Cisco asa 5520 qos 如何配置

在3560交换机上配置：access-list 100 permit ip any 192.168.1.0 0.0.0.255 （200K下载）access-list 102 permit ip any 192.168.2.0 0.0.0.255 （400K下载）access-list 103 permit ip 192.168.1.0 0.0.0.255 any （200K上传）access-list 104 permit ip 192.168.2.0 0.0.0.255 any （400K上传）!class-map match-all down_200K
match access-group 100class-map match-all down_400K
match access-group 101
class-map match-all up_200K
match access-group 102
class-map match-all down_400K
match access-group 103
!policy-map wan_down
class down_200K
police 2000000 bps 200000 byte conform-action transmit exceed-action drop
trust dscpclass down_400K
police 4000000 bps 400000 byte conform-action transmit exceed-action drop
trust dscp!
policy-map wan_up
class up_200K
police 2000000 bps 200000 byte conform-action transmit exceed-action drop
trust dscpclass up_400K
police 4000000 bps 400000 byte conform-action transmit exceed-action drop
trust dscp
!interface GigabitEthernet1/1 //应用下载策略到连接防火墙的接口（限外网下载）
service-policy input wan_downinterface GigabitEthernet1/2 //应用下载策略到连接下级交换机的接口（限内网上传）
service-policy input wan_upinterface GigabitEthernet1/3 //哪个接口要限上传就在哪个接口应用策略
service-policy input wan_up 注意：限制一个接口下载，多个接口上传，必须的。