H3C s3600 series Command Manual page 773

When you configure the traffic policing on a port, an ACL rule can only be applied to one egress
port. If you configure the same ACL rule for different egress ports, only the last configuration takes
effect. To apply the same ACL rule to multiple egress ports, you need to specify different ACL
numbers or rule numbers for the ACL rule.
If the IRF function is enabled, the egress port can only be a port of the local unit. For information
about IRF, refer to IRF Fabric module of this manual.
Do not specify the egress-port keyword when configuring traffic policing on ports in an
aggregation group spanning multiple units. Refer to Link Aggregation Operation for detailed
information about link aggregation.
target-rate: Target packet rate (in kbps) to be set. The range of this argument varies with the port type as
follows.
Fast Ethernet port: 64 to 99,968
Gigabit Ethernet port: 64 to 1,000,000
The granularity of rate limit is 64 kbps. If the number you input is in the range N*64 to (N+1)*64 (N is a
natural number), it will be rounded off to (N+1)*64.
burst-bucket burst-bucket-size: Specifies the maximum burst traffic size (in KB) allowed. The
burst-bucket-size argument ranges from 4 to 512 and defaults to 512. Note that it must be an integer
power of 2.
exceed action: Specifies the action to be taken when the traffic rate exceeds the threshold. The action
argument can be:
drop: Drops the packets.
remark-dscp value: Sets a new DSCP value for the packets and then forwards the packets.
Description
Use the traffic-limit command to enable traffic policing and set the related settings.
Use the undo traffic-limit command to disable traffic policing for packets matching specific ACL rules.
Related commands: display qos-interface traffic-limit.
Examples
# Configure traffic policing for inbound packets sourced from VLAN 200 on Ethernet 1/0/1, setting the
target packet rate to 128 kbps, burst bucket size to 64 KB, and configuring to drop the packets
exceeding the rate limit.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] acl number 4000
[Sysname-acl-ethernetframe-4000] rule permit source 200
[Sysname-acl-ethernetframe-4000] quit
[Sysname] interface Ethernet 1/0/1
[Sysname-Ethernet1/0/1] traffic-limit inbound link-group 4000 128 burst-bucket 64 exceed
drop
1-24