H3C S5100-SI Operation Manual page 434

Configure traffic policing to satisfy the following requirements:
Set the maximum rate of outbound IP packets sourced from the marketing department
to 64 kbps. Drop the packets exceeding the rate limit.
Set the maximum rate of outbound IP packets sourced from the R&D department to 128
kbps. Drop the packets exceeding the rate limit.
Figure 1-10 Network diagram for traffic policing configuration
Configuration procedure
1) Define an ACL for traffic classification
# Create ACL 2000 and enter basic ACL view to match packets sourced from network
segment 192.168.1.0/24.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 192.168.1.0 0.0.0.255
[Sysname-acl-basic-2000] quit
# Create ACL 2001 and enter basic ACL view to match packets sourced from network
segment 192.168.2.0/24.
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule permit source 192.168.2.0 0.0.0.255
[Sysname-acl-basic-2001] quit
2) Configure traffic policing
# Set the maximum rate of outbound IP packets sourced from the marketing department to
64 kbps.
[Sysname] traffic-limit vlan 2 inbound ip-group 2001 64 exceed drop
# Set the maximum rate of outbound IP packets sourced from the R&D department to 128
kbps.
[Sysname] traffic-limit vlan 1 inbound ip-group 2000 128 exceed drop
1-45