مطلب خوبی بود متشکرم. یه سوال داشتم. اگر من یه Subnet 10.52.0.0/16 داشته باشم و بخوام همه را در Bandwidth limitation شرک دهم به جز یه Subnet خاص مثلا 24/10.52.21.0 . در این صورت ACL من به چه فرمی باید باشد؟؟ ممنون از راهنمایی شما

لطفا به پست زیر رجوع کنید:
http://persian.shafagh.com/2009/10/09
-

من کانفیگ روترم را هم براتون قرار می دم
لطفا راهنمایی نمایید
Current configuration : 4936 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
enable password xxxxxxxx
!
no aaa new-model
!
!
dot11 syslog
ip cef
!
!
ip name-server 217.218.155.104
ip name-server 217.218.155.105
ip name-server 217.218.127.105
ip name-server 4.2.2.4
vlan ifdescr detail
!
!
!
!
!
archive
log config
hidekeys
!
!
controller DSL 0
mode atm
line-term cpe
line-mode 2-wire line-zero
dsl-mode shdsl symmetric annex B
line-rate 576
!
!
!
!
interface Loopback0
ip address 10.176.9.97 255.255.255.240
!
interface Loopback1
no ip address
!
interface Tunnel0
description xxxxxxxxx
ip address 172.16.1.22 255.255.255.252
ip mtu 1500
ip nat outside
ip virtual-reassembly
ip tcp adjust-mss 1436
load-interval 30
tunnel source 10.176.9.97
tunnel destination 10.176.9.1
tunnel mode ipip
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
!
interface ATM0
ip address 10.20.40.90 255.255.255.252
no atm ilmi-keepalive
pvc 2/33
cbr 512
encapsulation aal5snap
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
switchport access vlan 2
!
interface Virtual-Template1
ip unnumbered Vlan2
peer default ip address pool VPDN
no keepalive
ppp encrypt mppe auto
ppp authentication pap chap ms-chap
!
interface Vlan1
ip address 192.168.0.4 255.255.255.0 secondary
ip address xxx.xxx.xxx.xxx 255.255.255.252
ip access-group 23 in
ip nat inside
ip virtual-reassembly
!
interface Vlan2
ip address 10.11.10.1 255.255.255.0 secondary
ip address 10.10.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly
rate-limit input access-group 106 128000 128000 128000 conform-action transmit exceed-action drop
rate-limit input access-group 107 224000 230000 230000 conform-action transmit exceed-action drop
rate-limit input access-group 108 128000 128000 128000 conform-action transmit exceed-action drop
rate-limit input access-group 109 496000 500000 500000 conform-action transmit exceed-action drop
rate-limit input access-group 110 128000 128000 128000 conform-action transmit exceed-action drop
rate-limit input access-group 111 128000 128000 128000 conform-action transmit exceed-action drop
rate-limit output access-group 106 128000 128000 128000 conform-action transmit exceed-action drop
rate-limit output access-group 107 224000 230000 230000 conform-action transmit exceed-action drop
rate-limit output access-group 108 128000 128000 128000 conform-action transmit exceed-action drop
rate-limit output access-group 109 256000 256000 256000 conform-action transmit exceed-action drop
rate-limit output access-group 110 128000 128000 128000 conform-action transmit exceed-action drop
rate-limit output access-group 111 128000 128000 128000 conform-action transmit exceed-action drop
traffic-shape group 110 128000 128000 128000 1000
traffic-shape group 107 256000 256000 256000 1000
traffic-shape group 109 256000 256000 256000 1000
traffic-shape group 108 64000 64000 64000 1000
!
ip local pool VPDN 10.11.10.21 10.11.10.254
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Tunnel0
ip route 10.176.0.0 255.255.0.0 10.20.40.89
ip route xxx.xxx.xxx.xxx 255.255.255.252 10.10.10.25
!
no ip http server
no ip http secure-server
ip nat pool poolnat xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx netmask 255.255.255.252
ip nat inside source list 11 pool poolnat overload
ip nat inside source static 192.168.0.3 xxx.xxx.xxx.xxx

!
access-list 1 permit 192.168.0.0 0.0.0.255
access-list 2 permit xxx.xxx.xxx.xxx
access-list 11 permit 192.168.0.0 0.0.0.255
access-list 11 permit 10.11.10.0 0.0.0.255
access-list 23 deny 10.10.10.0 0.0.0.255
access-list 23 deny 10.11.10.0 0.0.0.255
access-list 23 permit any
access-list 98 permit 10.11.10.5
access-list 99 permit xx.xx.xx.xxx 0.0.0.3
access-list 101 deny ip host 192.168.0.2 any
access-list 101 permit tcp any any eq www
access-list 106 permit ip host 10.11.10.51 any
access-list 106 permit ip any host 10.11.10.51
access-list 107 permit ip host 10.11.10.52 any
access-list 107 permit ip any host 10.11.10.52
access-list 108 permit ip host 10.11.10.53 any
access-list 108 permit ip any host 10.11.10.53
access-list 109 permit ip host 10.11.10.54 any
access-list 109 permit ip any host 10.11.10.54
access-list 110 permit ip host 10.11.10.55 any
access-list 110 permit ip any host 10.11.10.55
access-list 111 permit ip host 10.11.10.56 any
access-list 111 permit ip any host 10.11.10.56
snmp-server community xxxxxxxxxx RO 1
snmp-server community public RO 2
!
!
route-map cache permit 10
match ip address 101
set ip next-hop 192.168.0.2
!
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
password xxxxxxxx
login
!
scheduler max-task-time 5000
end
با تشکر