H3C s3600 series Command Manual page 786

View
QoS profile view
Parameters
inbound: Imposes traffic limit on the packets received through the interface.
acl-rule: ACL rules to be applied for traffic classification. This argument can be the combination of
multiple ACLs. For more information about this argument, refer to
ACL rules referenced must be those defined with the permit keyword.
union-effect: Specifies that all the ACL rules, including those identified by the acl-rule argument in this
command and those applied previously, are valid. If this keyword is not specified, traffic policing issues
both the rate limiting action and the permit action at the same time, that is, traffic policing permits the
conforming traffic to pass through. If this keyword is specified, traffic policing issues only the rate limiting
action but not the permit action. In this case, if a packet matches both an ACL rule specified in the
traffic-limit command and another previously applied ACL rule with the deny keyword, the packet will
be dropped.
On Ethernet 1/0/1, assume that the filter command is configured to filter packets destined to IP address
2.2.2.2 and the traffic-limit command is configured to limit the rate of packets sourced from IP address
1.1.1.1 within 128 kbps. Whether packets conforming to the rate limit of 128 kbps, sourced from IP
address 1.1.1.1, and destined to IP address 2.2.2.2 (referred to as packets A later)are dropped
depends on the union-effect of the traffic-limit command.
If the union-effect keyword is not specified, the traffic-limit command issues both the rate limiting
action and the permit action. Whether packets A can pass through depends on the configuration
order of the filter command and the traffic-limit command, with the latest command applying. That
is, if the traffic-limit command is configured after the filter command is configured, packets A can
pass through; otherwise, packets A are dropped.
If the union-effect keyword is specified, the traffic-limit command issues only the rate limiting action.
Whether packets A can pass through depends on the filter command. As for this example, packets
A are dropped.
egress-port interface-type interface-number: Enables traffic policing for the outbound packets of the
port identified by interface-type interface-number. If you specify this keyword, this command applies to
the outbound unicast packets that pass the port and match the ACL rules.
Table 1-4
2-6
and Table 1-5. Note that the