class-map match-all no-limit
 match access-group name no-limit


class-map match-all user1
 match access-group name user1

class-map match-all user2
 match access-group name user2

class-map match-all user3
 match access-group name user3


policy-map traf_in
 class no-limit
 class user1
  police 256000 48000 96000 conform-action transmit exceed-action drop
 class user2
  police 128000 24000 48000 conform-action transmit exceed-action drop
 class user1
  police 512000 96000 192000 conform-action transmit exceed-action drop


policy-map traf_out
 class no-limit
 class user1
  shape average 256000
 class user2
  shape average 128000
 class user3
  shape average 512000


ip access-list standard no-limit
 permit сеть.которая.не.лимитруется 0.0.0.255
 deny   any


ip access-list standard user1
 permit ip.адрес.юзера.1
 deny   any

ip access-list standard user2
 permit ip.адрес.юзера.2
 deny   any

ip access-list standard user3
 permit ip.адрес.юзера.3
 deny   any


interface FooBar 0/1
 service-policy in  traf_in
 service-policy out traf_out

rate limit in <SPEED> <SPEED/4> <SPEED/2> conf tr exc dr
rate limit out <SPEED> <SPEED/4> <SPEED/2> conf tr exc dr

ip access-l 10 perm <net><w_mask>

class user1
  police 256000 48000 96000 conform-action transmit exceed-action drop
 class user2
  police 128000 24000 48000 conform-action transmit exceed-action drop

class user1
     shape peak 512     

private String[]  getOpenRules( UserStatus status, int vid )
{
// предедущее состояние шлюза
         cid = status.contractId;
         ps = con.prepareStatement( "select * from ipn_contract_status_log_1 where cid = " + cid );
         rs = ps.executeQuery();
         while( rs.next() ) st = rs.getByte("action");
         ps.close();
         log.info("The pregoing status Gate = " + st);
// end
         if (st == 3)
            return getRules( status, "\\[CREATE\\]((.|\n)*)\\[/CREATE\\]", vid );
         else return getRules( status, "\\[OPEN\\]((.|\n)*)\\[/OPEN\\]", vid );
}

[DEFAULT]

[CREATE]
......................
[/CREATE]

[OPEN]
......................
[/OPEN]

[CLOSE]
......................
[/CLOSE]

[REMOVE]
......................
[/REMOVE]


[/DEFAULT]

protected void doSync()
{
   try
   {
      //удалено для упрощения

      session.doCommand("configure terminal");
 
      doCommands(session);
 
      session.doCommand("exit");
      session.doCommandAsync("exit");
   }
   catch (Exception e)
   {
      throw new RuntimeException(e);
   }
}

private void doCommands(MyTelnetSession session) throws IOException, OperationTimedoutException
{      
   for(UserStatus status : statusList)
   {
      VlanManager manager = new VlanManager(status.mid,con);
      gateId  = gate.getId();
      vid = manager.getVlan(gateId, status.contractId);
      
      //TODO - подумать что сделать с правилами на добавление
 
      rules = null;
      if (status.status == IPNContractStatus.STATUS_OPEN)
      {
         rules = getOpenRules(status,vid);
      }          
      else
      if (status.status == IPNContractStatus.STATUS_REMOVED)
      {
         rules = getRemoveRules(status,vid);   
      }
      //if closed and etc
      else
      {
         rules = getCloseRules(status,vid);
      }
 
      if (vid > 0)
      {
         for (String rule : rules)
         {               
            session.doCommand(rule);            
         }
      }
   }      
}