Имеется CISCO 3620, правда c довольно старым IOS:Cisco Internetwork Operating System Software
IOS (tm) 3600 Software (C3620-IK8O3S-M), Version 12.2(13), RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2002 by cisco Systems, Inc.
Compiled Tue 19-Nov-02 14:03 by pwade
Image text-base: 0x60008930, data-base: 0x612B4000
ROM: System Bootstrap, Version 11.1(20)AA2, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
dialup uptime is 2 days, 16 hours, 56 minutes
System returned to ROM by power-on
System restarted at 00:18:34 CHE Wed Feb 6 2008
System image file is "flash:c3620-ik8o3s-mz.122-13.bin"
cisco 3620 (R4700) processor (revision 0x81) with 59392K/6144K bytes of memory.
Processor board ID 24807390
R4700 CPU at 80Mhz, Implementation 33, Rev 1.0
MICA-6DM Firmware: CP ver 2730 - 5/23/2001, SP ver 2730 - 5/23/2001.
Channelized E1, Version 1.0.
Bridging software.
X.25 software, Version 3.0.0.
SuperLAT software (copyright 1990 by Meridian Technology Corp).
Primary Rate ISDN software, Version 1.1.
1 FastEthernet/IEEE 802.3 interface(s)
62 Serial network interface(s)
30 terminal line(s)
2 Channelized E1/PRI port(s)
DRAM configuration is 32 bits wide with parity disabled.
29K bytes of non-volatile configuration memory.
16384K bytes of processor board System flash (Read/Write)
Configuration register is 0x2102
Через нее терминируются pptp-сессии клиентов (авторизация - на стороннем линух-сервере через Radius). Хочется общем в канале, уходящем с этой циски на магистрала, ограничить полосу для любителей торрентов.
Сделал так. Положил вот эти файлики
bittorrent.pdlm
directconnect.pdlm
eDonkey.pdlm
как бинарники на циску:
copy tftp: flash:
И потом настроил полисинг:
ip nbar pdlm flash:bittorrent.pdlm
ip nbar pdlm flash:eDonkey.pdlm
ip nbar pdlm flash:directconnect.pdlm
class-map match-all torrents
match protocol bittorrent
match protocol edonkey
match protocol directconnect
policy-map limit-torrents
class torrents
police 512000 32000 64000 conform-action transmit exceed-action drop violate-action drop
interface FastEthernet1/0
service-policy input limit-torrents
Т.е. ограничил всех любителей торрентов на 512К.
После дня работы смотрю статистику и не вижу, чтобы этот полисинг вообще хотя бы что-то отработал:
sh policy-map int fa 1/0
FastEthernet1/0
Service-policy input: limit-torrents
Class-map: torrents (match-all)
0 packets, 0 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: protocol bittorrent
Match: protocol edonkey
Match: protocol directconnect
police:
512000 bps, 32000 limit, 64000 extended limit
conformed 0 packets, 0 bytes; action: transmit
exceeded 0 packets, 0 bytes; action: drop
violated 0 packets, 0 bytes; action: drop
conformed 0 bps, exceed 0 bps, violate 0 bps
Class-map: class-default (match-any)
39644 packets, 14310277 bytes
5 minute offered rate 291000 bps, drop rate 0 bps
Match: any
Что-то сделал не так?
