由于迅雷下载这个应用,在有进程时会占用大量的带宽,导致客户组网进行卡顿,所以有部分用户希望对该应用进行限速,从而保证网络的整体流畅。
某些款型MSR路由器可以直接在web页面进行配置,但是由于部分版本不支持web或者客户要求从命令行进行操作,所以针对此种情况提供一个命令行的配置举例。
#
object-policy ip Any-Any
rule 0 pass app-group test_13 logging
rule 1 inspect test
rule 65533 inspect 8048_url_profile_global disable
rule 65534 pass
#
security-zone name Local
#
security-zone name Trust
import interface Vlan-interface1
#
security-zone name DMZ
#
security-zone name Untrust
import interface GigabitEthernet0/0
#
security-zone name Management
#
zone-pair security source Any destination Any
object-policy apply ip Any-Any
#
zone-pair security source Local destination Trust
packet-filter name SWXWSGL
#
zone-pair security source Local destination Untrust
packet-filter name SWXWSGL
#
zone-pair security source Trust destination Local
packet-filter name SWXWSGL
#
zone-pair security source Untrust destination Local
packet-filter name SWXWSGL
#
acl advanced name SWXWSGL
rule 1 permit ip
#
app-group test_13
description "User-defined application group"
include application Thunder //应用组,包含迅雷
#
url-filter policy test
default-action permit
#
url-filter category custom severity 65535
#
app-profile test
url-filter apply policy test
#
url-filter policy test
default-action permit
#
url-filter category custom severity 65535
#
app-profile test
url-filter apply policy test
#
traffic-policy
rule 1 name test_13
action qos profile test_13
source-zone Trust
destination-zone Untrust
application app-group test_13
profile name test_13
bandwidth downstream maximum 1111 //限速值可自行调整
bandwidth upstream maximum 1111
#
注意配置完成后,在设备侧下命令行:[H3C]inspect activate,应用识别功能才可以生效。
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作