[Router] vlan batch 66 88
[Router] acl number 3066
[Router-acl-basic-3066] rule 5 permit ip source 192.168.66.0 0.0.0.255 //配置規(guī)則5，允許源地址為192.168.66.0網(wǎng)段的報文通過
[Router-acl-basic-3066] rule 10 permit ip source 192.168.88.0 0.0.0.255 //配置規(guī)則10，允許源地址為192.168.88.0網(wǎng)段的報文通過
[Router] acl number 3088
[Router-acl-basic-3088] rule 5 permit ip source 192.168.66.0 0.0.0.255 //配置規(guī)則5，允許源地址為192.168.66.0網(wǎng)段的報文通過
[Router] qos queue-profile limit //創(chuàng)建隊列模板limit
[Router-queue-profile-limit] queue 3 gts cir 64 cbs 1600 //配置隊列3的承諾信息速率為64kbit/s
[Router] traffic classifier c1 operator or
[Router-classifier-c1] if-match acl 3088 //配置流分類c1：匹配規(guī)則為ACL 3088
[Router] traffic behavior b1
[Router-behavior-b1] remark local-precedence af3 //配置流行為b1：對匹配流分類的報文重標(biāo)記本地優(yōu)先級為AF3，不指定流行為為permit或deny時，默認(rèn)為permit。
[Router] traffic policy p1
[Router-policy-p1] classifier c1 behavior b1 //配置流策略p1:綁定流分類c1與流行為b1
[Router] interface Vlanif 66
[Router-vlanif66] ip address 192.168.66.1 255.255.255.0
[Router] interface Vlanif 88
[Router-vlanif88] ip address 192.168.88.1 255.255.255.0
[Router] interface GigabitEthernet 0/0/2
[Router-GigabitEthernet 0/0/2]port link-type trunk //配置接口的鏈路類型為Trunk
[Router-GigabitEthernet 0/0/2] port trunk allow-pass vlan 66 88 //配置Trunk類型接口加入vlan 66和vlan 88
[Router-GigabitEthernet 0/0/2] traffic-policy p1 inbound //在接口入方向上應(yīng)用流策略p1
[Router] interface GigabitEthernet 0/0/1
[Router-GigabitEthernet 0/0/1] ip address 106.3.45.2 255.255.255.0
[Router-GigabitEthernet 0/0/1] qos queue-profile limit //在接口上應(yīng)用隊列模板limit
[Router-GigabitEthernet 0/0/1] nat outbound 3066 //在接口上對匹配ACL 3001的報文做NAT
[Router] ip route-static 0.0.0.0 0.0.0.0 106.3.45.1