SR8812设备,接有MIC-XP5L板卡及PIC-XP1L板卡
将业务从PIC-XP1L板卡端口上迁移至MIC-XP5L板卡后,QOS-ACL配置不起作用,配置实例如下:
interface Route-Aggregation103.2353
qos apply policy ott-shangxing inbound
qos apply policy ott-xiaxing outbound
vlan-type dot1q vid 2353 to 2358 second-dot1q any
vlan-termination broadcast enable
pppoe-server bind virtual-template 24
(0)
acl咋写的
(0)
traffic behavior ott-shangxing remark account-level 1 # traffic behavior ott-xiaxing remark account-level 1 traffic classifier ott-shangxing operator and if-match authenticated-user if-match acl 3600 # traffic classifier ott-xiaxing operator and if-match authenticated-user if-match acl 3601 qos policy ott-shangxing classifier ott-shangxing behavior ott-shangxing # qos policy ott-xiaxing classifier ott-xiaxing behavior ott-xiaxing acl advanced 3600 description OTT-shangxing rule 90 permit ip source 10.33.0.0 0.0.255.255 destination 125.210.30.160 0.0.0.31 rule 95 permit ip source 10.33.0.0 0.0.255.255 destination 172.31.137.0 0.0.0.255 rule 100 permit ip source 10.33.0.0 0.0.255.255 destination 172.31.138.0 0.0.0.255 rule 105 permit ip source 10.33.0.0 0.0.255.255 destination 172.31.146.0 0.0.0.255 rule 120 permit ip source 10.33.0.0 0.0.255.255 destination 172.31.147.0 0.0.0.255 rule 125 permit ip source 10.33.0.0 0.0.255.255 destination 172.31.183.0 0.0.0.255 rule 130 permit ip source 10.33.0.0 0.0.255.255 destination 172.31.196.0 0.0.0.255 rule 135 permit ip source 10.33.0.0 0.0.255.255 destination 172.31.251.0 0.0.0.255 rule 140 permit ip source 10.33.0.0 0.0.255.255 destination 172.31.252.0 0.0.0.255 rule 145 permit ip source 10.33.0.0 0.0.255.255 destination 10.16.85.244 0 rule 150 permit ip source 10.33.0.0 0.0.255.255 destination 10.16.85.245 0 rule 155 permit ip source 10.33.0.0 0.0.255.255 destination 10.16.85.246 0 rule 160 permit ip source 10.33.0.0 0.0.255.255 destination 172.18.29.0 0.0.0.255 rule 170 permit ip source 10.33.0.0 0.0.255.255 destination 10.179.254.92 0 rule 175 permit ip source 10.33.0.0 0.0.255.255 destination 119.36.49.0 0.0.0.127 rule 180 permit ip source 10.33.0.0 0.0.255.255 destination 103.95.52.0 0.0.0.255 rule 181 permit ip source 10.33.0.0 0.0.255.255 destination 103.95.53.0 0.0.0.255 rule 185 permit ip source 10.33.0.0 0.0.255.255 destination 119.36.216.128 0.0.0.127 rule 190 permit ip source 10.33.0.0 0.0.255.255 destination 119.36.52.0 0.0.0.31 rule 195 permit ip source 10.33.0.0 0.0.255.255 destination 119.36.52.32 0.0.0.31 rule 200 permit ip source 10.33.0.0 0.0.255.255 destination 119.36.50.128 0.0.0.31 rule 201 permit ip source 10.33.0.0 0.0.255.255 destination 113.57.83.192 0.0.0.63 # acl advanced 3601 description OTT-xiaxing rule 90 permit ip source 125.210.30.160 0.0.0.31 destination 10.33.0.0 0.0.255.255 rule 95 permit ip source 172.31.137.0 0.0.0.255 destination 10.33.0.0 0.0.255.255 rule 100 permit ip source 172.31.138.0 0.0.0.255 destination 10.33.0.0 0.0.255.255 rule 115 permit ip source 172.31.146.0 0.0.0.255 destination 10.33.0.0 0.0.255.255 rule 120 permit ip source 172.31.147.0 0.0.0.255 destination 10.33.0.0 0.0.255.255 rule 125 permit ip source 172.31.183.0 0.0.0.255 destination 10.33.0.0 0.0.255.255 rule 130 permit ip source 172.31.196.0 0.0.0.255 destination 10.33.0.0 0.0.255.255 rule 135 permit ip source 172.31.251.0 0.0.0.255 destination 10.33.0.0 0.0.255.255 rule 140 permit ip source 172.31.252.0 0.0.0.255 destination 10.33.0.0 0.0.255.255 rule 145 permit ip source 10.16.85.244 0 destination 10.33.0.0 0.0.255.255 rule 150 permit ip source 10.16.85.245 0 destination 10.33.0.0 0.0.255.255 rule 155 permit ip source 10.16.85.246 0 destination 10.33.0.0 0.0.255.255 rule 160 permit ip source 172.18.29.0 0.0.0.255 destination 10.33.0.0 0.0.255.255 rule 170 permit ip source 10.179.254.92 0 destination 10.33.0.0 0.0.255.255 rule 175 permit ip source 119.36.49.0 0.0.0.127 destination 10.33.0.0 0.0.255.255 rule 180 permit ip source 103.95.52.0 0.0.0.255 destination 10.33.0.0 0.0.255.255 rule 181 permit ip source 103.95.53.0 0.0.0.255 destination 10.33.0.0 0.0.255.255 rule 185 permit ip source 119.36.216.128 0.0.0.127 destination 10.33.0.0 0.0.255.255 rule 190 permit ip source 119.36.52.0 0.0.0.31 destination 10.33.0.0 0.0.255.255 rule 195 permit ip source 119.36.52.32 0.0.0.31 destination 10.33.0.0 0.0.255.255 rule 200 permit ip source 119.36.50.128 0.0.0.31 destination 10.33.0.0 0.0.255.255 rule 201 permit ip source 113.57.83.192 0.0.0.63 destination 10.33.0.0 0.0.255.255 #
关键5端口的板卡上不行
traffic behavior ott-shangxing
remark account-level 1
#
traffic behavior ott-xiaxing
remark account-level 1
traffic classifier ott-shangxing operator and
if-match authenticated-user
if-match acl 3600
#
traffic classifier ott-xiaxing operator and
if-match authenticated-user
if-match acl 3601
qos policy ott-shangxing
classifier ott-shangxing behavior ott-shangxing
#
qos policy ott-xiaxing
classifier ott-xiaxing behavior ott-xiaxing
acl advanced 3600
description OTT-shangxing
rule 90 permit ip source 10.33.0.0 0.0.255.255 destination 125.210.30.160 0.0.0.31
rule 95 permit ip source 10.33.0.0 0.0.255.255 destination 172.31.137.0 0.0.0.255
rule 100 permit ip source 10.33.0.0 0.0.255.255 destination 172.31.138.0 0.0.0.255
rule 105 permit ip source 10.33.0.0 0.0.255.255 destination 172.31.146.0 0.0.0.255
rule 120 permit ip source 10.33.0.0 0.0.255.255 destination 172.31.147.0 0.0.0.255
rule 125 permit ip source 10.33.0.0 0.0.255.255 destination 172.31.183.0 0.0.0.255
rule 130 permit ip source 10.33.0.0 0.0.255.255 destination 172.31.196.0 0.0.0.255
rule 135 permit ip source 10.33.0.0 0.0.255.255 destination 172.31.251.0 0.0.0.255
rule 140 permit ip source 10.33.0.0 0.0.255.255 destination 172.31.252.0 0.0.0.255
rule 145 permit ip source 10.33.0.0 0.0.255.255 destination 10.16.85.244 0
rule 150 permit ip source 10.33.0.0 0.0.255.255 destination 10.16.85.245 0
rule 155 permit ip source 10.33.0.0 0.0.255.255 destination 10.16.85.246 0
rule 160 permit ip source 10.33.0.0 0.0.255.255 destination 172.18.29.0 0.0.0.255
rule 170 permit ip source 10.33.0.0 0.0.255.255 destination 10.179.254.92 0
rule 175 permit ip source 10.33.0.0 0.0.255.255 destination 119.36.49.0 0.0.0.127
rule 180 permit ip source 10.33.0.0 0.0.255.255 destination 103.95.52.0 0.0.0.255
rule 181 permit ip source 10.33.0.0 0.0.255.255 destination 103.95.53.0 0.0.0.255
rule 185 permit ip source 10.33.0.0 0.0.255.255 destination 119.36.216.128 0.0.0.127
rule 190 permit ip source 10.33.0.0 0.0.255.255 destination 119.36.52.0 0.0.0.31
rule 195 permit ip source 10.33.0.0 0.0.255.255 destination 119.36.52.32 0.0.0.31
rule 200 permit ip source 10.33.0.0 0.0.255.255 destination 119.36.50.128 0.0.0.31
rule 201 permit ip source 10.33.0.0 0.0.255.255 destination 113.57.83.192 0.0.0.63
#
acl advanced 3601
description OTT-xiaxing
rule 90 permit ip source 125.210.30.160 0.0.0.31 destination 10.33.0.0 0.0.255.255
rule 95 permit ip source 172.31.137.0 0.0.0.255 destination 10.33.0.0 0.0.255.255
rule 100 permit ip source 172.31.138.0 0.0.0.255 destination 10.33.0.0 0.0.255.255
rule 115 permit ip source 172.31.146.0 0.0.0.255 destination 10.33.0.0 0.0.255.255
rule 120 permit ip source 172.31.147.0 0.0.0.255 destination 10.33.0.0 0.0.255.255
rule 125 permit ip source 172.31.183.0 0.0.0.255 destination 10.33.0.0 0.0.255.255
rule 130 permit ip source 172.31.196.0 0.0.0.255 destination 10.33.0.0 0.0.255.255
rule 135 permit ip source 172.31.251.0 0.0.0.255 destination 10.33.0.0 0.0.255.255
rule 140 permit ip source 172.31.252.0 0.0.0.255 destination 10.33.0.0 0.0.255.255
rule 145 permit ip source 10.16.85.244 0 destination 10.33.0.0 0.0.255.255
rule 150 permit ip source 10.16.85.245 0 destination 10.33.0.0 0.0.255.255
rule 155 permit ip source 10.16.85.246 0 destination 10.33.0.0 0.0.255.255
rule 160 permit ip source 172.18.29.0 0.0.0.255 destination 10.33.0.0 0.0.255.255
rule 170 permit ip source 10.179.254.92 0 destination 10.33.0.0 0.0.255.255
rule 175 permit ip source 119.36.49.0 0.0.0.127 destination 10.33.0.0 0.0.255.255
rule 180 permit ip source 103.95.52.0 0.0.0.255 destination 10.33.0.0 0.0.255.255
rule 181 permit ip source 103.95.53.0 0.0.0.255 destination 10.33.0.0 0.0.255.255
rule 185 permit ip source 119.36.216.128 0.0.0.127 destination 10.33.0.0 0.0.255.255
rule 190 permit ip source 119.36.52.0 0.0.0.31 destination 10.33.0.0 0.0.255.255
rule 195 permit ip source 119.36.52.32 0.0.0.31 destination 10.33.0.0 0.0.255.255
rule 200 permit ip source 119.36.50.128 0.0.0.31 destination 10.33.0.0 0.0.255.255
rule 201 permit ip source 113.57.83.192 0.0.0.63 destination 10.33.0.0 0.0.255.255
#
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
关键5端口的板卡上不行