3Com 4200G, 5500G, 4210 manual Configuring QoS Profile

Configuring QoS Profile 223

Applicable Products

Product series	Software version	Hardware version
Switch 5500	Release V03.02.04	All versions
Switch 5500G	Release V03.02.04	All versions
Switch 4500	Release V03.03.00	All versions

Configuration Procedure

1Configuration on the AAA server

Configure authentication information and user name-to-QoS-profile mapping for the user on the AAA server. Refer to “AAA Configuration” in the Configuration Guide for your product for detailed information.

2Configuration on the switch

# Configure the IP address information of the RADIUS server.

<3Com> system-view

[3Com] radius scheme radius1 [3Com-radius-radius1] primary authentication 10.11.1.1

[3Com-radius-radius1] primary accounting 10.11.1.2

[3Com-radius-radius1] secondary authentication 10.11.1.2

[3Com-radius-radius1] secondary accounting 10.11.1.1

#Configure encryption keys for the switch to exchange packets with the authentication RADIUS server and the accounting RADIUS server.

[3Com-radius-radius1] key authentication money

[3Com-radius-radius1] key accounting money

#Enable the switch to remove the domain name from the fully qualified user name and then send the unqualified user name to the RADIUS sever.

[3Com-radius-radius1] user-name-format without-domain

[3Com-radius-radius1] quit

#Create the user domain test.net and specify radius1 as the RADIUS server group for the domain user.

[3Com] domain test.net

[3Com-isp-test.net] radius-scheme radius1

[3Com-isp-test.net] quit

#Create advanced ACL 3000 and define a classification rule to match IP packets destined for any IP address.

[3Com] acl number 3000

[3Com-acl-adv-3000] rule 1 permit ip destination any

[3Com-acl-adv-3000] quit

#Configure a QoS profile to limit the rate of the conforming traffic to 128 kbps and drop the packets exceeding the rate limit.

[3Com] qos-profile example

[3Com-qos-profile-example] traffic-limit inbound ip-group 3000 128 exceed drop