3Com 5500 Switch User Manual


 
Configuring QoS Profile 223
Applicable Products
Configuration Procedure
1 Configuration on the AAA server
Configure authentication information and user name-to-QoS-profile mapping for
the user on the AAA server. Refer to “AAA Configuration” in the Configuration
Guide for your product for detailed information.
2 Configuration on the switch
# Configure the IP address information of the RADIUS server.
<3Com> system-view
[3Com] radius scheme radius1
[3Com-radius-radius1] primary authentication 10.11.1.1
[3Com-radius-radius1] primary accounting 10.11.1.2
[3Com-radius-radius1] secondary authentication 10.11.1.2
[3Com-radius-radius1] secondary accounting 10.11.1.1
# Configure encryption keys for the switch to exchange packets with the
authentication RADIUS server and the accounting RADIUS server.
[3Com-radius-radius1] key authentication money
[3Com-radius-radius1] key accounting money
# Enable the switch to remove the domain name from the fully qualified user
name and then send the unqualified user name to the RADIUS sever.
[3Com-radius-radius1] user-name-format without-domain
[3Com-radius-radius1] quit
# Create the user domain test.net and specify radius1 as the RADIUS server
group for the domain user.
[3Com] domain test.net
[3Com-isp-test.net] radius-scheme radius1
[3Com-isp-test.net] quit
# Create advanced ACL 3000 and define a classification rule to match IP packets
destined for any IP address.
[3Com] acl number 3000
[3Com-acl-adv-3000] rule 1 permit ip destination any
[3Com-acl-adv-3000] quit
# Configure a QoS profile to limit the rate of the conforming traffic to 128 kbps
and drop the packets exceeding the rate limit.
[3Com] qos-profile example
[3Com-qos-profile-example] traffic-limit inbound ip-group 3000 128 exceed drop
Product series Software version Hardware version
Switch 5500 Release V03.02.04 All versions
Switch 5500G Release V03.02.04 All versions
Switch 4500 Release V03.03.00 All versions