Configuration Example

QoS Profile Configuration Example

Network requirements

As shown in Figure 2-1, the user name is “someone”, and the authentication password is “hello”. It is connected to GigabitEthernet 1/0/1 of the switch and belongs to the test.net domain.

It is required to configure a QoS profile to limit the rate of all the outbound IP packets of the user to 128 kbps and configuring to drop the packets exceeding the target packet rate.

Figure 2-1Network diagram for QoS profile configuration

Network

Switch

GEth1/0/1

AAA Server

User

Configuration procedure

1)Configuration on the AAA server

#Configure the user authentication information and the matching relationship between the user name and the QoS profile. Refer to the user manual of the AAA server for detailed configuration.

2)Configuration on the switch

# Configure IP addresses for the RADIUS server.

<device> system-view

[device] radius scheme radius1 [device-radius-radius1] primary authentication 10.11.1.1

[device-radius-radius1] primary accounting 10.11.1.2

[device-radius-radius1] secondary authentication 10.11.1.2

[device-radius-radius1] secondary accounting 10.11.1.1

#Set the encryption passwords for the device to exchange packets with the authentication RADIUS servers and accounting RADIUS servers.

[device-radius-radius1] key authentication money

[device-radius-radius1] key accounting money

#Configure the device to delete the user domain name from the user name and then send the user name to the RADIUS sever.

[device-radius-radius1] user-name-format without-domain

[device-radius-radius1] quit

2-4

Page 399
Image 399
3Com WX3000 operation manual QoS Profile Configuration Example, 1Network diagram for QoS profile configuration