class-map qos54
match access-list 54
class-map qos11
match access-list 11
class-map qos22
match access-list 22
class-map qos33
match access-list 33
class-map qos44
match access-list 44
class-map qos55
match access-list 55
class-map qos12
match access-list 12
class-map qos21
match access-list 21
class-map qos30
match access-list 30
class-map qos47
match access-list 47
class-map qos56
match access-list 56
class-map qos13
match access-list 13
class-map qos20
match access-list 20
class-map qos31
match access-list 31
class-map qos46
match access-list 46
class-map qos57
match access-list 57
!
policy-map global_policy
class inspection_default
inspect icmp
!
policy-map myqos
class qos3
police output 1100000 32000
class qos4
police output 2400000
class qos5
police output 2400000
class qos6
police output 2400000
class qos7
police output 2400000
class qos8
police output 2400000
class qos9
police output 2400000
class qos10
police output 2400000
class qos11
police output 2400000
class qos12
police output 2400000
class qos13
police output 2400000
class qos14
police output 2400000
class qos15
police output 2400000
class qos16
police output 2400000
class qos17
police output 2400000
class qos18
police output 2400000
class qos19
police output 2400000
class qos20
police output 2400000
class qos21
police output 2400000
class qos22
police output 2400000
class qos23
police output 2400000
class qos24
police output 2400000
class qos25
police output 2400000
class qos26
police output 2400000
class qos27
police output 2400000
class qos28
police output 2400000
class qos29
police output 2400000
class qos30
police output 2400000
class qos31
police output 2400000
class qos32
police output 2400000
class qos33
police output 2400000
class qos34
police output 2400000
class qos35
police output 2400000
class qos36
police output 2400000
class qos37
police output 2400000
class qos38
police output 2400000
class qos39
police output 2400000
class qos40
police output 2400000
class qos41
police output 2400000
class qos42
police output 2400000
class qos43
police output 2400000
class qos44
police output 2400000
class qos45
police output 2400000
class qos46
police output 2400000
class qos47
police output 2400000
class qos48
police output 2400000
class qos49
police output 2400000
class qos50
police output 2400000
class qos51
police output 2400000
class qos52
police output 2400000
class qos53
police output 2400000
class qos54
police output 2400000
class qos55
police output 2400000
class qos56
police output 2400000
class qos57
police output 2400000
class qos58
police output 2400000
class qos59
police output 2400000
class qos60
police output 2400000
!
service-policy myqos interface inside
!

baiyunhu75
Level 1
Level 1
ASA Version 8.2(1)
!
hostname Qos
enable password 2KFQnbNIdI.2KYOU encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface Vlan1
nameif inside
security-level 100
ip address 172.16.8.1 255.255.255.0
!
interface Vlan2
nameif outside
security-level 0
ip address 192.168.1.251 255.255.255.0
!
interface Ethernet0/0
switchport access vlan 2
!
clock timezone BJ 8
!
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
!
access-list 3 extended permit ip any host 172.16.8.3
access-list 4 extended permit ip any host 172.16.8.4
access-list 5 extended permit ip any host 172.16.8.5
access-list 6 extended permit ip any host 172.16.8.6
access-list 7 extended permit ip any host 172.16.8.7
access-list 8 extended permit ip any host 172.16.8.8
access-list 9 extended permit ip any host 172.16.8.9
access-list 10 extended permit ip any host 172.16.8.10
access-list 11 extended permit ip any host 172.16.8.11
access-list 12 extended permit ip any host 172.16.8.12
access-list 13 extended permit ip any host 172.16.8.13
access-list 14 extended permit ip any host 172.16.8.14
access-list 15 extended permit ip any host 172.16.8.15
access-list 16 extended permit ip any host 172.16.8.16
access-list 17 extended permit ip any host 172.16.8.17
access-list 18 extended permit ip any host 172.16.8.18
access-list 19 extended permit ip any host 172.16.8.19
access-list 20 extended permit ip any host 172.16.8.20
access-list 21 extended permit ip any host 172.16.8.21
access-list 22 extended permit ip any host 172.16.8.22
access-list 23 extended permit ip any host 172.16.8.23
access-list 24 extended permit ip any host 172.16.8.24
access-list 25 extended permit ip any host 172.16.8.25
access-list 26 extended permit ip any host 172.16.8.26
access-list 27 extended permit ip any host 172.16.8.27
access-list 28 extended permit ip any host 172.16.8.28
access-list 29 extended permit ip any host 172.16.8.29
access-list 30 extended permit ip any host 172.16.8.30
access-list 31 extended permit ip any host 172.16.8.31
access-list 32 extended permit ip any host 172.16.8.32
access-list 33 extended permit ip any host 172.16.8.33
access-list 34 extended permit ip any host 172.16.8.34
access-list 35 extended permit ip any host 172.16.8.35
access-list 36 extended permit ip any host 172.16.8.36
access-list 37 extended permit ip any host 172.16.8.37
access-list 38 extended permit ip any host 172.16.8.38
access-list 39 extended permit ip any host 172.16.8.39
access-list 40 extended permit ip any host 172.16.8.40
access-list 41 extended permit ip any host 172.16.8.41
access-list 42 extended permit ip any host 172.16.8.42
access-list 43 extended permit ip any host 172.16.8.43
access-list 44 extended permit ip any host 172.16.8.44
access-list 45 extended permit ip any host 172.16.8.45
access-list 46 extended permit ip any host 172.16.8.46
access-list 47 extended permit ip any host 172.16.8.47
access-list 48 extended permit ip any host 172.16.8.48
access-list 49 extended permit ip any host 172.16.8.49
access-list 50 extended permit ip any host 172.16.8.50
access-list 51 extended permit ip any host 172.16.8.51
access-list 52 extended permit ip any host 172.16.8.52
access-list 53 extended permit ip any host 172.16.8.53
access-list 54 extended permit ip any host 172.16.8.54
access-list 55 extended permit ip any host 172.16.8.55
access-list 56 extended permit ip any host 172.16.8.56
access-list 57 extended permit ip any host 172.16.8.57
access-list 58 extended permit ip any host 172.16.8.58
access-list 59 extended permit ip any host 172.16.8.59
access-list 60 extended permit ip any host 172.16.8.60
!
icmp permit any outside
icmp permit any inside
!
global (outside) 1 interface
nat (inside) 1 172.16.8.0 255.255.255.0
route outside 0.0.0.0 0.0.0.0 192.168.1.11 1
!
aaa authentication ssh console LOCAL
!
dhcpd address 172.16.8.2-172.16.8.100 inside
dhcpd enable inside
!
ntp server 202.118.1.130
ntp server 202.65.114.202
webvpn
username cisco password 3USUcOPFUiMCO4Jk encrypted privilege 15
!
class-map qos9
match access-list 9
class-map qos8
match access-list 8
class-map qos5
match access-list 5
class-map qos4
match access-list 4
class-map qos7
match access-list 7
class-map qos6
match access-list 6
class-map qos3
match access-list 3
class-map qos49
match access-list 49
class-map qos58
match access-list 58
class-map qos48
match access-list 48
class-map qos59
match access-list 59
class-map qos18
match access-list 18
class-map qos19
match access-list 19
class-map qos29
match access-list 29
class-map qos38
match access-list 38
class-map qos28
match access-list 28
class-map qos39
match access-list 39
class-map qos14
match access-list 14
class-map qos27
match access-list 27
class-map qos36
match access-list 36
class-map qos41
match access-list 41
class-map qos50
match access-list 50
class-map qos15
match access-list 15
class-map qos26
match access-list 26
class-map qos37
match access-list 37
class-map qos40
match access-list 40
class-map qos51
match access-list 51
class-map qos16
match access-list 16
class-map qos25
match access-list 25
class-map qos34
match access-list 34
class-map qos43
match access-list 43
class-map qos52
match access-list 52
class-map qos17
match access-list 17
class-map qos24
match access-list 24
class-map qos35
match access-list 35
class-map qos42
match access-list 42
class-map qos53
match access-list 53
class-map qos60
match access-list 60
class-map qos10
match access-list 10
class-map qos23
match access-list 23
class-map qos32
match access-list 32
class-map qos45
match access-list 45
class-map qos54
match access-list 54
class-map qos11
match access-list 11
class-map qos22
match access-list 22
class-map qos33
match access-list 33
class-map qos44
match access-list 44
class-map qos55
match access-list 55
class-map qos12
match access-list 12
class-map qos21
match access-list 21
class-map qos30
match access-list 30
class-map qos47
match access-list 47
class-map qos56
match access-list 56
class-map qos13
match access-list 13
class-map qos20
match access-list 20
class-map qos31
match access-list 31
class-map qos46
match access-list 46
class-map qos57
match access-list 57
!
policy-map global_policy
class inspection_default
inspect icmp
!
policy-map myqos
class qos3
police output 1100000 32000
class qos4
police output 2400000
class qos5
police output 2400000
class qos6
police output 2400000
class qos7
police output 2400000
class qos8
police output 2400000
class qos9
police output 2400000
class qos10
police output 2400000
class qos11
police output 2400000
class qos12
police output 2400000
class qos13
police output 2400000
class qos14
police output 2400000
class qos15
police output 2400000
class qos16
police output 2400000
class qos17
police output 2400000
class qos18
police output 2400000
class qos19
police output 2400000
class qos20
police output 2400000
class qos21
police output 2400000
class qos22
police output 2400000
class qos23
police output 2400000
class qos24
police output 2400000
class qos25
police output 2400000
class qos26
police output 2400000
class qos27
police output 2400000
class qos28
police output 2400000
class qos29
police output 2400000
class qos30
police output 2400000
class qos31
police output 2400000
class qos32
police output 2400000
class qos33
police output 2400000
class qos34
police output 2400000
class qos35
police output 2400000
class qos36
police output 2400000
class qos37
police output 2400000
class qos38
police output 2400000
class qos39
police output 2400000
class qos40
police output 2400000
class qos41
police output 2400000
class qos42
police output 2400000
class qos43
police output 2400000
class qos44
police output 2400000
class qos45
police output 2400000
class qos46
police output 2400000
class qos47
police output 2400000
class qos48
police output 2400000
class qos49
police output 2400000
class qos50
police output 2400000
class qos51
police output 2400000
class qos52
police output 2400000
class qos53
police output 2400000
class qos54
police output 2400000
class qos55
police output 2400000
class qos56
police output 2400000
class qos57
police output 2400000
class qos58
police output 2400000
class qos59
police output 2400000
class qos60
police output 2400000
!
service-policy myqos interface inside
!

baiyunhu75
Level 1
Level 1
在调用时,用priority关键字,就可以了!

taosun2
Cisco Employee
Cisco Employee

pebao
Cisco Employee
Cisco Employee
我已经回答了您的帖子“ cisco ASA5505 如何做qos 优先级流量控制”,如有帮到您请您选为最佳答案,并将帖子置为解决状态。
入门指南

使用上面的搜索栏输入关键字、短语或问题,搜索问题的答案。

我们希望您在这里的旅程尽可能顺利,因此这里有一些链接可以帮助您快速熟悉思科社区:









快捷链接