方法一（效果一般）：QOS IP流量控制（限速实际值会比配置理论值偏低）
一、步骤：
1、配置NAT
2、设置限速IP
3、配置内网口和外网口，把NAT设置添加到外网口，把QOS限速设置添加到内网口，限速30Kbps
4、设置默认路由?
5、保存配置
二、配置：
<Quidway>sys
[Quidway]acl number 2000
[Quidway-acl-basic-2000]rule 0 permit source 172.16.10.0 0.0.0.255
[Quidway-acl-basic-2000]q ? ? ? ?
[Quidway]nat address-group 0 202.99.99.100?202.99.99.100
[Quidway]acl number 2100
[Quidway-acl-basic-2100]rule 0 permit source 172.16.10.1 0
[Quidway-acl-basic-2100]q
[Quidway]int e0/0
[Quidway-Ethernet0/0]ip add 202.99.99.100 255.255.255.248
[Quidway-Ethernet0/0]nat outbound 2000 address-group 0
[Quidway-Ethernet0/0]q
[Quidway]int e0/1
[Quidway-Ethernet0/1]ip add 172.16.10.254 255.255.255.0
[Quidway-Ethernet0/1]qos car inbound acl 2100 cir 30000 cbs 15000 ebs 0 green pass red discard
[Quidway-Ethernet0/1]qos car outbound acl 2100 cir 30000 cbs 15000 ebs 0 green pass red discard
[Quidway-Ethernet0/1]q
[Quidway]ip route-static 0.0.0.0 0.0.0.0 202.99.99.99
[Quidway]dis cur
#
?sysname Quidway
#
?cpu-usage cycle 1min
#
?nat address-group 0 202.99.99.100 202.99.99.100
#
radius scheme system
#
domain system
#
local-user admin
?password cipher .]@USE=B,53Q=^Q`MAF4<1!!
?service-type telnet terminal
?level 3
?service-type ftp
#
acl number 2000
?rule 0 permit source 172.16.10.0 0.0.0.255
acl number 2100
?rule 0 permit source 172.16.10.1 0
#
interface Aux0
?async mode flow
# ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ??
interface Ethernet0/0
?ip address 202.99.99.100 255.255.255.248
?nat outbound 2100 address-group 0
#
interface Ethernet0/1
?ip address 172.16.10.254 255.255.255.0
?qos car inbound acl 2100 cir 30000 cbs 15000 ebs 0 green pass red discard
?qos car outbound acl 2100 cir 30000 cbs 150000 ebs 0 green pass red discard
#
interface Serial0/0
?clock DTECLK1
?link-protocol ppp
?ip address dhcp-alloc
#
interface NULL0
#
?FTP server enable
#
?ip route-static 0.0.0.0 0.0.0.0 202.99.99.99 preference 60
#
user-interface con 0
user-interface aux 0
user-interface vty 0 4
?authentication-mode scheme ? ? ? ? ? ? ??
#
return
[Quidway]q
<Quidway>save
The configuration will be written to the device.
Are you sure?[Y/N]y
Now saving current configuration to the device.
Saving configuration flash:/vrpcfg.cfg. Please wait...
...............
Current configuration has been saved to the device successfully.
方法二（效果好）：QOS ?流分类控制（限速实际值与配置理论值相等）
一、步骤
1、配置NAT，配置内外网接口地址：制定内网ACL和公网地址池并将策略应用到公网接口
2、配置默认路由，使能够连接外网
3、配置分类流策略，制定ACL指明限制IP----->配置分类流，使与ACL匹配----->配置分类流控制行为，限速30Kbps
4、配置QOS策略，应用分类流策略
5、在内网端口应用QOS策略
6、保存配置。
二、配置
<Quidway>sys [Quidway]acl number 2000 [Quidway-acl-basic-2000]rule 0 permit source 172.16.10.0 0.0.0.255 [Quidway-acl-basic-2000]q [Quidway]nat address-group 0 202.99.99.100?202.99.99.100 [Quidway]int e0/0 [Quidway-Ethernet0/0]ip add?202.99.99.100?255.255.255.248 [Quidway-Ethernet0/0]nat outbound 2000 address-group 0 [Quidway-Ethernet0/0]q [Quidway]int e0/1 [Quidway-Ethernet0/1]ip add 172.16.10.254 255.255.255.0? [Quidway-Ethernet0/1]q [Quidway]ip route-static 0.0.0.0 0.0.0.0?202.99.99.99 [Quidway]acl number 3000 [Quidway-acl-adv-3000]rule 0 permit ip source 172.16.10.1 0 [Quidway-acl-adv-3000]q [Quidway]traffic classifier 1 operator and [Quidway-classifier-1]if-match acl 3000 [Quidway-classifier-1]q [Quidway]traffic behavior 2 [Quidway-behavior-2]car cir 30000 cbs 15000 ebs 0 green pass red discard? [Quidway-behavior-2]q [Quidway]qos policy fenleiliu [Quidway-qospolicy-fenleiliu]classifier 1 behavior 2 [Quidway-qospolicy-fenleiliu]q [Quidway]int e0/1 [Quidway-Ethernet0/1]qos apply policy fenleiliu inbound ? ?? [Quidway-Ethernet0/1]qos apply policy fenleiliu outbound [Quidway-Ethernet0/1]q [Quidway]dis cur # ?sysname Quidway # ?cpu-usage cycle 1min # ?nat address-group 0?202.99.99.100?202.99.99.100 # radius scheme system # domain system # local-user admin ?password cipher .]@USE=B,53Q=^Q`MAF4<1!! ?service-type telnet terminal ?level 3 ?service-type ftp # traffic classifier 1 operator and ?if-match acl 3000 # traffic behavior 1 traffic behavior 2 ?car cir 30000 cbs 15000 ebs 0 green pass red discard # qos policy fenleiliu ? ? ? ? ? ? ? ? ? ? ? ?classifier 1 behavior 2 # acl number 2000 ?rule 0 permit source 172.16.10.0 0.0.0.255 # acl number 3000 ?rule 0 permit ip source 172.16.10.1 0 # interface Aux0 ?async mode flow # interface Ethernet0/0 ?ip address?202.99.99.100?255.255.255.248 ?nat outbound 2000 address-group 0 # interface Ethernet0/1 ?ip address 172.16.10.254 255.255.255.0 ?qos apply policy fenleiliu inbound ?qos apply policy fenleiliu outbound # interface Serial0/0 ?clock DTECLK1 ?link-protocol ppp ?ip address dhcp-alloc ? ? ? ? ? ? ? ? ? ? # interface NULL0 # ?FTP server enable # ?ip route-static 0.0.0.0 0.0.0.0?202.99.99.99?preference 60 # user-interface con 0 user-interface aux 0 user-interface vty 0 4 ?authentication-mode scheme # return [Quidway]q <Quidway>save The configuration will be written to the device. Are you sure?[Y/N]y Now saving current configuration to the device. Saving configuration flash:/vrpcfg.cfg. Please wait... ............... Current configuration has been saved to the device successfully. <Quidway>
