internet----firewall----(port1)3550emi(port2)---vlan103(192.168.103.0)
(port3)---vlan104(192.168.104.0)
Internet总出口速率为1M,
为vlan103分配200Kbit/s的带宽,
为vlan104分配400Kbit/s的带宽.
mls qos
class-map match-all ipclass103
match Access-group 103
class-map match-all ipclass104
match access-group 104
!
!
policy-map flow_internet
class ipclass103
police 200000 8000 exceed-action drop
class ipclass104
police 400000 8000 exceed-action drop
!
!
spanning-tree extend system-id
!
!
!
interface FastEthernet0/1
switchport access vlan 200
switchport mode access
no ip address
flowcontrol receive on
service-policy input flow_internet
access-list 103 permit ip any 192.168.103.0 0.0.0.255
access-list 104 permit ip any 192.168.104.0 0.0.0.255
补充：
interface vlan103
ip address 192.168.103.1 255.255.255.0
interface vlan104
ip address 192.168.104.1 255.255.255.0
再ip routing即可.
access-list103和104是针对qos,与安全过滤无关.