首页 > 其他 > 详细

Juniper srx系列防火墙端口限速

时间:2017-03-31 23:00:26      阅读:556      评论:0      收藏:0      [点我收藏+]

技术分享

限制上传速度(应用到内网接口)
set firewall family inet filter upload-limit term 0 from source-address 192.168.0.16/32
set firewall family inet filter upload-limit term 0 then policer upload-1mb
set firewall family inet filter upload-limit term 0 then accept
set firewall family inet filter upload-limit term 1 from source-address 192.168.0.0/24
set firewall family inet filter upload-limit term 1 then policer upload-9mb
set firewall family inet filter upload-limit term 1 then accept
set firewall family inet filter upload-limit term 2 then accept (其它网段不限速)
set firewall policer upload-1mb if-exceeding bandwidth-limit 1m
set firewall policer upload-1mb if-exceeding burst-size-limit 625k
set firewall policer upload-1mb then discard
set firewall policer upload-9mb if-exceeding bandwidth-limit 3m
set firewall policer upload-9mb if-exceeding burst-size-limit 625k
set firewall policer upload-9mb then discard
应用到内网接口
set interfaces vlan unit 100 family inet filter input upload-limit

限制下载速度(应用到内网接口)
set firewall family inet filter download-limit term 0 from destination-address 192.168.0.222/32
set firewall family inet filter download-limit term 0 then policer download-1mb
set firewall family inet filter download-limit term 0 then accept
set firewall family inet filter download-limit term 1 from destination-address 192.168.0.0/24
set firewall family inet filter download-limit term 1 then policer download-9mb
set firewall family inet filter download-limit term 1 then accept
set firewall family inet filter download-limit term 2 then accept (其它网段不限速)
set firewall policer download-1mb if-exceeding bandwidth-limit 1m
set firewall policer download-1mb if-exceeding burst-size-limit 625k
set firewall policer download-1mb then discard
set firewall policer download-9mb if-exceeding bandwidth-limit 3m
set firewall policer download-9mb if-exceeding burst-size-limit 625k
set firewall policer download-9mb then discard
应用到内网接口
set interfaces vlan unit 100 family inet filter output download-limit

Juniper srx系列防火墙端口限速

原文:http://www.cnblogs.com/id404/p/6653960.html

(0)
(0)
   
举报
评论 一句话评论(0
关于我们 - 联系我们 - 留言反馈 - 联系我们:wmxa8@hotmail.com
© 2014 bubuko.com 版权所有
打开技术之扣,分享程序人生!