Configuration Example; Qos Profile Configuration Example - H3C S5100-SI Operation Manual

Configuration Example

QoS Profile Configuration Example

Network requirements
All departments of a company are interconnected through a switch. The 802.1x protocol is
used to authenticate users and control their access to network resources. As shown in
Figure 2-1, a user name is someone, and the authentication password is hello. It is
connected to GigabitEthernet 1/0/1 of the switch and belongs to the test.net domain.
Configure a QoS profile to limit the rate of all the outbound IP packets of the user to 128
kbps and drop the packets exceeding the rate limit.
Figure 2-1 Network diagram for QoS profile configuration
Network
Switch
GE1/0/1
User
Configuration procedure
1) Configuration on the AAA server
# Configure the user authentication information and the user name-to-QoS profile mapping.
Refer to the user manual of the AAA server for detailed configuration.
2) Configuration on the switch
# Configure IP addresses for the RADIUS server.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] primary authentication 10.11.1.1
[Sysname-radius-radius1] primary accounting 10.11.1.2
[Sysname-radius-radius1] secondary authentication 10.11.1.2
[Sysname-radius-radius1] secondary accounting 10.11.1.1
# Set the encryption passwords for the switch to exchange packets with the authentication
RADIUS servers and accounting RADIUS servers.
[Sysname-radius-radius1] key authentication money
[Sysname-radius-radius1] key accounting money
AAA Server
2-5