H3C S5100-SI

1-45
Configure traffic policing to satisfy the following requirements:
z Set the maximum rate of outbound IP packets sourced from the marketing department
to 64 kbps. Drop the packets exceeding the rate limit.
z Set the maximum rate of outbound IP packets sourced from the R&D department to 128
kbps. Drop the packets exceeding the rate limit.
Figure 1-10 Network diagram for traffic policing configuration
Configuration procedure
1) Define an ACL for traffic classification
# Create ACL 2000 and enter basic ACL view to match packets sourced from network
segment 192.168.1.0/24.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 192.168.1.0 0.0.0.255
[Sysname-acl-basic-2000] quit
# Create ACL 2001 and enter basic ACL view to match packets sourced from network
segment 192.168.2.0/24.
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule permit source 192.168.2.0 0.0.0.255
[Sysname-acl-basic-2001] quit
2) Configure traffic policing
# Set the maximum rate of outbound IP packets sourced from the marketing department to
64 kbps.
[Sysname] traffic-limit vlan 2 inbound ip-group 2001 64 exceed drop
# Set the maximum rate of outbound IP packets sourced from the R&D department to 128
kbps.
[Sysname] traffic-limit vlan 1 inbound ip-group 2000 128 exceed drop