Juniper EX QoS L2/L3: настройка классификации и приоритезации трафика в корпоративной сети.

[edit class-of-service]

forwarding-classes {
    class COS-VOICE queue-num 5;
    class COS-ROUTING queue-num 7;
    class COS-NETWORK-MGMT queue-num 2;
    class COS-BEST-EFFORT queue-num 0;
    class COS-VOICE-CONTROL queue-num 3;

schedulers {
    SCHD-ROUTING {
        buffer-size percent 5;
        priority strict-high;
    }
    SCHD-VOICE {
        buffer-size percent 5;
        priority strict-high;
    }
    SCHD-VOICE-CONTROL {
        buffer-size percent 5;
        priority strict-high;
    }
    SCHD-NETWORK-MGMT {
        buffer-size percent 10;
        priority low;
    }
    SCHD-BEST-EFFORT {
        transmit-rate {
            remainder;
        }
        buffer-size {
            remainder;
        }
        priority low;
    }

scheduler-maps {
    SCHD-MAP-ENTERPRISE {
        forwarding-class COS-ROUTING scheduler SCHD-ROUTING;
        forwarding-class COS-VOICE scheduler SCHD-VOICE;
        forwarding-class COS-VOICE-CONTROL scheduler SCHD-VOICE-CONTROL;
        forwarding-class COS-NETWORK-MGMT scheduler SCHD-NETWORK-MGMT;
        forwarding-class COS-BEST-EFFORT scheduler SCHD-BEST-EFFORT;
    }

[edit class-of-service]

classifiers {
    dscp DSCP-ENTERPRISE {
        forwarding-class COS-VOICE {
            loss-priority low code-points ef;
        }
        forwarding-class COS-ROUTING {
            loss-priority low code-points [ nc1 nc2 ];
        }
        forwarding-class COS-NETWORK-MGMT {
            loss-priority low code-points cs2;
        }
        forwarding-class COS-BEST-EFFORT {
            loss-priority high code-points be;
        }
        forwarding-class COS-VOICE-CONTROL {
            loss-priority low code-points [ af31 cs3 ];
        }
    }
}

[edit firewall]
family ethernet-switching {
    filter CLASS-MARK-ENTERPRISE {
        term VOICE-CONTROL {
            from {
                source-address {
                    192.168.7.0/24;
                }
                protocol [ tcp udp ];
                destination-port [ 1720 1719 1721 5060 5061];
            }
            then {
                forwarding-class COS-VOICE-CONTROL;
                loss-priority low;
                count VOICE-CONTROL;
            }
        }
        term VOICE {
            from {
                source-address {
                    192.168.7.0/24;
                }
            }
            then {
                forwarding-class COS-VOICE;
                loss-priority low;
                count VOICE;
            }
        }
        term NETWORK-MGMT {
            from {
                protocol tcp;
                destination-port [ 3389 ssh ];
            }
            then {
                forwarding-class COS-NETWORK-MGMT;
                loss-priority low;
                count NETWORK-MGMT;
            }
        }
        term DEFAULT {
            then {
                forwarding-class COS-BEST-EFFORT;
                loss-priority high;

[edit class-of-service]
rewrite-rules {
    dscp RR-ENTERPRISE {
        forwarding-class COS-ROUTING {
            loss-priority low code-point nc1;
            loss-priority high code-point nc2;
        }
        forwarding-class COS-VOICE {
            loss-priority low code-point ef;
        }
        forwarding-class COS-NETWORK-MGMT {
            loss-priority low code-point cs2;
        }
        forwarding-class COS-BEST-EFFORT {
            loss-priority high code-point be;
        }
        forwarding-class COS-VOICE-CONTROL {
            loss-priority low code-point cs3;
        }
    }
}

[edit]
LAN100 {
    description LAN100;
    vlan-id 100;
    filter {
        input CLASS-MARK-ENTERPRISE;
    }
    l3-interface vlan.100;
}
LAN101 {
    description LAN101;
    vlan-id 101;
    filter {
        input CLASS-MARK-ENTERPRISE;
    }
    l3-interface vlan.101;

interfaces {
    ge-* {
        scheduler-map SCHD-MAP-ENTERPRISE;
        unit 0 {
            classifiers {
                dscp DSCP-ENTERPRISE;
            }
        }
    }
    ge-0/0/37 {
        unit 0 {
            classifiers {
                dscp DSCP-ENTERPRISE;
            }
            rewrite-rules {
                dscp RR-ENTERPRISE;
            }
        }
    }
    ge-1/0/37 {
        unit 0 {
            classifiers {
                dscp DSCP-ENTERPRISE;
            }
            rewrite-rules {
                dscp RR-ENTERPRISE;
            }
        }
    }
    ae* {
        scheduler-map SCHD-MAP-ENTERPRISE;
        unit 0 {
            classifiers {
                dscp DSCP-ENTERPRISE;
interfaces {
    ge-* {
        scheduler-map SCHD-MAP-ENTERPRISE;
        unit 0 {
            classifiers {
                dscp DSCP-ENTERPRISE;
            }
        }
    }
    ge-0/0/37 {
        unit 0 {
            classifiers {
                dscp DSCP-ENTERPRISE;
            }
            rewrite-rules {
                dscp RR-ENTERPRISE;
            }
        }
    }
    ge-1/0/37 {
        unit 0 {
            classifiers {
                dscp DSCP-ENTERPRISE;
            }
            rewrite-rules {
                dscp RR-ENTERPRISE;
            }
        }
    }
    ae* {
        scheduler-map SCHD-MAP-ENTERPRISE;
        unit 0 {
            classifiers {
                dscp DSCP-ENTERPRISE;