>>
>>P.S на 3400 тоже не все было гладко, но отполисть трафик с
>>помощью вложеных полисей все же удалось, а тут вообще какая-то труба.
>>
>
> а выложи конфиг как на 3400 сделал, плиз.
>у такая же трабла, тока не могу это сделать на 3750 лови
ME_8#sh run
Building configuration...
Current configuration : 3656 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname ME_8
!
enable secret 5 $1$r1aS$RfftAXUmS..eddRNxlGOC1
!
username admin secret 5 $1$OEsF$Y.d9mS9uX1hMujm5zcG7e.
aaa new-model
aaa authentication login default local
!
aaa session-id common
ip subnet-zero
ip routing
no ip domain-lookup
!
no file verify auto
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
no spanning-tree vlan 2
!
!
!
vlan internal allocation policy ascending
!
vlan 2-100
!
class-map match-all ping
match access-group 100
class-map match-all vlan40
match vlan 40
class-map match-all vlan60
match vlan 60
class-map match-all 1
match access-group 10
class-map match-all 2
match access-group 10
class-map match-all 3
match access-group 10
class-map match-all 4
match access-group 10
class-map match-all 5
match access-group 10
class-map match-all 6
match access-group 10
class-map match-all vla100
match vlan 100
class-map match-all vla90
match vlan 90
class-map match-all vla80
match vlan 80
class-map match-all vla70
match vlan 70
!
!
policy-map ping
class ping
police cir 100000000
policy-map 1-4
class 4
police cir 5000000
conform-action transmit
exceed-action drop
policy-map 1-5
class 5
police cir 5000000
conform-action transmit
exceed-action drop
policy-map 1-6
class 6
police cir 5000000
conform-action transmit
exceed-action drop
policy-map 1-1
class 1
police cir 5000000
conform-action transmit
exceed-action drop
policy-map 1-2
class 2
police cir 5000000
conform-action transmit
exceed-action drop
policy-map 1-3
class 3
police cir 5000000
conform-action transmit
exceed-action drop
policy-map Parent
class vlan40
service-policy 1-1
class vlan60
service-policy 1-2
class vla70
service-policy 1-3
class vla80
service-policy 1-4
class vla90
service-policy 1-5
class vla100
service-policy 1-6
!
!
interface FastEthernet0/1
port-type nni
switchport trunk allowed vlan 40,50,60,70,80,90,100
switchport mode trunk
ip access-group 10 in
service-policy input Parent
!
interface FastEthernet0/2
port-type nni
switchport trunk allowed vlan 40,50,60,70,80,90,100
switchport mode trunk
!
interface FastEthernet0/23
switchport access vlan 2
service-policy input ping
!
interface Vlan1
ip address dhcp
shutdown
!
interface Vlan2
ip address x.x.x.x 255.255.254.0
!
ip default-gateway x.x.x.x
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 x.x.x.x
!
!
access-list 10 permit any
access-list 100 permit icmp any any
!
radius-server source-ports 1645-1646
!
line con 0
line vty 5 15
!
end
ME_8#sh
