1-19
To do… Use the command… Remarks
Enter system view
system-view
—
Enter port group
view
port-group group-id
—
Configure traffic
policing
traffic-limit inbound acl-rule target-rate
Required
Disabled by default.
4) Configuring traffic policing for a port
Follow these steps to configure traffic policing for the incoming packets matching the specific ACL rules
on a port:
To do… Use the command… Remarks
Enter system view
system-view
—
Enter Ethernet port
view
interface interface-type interface-number
—
Configure traffic
policing
traffic-limit inbound acl-rule target-rate
Required
Disabled by default.
User-defined traffic classification rules configured for traffic policing in the global scope or for a VLAN
take precedence over the default rules used for processing protocol packets. The device will execute
traffic policing preferentially, which may affect device management implemented through Telnet and so
on.
Configuration example
# Configure traffic policing for the packets from network segment 10.1.1.0/24, setting the rate limit to
128 kbps.
1) Method I
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 10.1.1.0 0.0.0.255
[Sysname-acl-basic-2000] quit
[Sysname] interface GigabitEthernet1/0/1
[Sysname-GigabitEthernet1/0/1] traffic-limit inbound ip-group 2000 128
2) Method II
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 10.1.1.0 0.0.0.255
[Sysname-acl-basic-2000] quit
[Sysname] traffic-limit vlan 2 inbound ip-group 2000 128
To Next Page
Loading...
