ip route 0.0.0.0 0.0.0.0 192.0.2.2 access-list 1 permit any access-list 101 permit icmp any any access-list 101 permit tcp any any eq telnet access-list 102 permit tcp any any eq smtp access-list 102 permit tcp any any eq pop3 hostname Router_A interface lan 1 ip address 192.168.0.1 255.255.255.0 exit interface ewan 1 ip address 192.0.2.1 255.255.255.252 qos output bandwidth 100M priq qos-que priq default-que priority 0 default qos-que priq high-que priority 7 qos-que priq low-que priority 3 service-policy output policy1 ip nat inside source list 1 interface exit class-map high-class match ip access-group 101 exit class-map low-class match ip access-group 102 exit action-map high-action set queuing high-que exit action-map low-action set queuing low-que exit policy-map policy1 class high-class action high-action class low-class action low-action exit end
ip route 0.0.0.0 0.0.0.0 192.0.2.1 access-list 1 permit any access-list 101 permit icmp any any access-list 101 permit tcp any any eq telnet access-list 102 permit tcp any any eq smtp access-list 102 permit tcp any any eq pop3 hostname Router_B interface lan 1 ip address 192.168.10.1 255.255.255.0 exit interface ewan 1 ip address 192.0.2.2 255.255.255.252 qos output bandwidth 100M priq qos-que priq default-que priority 0 default qos-que priq high-que priority 7 qos-que priq low-que priority 3 service-policy output policy1 ip nat inside source list 1 interface exit class-map high-class match ip access-group 101 exit class-map low-class match ip access-group 102 exit action-map high-action set queuing high-que exit action-map low-action set queuing low-que exit policy-map policy1 class high-class action high-action class low-class action low-action exit end
設定内容 | 画面表示例 |
---|---|
特権ユーザモードへの移行 パスワードの入力 設定情報の初期化 設定モードの変更 設定入力 設定保存 装置再起動 |
Router>enable Enter password: Router# Router#clear working.cfg Router# Router#configure terminal Router(config)#ip route 0.0.0.0 0.0.0.0 192.0.2.2 Router(config)#access-list 1 permit any Router(config)#access-list 101 permit icmp any any Router(config)#access-list 101 permit tcp any any eq telnet Router(config)#access-list 102 permit tcp any any eq smtp Router(config)#access-list 102 permit tcp any any eq pop3 Router(config)#hostname Router_A Router_A(config)#interface lan 1 Router_A(config-if lan 1)# ip address 192.168.0.1 255.255.255.0 Router_A(config-if lan 1)#exit Router_A(config)#interface ewan 1 Router_A(config-if ewan 1)# ip address 192.0.2.1 255.255.255.252 Router_A(config-if ewan 1)# qos output bandwidth 100M priq Router_A(config-if ewan 1)# qos-que priq default-que priority 0 default Router_A(config-if ewan 1)# qos-que priq high-que priority 7 Router_A(config-if ewan 1)# qos-que priq low-que priority 3 Router_A(config-if ewan 1)# service-policy output policy1 Router_A(config-if ewan 1)# ip nat inside source list 1 interface Router_A(config-if ewan 1)#exit Router_A(config)#class-map high-class Router_A(config-class-map)# match ip access-group 101 Router_A(config-class-map)#exit Router_A(config)#class-map low-class Router_A(config-class-map)# match ip access-group 102 Router_A(config-class-map)#exit Router_A(config)#action-map high-action Router_A(config-action-map)# set queuing high-que Router_A(config-action-map)#exit Router_A(config)#action-map low-action Router_A(config-action-map)# set queuing low-que Router_A(config-action-map)#exit Router_A(config)#policy-map policy1 Router_A(config-policy-map)# class high-class action high-action Router_A(config-policy-map)# class low-class action low-action Router_A(config-policy-map)#exit Router_A(config)# Router_A(config)#end Router_A# Router_A#save SIDE-A % saving working-config % finished saving Router_A#reset Going to reset with SIDE-A.frm and SIDE-A Boot-back not scheduled for next boot. Next rebooting firmware SIDE-A.frm is fine. Are you OK to cold start?(y/n)y |
設定内容 | 画面表示例 |
---|---|
特権ユーザモードへの移行 パスワードの入力 設定情報の初期化 設定モードの変更 設定入力 設定保存 装置再起動 |
Router>enable Enter password: Router# Router#clear working.cfg Router# Router#configure terminal Router(config)#ip route 0.0.0.0 0.0.0.0 192.0.2.1 Router(config)#access-list 1 permit any Router(config)#access-list 101 permit icmp any any Router(config)#access-list 101 permit tcp any any eq telnet Router(config)#access-list 102 permit tcp any any eq smtp Router(config)#access-list 102 permit tcp any any eq pop3 Router(config)#hostname Router_B Router_B(config)#interface lan 1 Router_B(config-if lan 1)# ip address 192.168.10.1 255.255.255.0 Router_B(config-if lan 1)#exit Router_B(config)#interface ewan 1 Router_B(config-if ewan 1)# ip address 192.0.2.2 255.255.255.252 Router_B(config-if ewan 1)# qos output bandwidth 100M priq Router_B(config-if ewan 1)# qos-que priq default-que priority 0 default Router_B(config-if ewan 1)# qos-que priq high-que priority 7 Router_B(config-if ewan 1)# qos-que priq low-que priority 3 Router_B(config-if ewan 1)# service-policy output policy1 Router_B(config-if ewan 1)# ip nat inside source list 1 interface Router_B(config-if ewan 1)#exit Router_B(config)#class-map high-class Router_B(config-class-map)# match ip access-group 101 Router_B(config-class-map)#exit Router_B(config)#class-map low-class Router_B(config-class-map)# match ip access-group 102 Router_B(config-class-map)#exit Router_B(config)#action-map high-action Router_B(config-action-map)# set queuing high-que Router_B(config-action-map)#exit Router_B(config)#action-map low-action Router_B(config-action-map)# set queuing low-que Router_B(config-action-map)#exit Router_B(config)#policy-map policy1 Router_B(config-policy-map)# class high-class action high-action Router_B(config-policy-map)# class low-class action low-action Router_B(config-policy-map)#exit Router_B(config)# Router_B(config)#end Router_B# Router_B#save SIDE-A % saving working-config % finished saving Router_B#reset Going to reset with SIDE-A.frm and SIDE-A Boot-back not scheduled for next boot. Next rebooting firmware SIDE-A.frm is fine. Are you OK to cold start?(y/n)y |
アクセスリストを確認します。
確認内容 | 画面表示例 |
---|---|
アクセスリスト情報を表示 設定が正しいことを確認 設定が正しいことを確認 |
Router_A#show access-lists Standard IP access list 1 permit any Extended IP access list 101 permit icmp any any permit tcp any any eq telnet Extended IP access list 102 permit tcp any any eq smtp permit tcp any any eq pop3 |
キューイング状況を確認します。
確認内容 | 画面表示例 |
---|---|
キューの統計情報を表示 high-que のパケット数がカウントされていることを確認 |
Router_A#show qos queuing interface : ewan 1 queuing type : PRIQ queuing-name default-que (default que) priority : 0 queue length/limit : 0/50 sent/drop packets: packets : 0/0 bytes : 0/0 period cnt : 0 queuing-name low-que priority : 3 queue length/limit : 0/50 sent/drop packets: packets : 0/0 bytes : 0/0 period cnt : 0 queuing-name high-que priority : 7 queue length/limit : 0/50 sent/drop packets: packets : 3/0 bytes : 234/0 period cnt : 3 |
確認内容 | 画面表示例 |
---|---|
キューの統計情報を表示 low-que のパケット数がカウントされていることを確認 |
Router_A#show qos queuing interface : ewan 1 queuing type : PRIQ queuing-name default-que (default que) priority : 0 queue length/limit : 0/50 sent/drop packets: packets : 0/0 bytes : 0/0 period cnt : 0 queuing-name low-que priority : 3 queue length/limit : 0/50 sent/drop packets: packets : 3/0 bytes : 198/0 period cnt : 3 queuing-name high-que priority : 7 queue length/limit : 0/50 sent/drop packets: packets : 3/0 bytes : 234/0 period cnt : 3 |