ASA的QOS基本配置

Posted 2020-10-27

第一步:新建ACL
access-list acl174 extended permit ip host 192.168.1.74 any
access-list acl174 extended permit ip any host 192.168.1.7

第二步:新建class-map，并关联相应的ACL
class-map class174
match access-list acl174

第三步:新建policy-map，并关联相应的class-map
policy-map policy_inside
class class174
police input 2000000 1500 conform-action transmit exceed-action drop //限制入流量2Mbps
police output 3000000 1500 conform-action transmit exceed-action drop //限制出流量3Mbps

第四步:将policy-map关联到相应的接口中
service-policy policy_inside interface outside

备注：一个IP段或object-group，指的是这段的总流量