Nat Blacklist Limit Rate - H3C S9500 Series Command Manual

Command Manual – NAT
H3C S9500 Series Routing Switches
# Set the threshold value for the number of connections to the IP address 1.1.1.1.
<H3C> system-view
[H3C] nat blacklist limit amount source 1.1.1.1 2222
# Set the threshold value for the number of connections to the IP address 100.0.0.1 in
the private network VPN1.
<H3C> system-view
[H3C] nat blacklist limit amount vpn-instance vpn1 source 100.0.0.1 2222

1.1.17 nat blacklist limit rate

Syntax
nat blacklist limit rate [ source ip ] cir cir-value [ cbs burst-size ] [ ebs burst-size ]
undo nat blacklist limit rate [ source ip ] cir cir-value [ cbs burst-size ] [ ebs
burst-size ]
View
System view
Parameters
cir cir-value: Sets the threshold value in sessions per second for committed information
rate (CIR ) which refers to the average rate on a port for a long time. The value ranges
from 20 to 262,144, with a default value of 250.
cbs burst-size: Sets the threshold value for Conformed Burst Size (CBS ) which
determines the maximum burst size before part of the traffic exceeds CIR, in the range
of [ cir-value, 90*cir-value] in bits. Its default value is 375 bits.
ebs burst-size: Sets the threshold value for Extended Burst Size (EBS) which
determines the maximum burst size before all the traffic exceeds CIR, in the range of [ 0,
90*cir-value] in bits. It must be no bigger than the value specified by cbs burst-size. Its
default value is 0.
Description
Use the nat blacklist limit rate command to set the threshold value for the rate of link
set-up, namely, the times of setting up connections. The user who exceeds the
threshold value will not be displayed in the blacklist.
Use the undo blacklist limit rate command to restore the threshold value for the rate
of link set-up to the default value.
In the commands above:
If the source ip keyword is not specified, this configuration is effective for default
users.
Chapter 1 NAT Configuration Commands
1-15