подскажите пожалуйста можно ли описанным ниже методом ограничить по IP
входящий трафик на CISCO 2509
Router>sh ver
Cisco Internetwork Operating System Software
IOS (tm) 2500 Software (C2500-I-L), Version 11.3(11b), RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2001 by cisco Systems, Inc.
Compiled Fri 02-Mar-01 18:53 by cmong
Image text-base: 0x03029988, data-base: 0x00001000ROM: System Bootstrap, Version 11.0(10c), SOFTWARE
BOOTFLASH: 3000 Bootstrap Software (IGS-BOOT-R), Version 11.0(10c), RELEASE SOFTWARE (fc1)Router uptime is 2 weeks, 4 days, 4 hours, 51 minutes
System restarted by power-on
System image file is "flash:c2500-i-l.113-11b.bin", booted via flashcisco 2509 (68030) processor (revision M) with 2048K/2048K bytes of memory.
Processor board ID 08915321, with hardware revision 00000000
Bridging software.
X.25 software, Version 3.0.0.
1 Ethernet/IEEE 802.3 interface(s)
2 Serial network interface(s)
8 terminal line(s)
32K bytes of non-volatile configuration memory.
8192K bytes of processor board System flash (Read ONLY)Configuration register is 0x2102
Router>
В следующей конфигурации
!
version 11.3
service timestamps debug uptime
service timestamps log uptime
service password-encryption
service udp-small-servers
service tcp-small-servers
!
hostname Router
!!
ip subnet-zero
ip name-server
!
!
interface Ethernet0
description connected to EthernetLAN
ip address XX.xxx.xxx.xx xxx.xxx.xxx.xxx
traffic-shape group 145 65536 6553 6553 1000
no cdp enable
!
!
access-list 145 permit ip any host xxx.xxx.xxx.xxx
access-list 145 permit ip any host xxx.xxx.xxx.xxx
access-list 145 permit ip any host xxx.xxx.xxx.xxxend
команду rate-limit не принимает
>подскажите пожалуйста можно ли описанным ниже методом ограничить по IP
>входящий трафик на CISCO 2509
>Router>sh ver
>Cisco Internetwork Operating System Software
>IOS (tm) 2500 Software (C2500-I-L), Version 11.3(11b), RELEASE SOFTWARE (fc1)
>Copyright (c) 1986-2001 by cisco Systems, Inc.
>Compiled Fri 02-Mar-01 18:53 by cmong
>Image text-base: 0x03029988, data-base: 0x00001000
>
>ROM: System Bootstrap, Version 11.0(10c), SOFTWARE
>BOOTFLASH: 3000 Bootstrap Software (IGS-BOOT-R), Version 11.0(10c), RELEASE SOFTWARE (fc1)
>
>Router uptime is 2 weeks, 4 days, 4 hours, 51 minutes
>System restarted by power-on
>System image file is "flash:c2500-i-l.113-11b.bin", booted via flash
>
>cisco 2509 (68030) processor (revision M) with 2048K/2048K bytes of memory.
>Processor board ID 08915321, with hardware revision 00000000
>Bridging software.
>X.25 software, Version 3.0.0.
>1 Ethernet/IEEE 802.3 interface(s)
>2 Serial network interface(s)
>8 terminal line(s)
>32K bytes of non-volatile configuration memory.
>8192K bytes of processor board System flash (Read ONLY)
>
>Configuration register is 0x2102
>
>Router>
>
>В следующей конфигурации
>!
>version 11.3
>service timestamps debug uptime
>service timestamps log uptime
>service password-encryption
>service udp-small-servers
>service tcp-small-servers
>!
>hostname Router
>!
>
>!
>ip subnet-zero
>ip name-server
>!
>!
>interface Ethernet0
> description connected to EthernetLAN
> ip address XX.xxx.xxx.xx xxx.xxx.xxx.xxx
> traffic-shape group 145 65536 6553 6553 1000
> no cdp enable
>!
>!
>
>
>access-list 145 permit ip any host xxx.xxx.xxx.xxx
>access-list 145 permit ip any host xxx.xxx.xxx.xxx
>access-list 145 permit ip any host xxx.xxx.xxx.xxx
>
>end
>
>
>команду rate-limit не принимаетрэйт-лимит просто отбрасывает все лишние пакеты, превышающие трафик (если грубо), шейпер пытается входящий трафик регулировать так, чтобы он не "зашкаливал".
посмотрит на эти "просьбы" шейпера провайдер - хорошо, нет - извини (можешь сбрасывать лишние пакеты, но канал до тебя они все равно уже загрузили).
Насколько мне помнится trafic-shape работает для ИСХОДЯЩЕГО трафика