S5700和AR3260 做ACL限制IP段的问题.docxVIP

公司有6层，每层有一个二层交换机，第五层楼是FTP服务器用S5700划了6个VLAN 分别为VLAN10 VLAN20 VLAN30 VLAN70 VLAN80 VLAN90每个楼层是不同的VLAN 并在每条VLAN上做外网限速我想问下怎么限速而不影响内网FTP的传输呢？我现在做的就是在路由上限速，但还是影响内网FTP的下载速度AR3260的0/0/0口连的是外网，0/0/1口连的是S5700的0/0/1口S5700的0/0/20口连的是FTP服务器，服务器所在的网段和路由是一个网段这是路由的配置：#acl number 3001rule 1 permit ip destination 55#acl number 3002rule 1 permit ip destination 55#acl number 3003rule 1 permit ip destination 55#acl number 3007rule 1 permit ip destination 55#acl number 3008rule 1 permit ip destination 55#acl number 3009rule 1 permit ip destination 55#traffic classifier 9 operator orif-match acl 3009traffic classifier 8 operator orif-match acl 3008traffic classifier 3 operator orif-match acl 3003traffic classifier 7 operator orif-match acl 3007traffic classifier 2 operator orif-match acl 3002traffic classifier 1 operator orif-match acl 3001#traffic behavior 9car cir 5120 pir 7168 cbs 640000 pbs 896000 green pass yellow pass red discardtraffic behavior 8car cir 4096 pir 6144 cbs 512000 pbs 768000 green pass yellow pass red discardtraffic behavior 3car cir 6144 pir 10240 cbs 768000 pbs 1280000 green pass yellow pass red discardtraffic behavior 7car cir 4096 pir 6144 cbs 512000 pbs 768000 green pass yellow pass red discardtraffic behavior 2car cir 5120 pir 8192 cbs 640000 pbs 1024000 green pass yellow pass red discardtraffic behavior 1car cir 2048 pir 5120 cbs 256000 pbs 640000 green pass yellow pass red discard#traffic policy 1classifier 1 behavior 1classifier 2 behavior 2classifier 3 behavior 3classifier 7 behavior 7classifier 8 behavior 8classifier 9 behavior 9##interface GigabitEthernet0/0/0ip address 5 nat outbound 2000#interface GigabitEthernet0/0/1mtu 1472ip address ip verify source-addressclear ip dfdiscard srrqos car outbound cir 40960 pir 40960 cbs 5120000 pbs 5120000 green pass yellowpass red discardtraffic-policy 1 outbounddhcp select interfacedhcp server dns-list X.X.X.Xcombo-port fiber#ip route-static ip route-static ip route-static ip route-static ip route-stati