2-4
Configuration Example
QoS Profile Configuration Example Network requirements
As shown in Figure 2-1, the user name is “someone”, and the authentication password is “hello”. It is
connected to GigabitEthernet 1/0/1 of the switch and belongs to the test.net domain.
It is required to configure a QoS profile to limit the rate of all the outbound IP packets of the user to 128
kbps and configuring to drop the packets exceeding the target packet rate.
Figure 2-1 Network diagram for QoS profile configuration
User
Switch
Network
AAA Server
GEth1/0/ 1
Configuration procedure
1) Configuration on the AAA server
# Configure the user authentication information and the matching relationship between the user name
and the QoS profile. Refer to the user manual of the AAA server for detailed configuration.
2) Configuration on the switch
# Configure IP addresses for the RADIUS server.
<device> system-view
[device] radius scheme radius1
[device-radius-radius1] primary authentication 10.11.1.1
[device-radius-radius1] primary accounting 10.11.1.2
[device-radius-radius1] secondary authentication 10.11.1.2
[device-radius-radius1] secondary accounting 10.11.1.1
# Set the encryption passwords for the device to exchange packets with the authentication RADIUS
servers and accounting RADIUS servers.
[device-radius-radius1] key authentication money
[device-radius-radius1] key accounting money
# Configure the device to delete the user domain name from the user name and then send the user
name to the RADIUS sever.
[device-radius-radius1] user-name-format without-domain
[device-radius-radius1] quit