ASA QOS配置
第一步，在外網(wǎng)接口啟用QOS隊(duì)列
priority-queue JL //在JL接口啟用優(yōu)先級(jí)隊(duì)列
? queue-limit? 20? //設(shè)定優(yōu)先級(jí)隊(duì)列的大小為20
? tx-ring-limit 20000 //設(shè)定在給定時(shí)間內(nèi)允許等待的最大的包的數(shù)量
第二步，定義ACL匹配應(yīng)用流量：(可以用object-group)
object-group network qos-10M
network-object 172.24.41.0 255.255.255.0
network-object 172.24.42.0 255.255.255.0
network-object 172.24.43.0 255.255.255.0
object-group network qos-15M
network-object 172.24.44.0 255.255.255.0
network-object 172.24.45.0 255.255.255.0
然后
access-list QOS-10M extended permit ip object-group qos-10M any
access-list QOS-15M extended permit ip object-group qos-15M any
第三步，定義class-map匹配相關(guān)ACL：
class-map qos-15M
match access-list QOS-15M
class-map qos-10M
match access-list QOS-10M
第四步，定義policy-map，設(shè)置好帶寬
policy-map JL_qos-001
class qos-10M
? police input 10000000
? police output 10000000
class qos-15M
? police input 15000000
? police output 15000000
第五步，綁定policy-map于相應(yīng)的接口
service-policy JL_qos-001 interface JL 用于接口
service-policy JL_qos-001 Global? 用于全局模式(推薦)
