# encrypt-card fast-switch # //QoS部分配置，缺省進(jìn)入Bottom隊列，對于DSCP為EF的流進(jìn)入Top隊列 qos pql 1 default-queue bottom qos pql 1 protocol ip acl 3002 queue top # ike peer 1.2.0.2 pre-shared-key h3c remote-address 1.2.0.2 local-address 1.2.0.1 # ipsec proposal def # ipsec policy gos 1 isakmp security acl 3000 ike-peer 1.2.0.2 proposal def # //匹配目的地址2.0.0.2 traffic classifier 2.0.0.2 operator and if-match acl 3001 # //Remark DSCP為EF traffic behavior myef remark dscp ef # //定義QoS策略，使目的地址為2.0.0.2的數(shù)據(jù)流被Remark DSCP EF qos policy 2002ef classifier 2.0.0.2 behavior myef # acl number 3000 rule 0 permit gre source 1.2.0.1 0 destination 1.2.0.2 0 //匹配目的為2.0.0.2/32 acl number 3001 rule 0 permit ip destination 2.0.0.2 0 //匹配DSCP為EF acl number 3002 name ef rule 0 permit ip dscp ef # interface GigabitEthernet0/0 port link-mode route ip address 1.2.0.1 255.255.255.0 ipsec policy gos //在接口上使能PQ qos pq pql 1 //對接口進(jìn)行2M限速，使QoS有效果 qos lr outbound cir 2048 cbs 128000 ebs 0 # interface GigabitEthernet0/1 port link-mode route ip address 1.0.0.1 255.255.255.0 //在內(nèi)網(wǎng)入接口使能MQC，進(jìn)行DSCP著色 qos apply policy 2002ef inbound # interface Encrypt11/0 ipsec binding policy gos # interface Tunnel0 ip address 10.0.0.1 255.255.255.252 source 1.2.0.1 destination 1.2.0.2 # ip route-static 2.0.0.0 255.255.255.0 Tunnel0 # | 
