Foundry Networks Switch and Router Installation And Configuration Manual page 437

NOTE: The bits appear in this order in the IP precedence field and the software reads them from right to left.
The least significant digit is the rightmost digit (bit position 1) and the most significant digit is the leftmost digit (bit
position 8).
You also can use the mask <precedence-mask> parameter to specify a Diffserv control point. Regardless of
whether the mask value you specify represents a set of IP precedences or a Diffserv control point, the software
examines the value in the field and responds with the action you specify.
NOTE: Rate limiting for Diffserv is not supported in the current release.
Specifying the Bandwidth Allowances and Applying Rate Policy Rules to an Interface
When you apply a rate policy rule to an interface, you specify the following:
• The amount of the interface's bandwidth you are allowing for traffic that matches the rule
• The actions you want the device to take for traffic that conforms to the rule (is within the Normal Burst Size)
and for traffic that exceeds the rule (is within the Excess Burst Size).
You can apply up 20 rate policy rules to an interface for inbound traffic and up to 20 additional rules for outbound
traffic. The maximum number of rules for either direction is 20. When you apply more than one rule to an
interface, the software interprets the rules in order, beginning with the first rule you apply to the interface and
ending with the last rule you apply. When the traffic matches a rule, the software performs the action associated
with that rule.
You can apply rate policy rules to the following types of interfaces:
• Physical port
• Trunk group (apply the policy to the trunk group's primary port)
• Virtual interface
• Port-based VLAN
CLI Examples
To specify the values for the rate policies in Figure 14.2 on page 14-6 and apply the policies, enter the following
commands:
NetIron(config)# interface ethernet 25
NetIron(config-if-e1000-25)# rate-limit input access-group 101 10000000 125000
187500 conform-action set-prec-transmit 5 exceed-action set-prec-transmit 0
NetIron(config-if-e1000-25)# rate-limit input access-group 101 10000000 125000
187500 conform-action set-prec-transmit 5 exceed-action set-prec-transmit 0
NetIron(config-if-e1000-25)# rate-limit input access-group 102 10000000 125000
187500 conform-action set-prec-transmit 5 exceed-action drop
NetIron(config-if-e1000-25)# rate-limit output access-group 103 1000000 100000
100000 conform-action set-prec-transmit 5 exceed-action drop
NetIron(config-if-e1000-25)# rate-limit input 4000000 80000 120000 conform-action
set-prec-transmit 5 exceed-action drop
To specify the values for the rate policies in Figure 14.3 on page 14-8 and apply the policies, enter the following
commands:
NetIron(config)# interface virtual ve2
NetIron(config-ve-2)# rate-limit input access-group ratelimit 100 4000000 320000
400000 conform-action transmit exceed-action drop
To specify the values for the rate policies in Figure 14.4 on page 14-9 and apply the policies, enter the following
commands:
NetIron(config)# vlan 2
NetIron(config-vlan-2)# rate-limit input 10000000 125000 187500 conform-action
set-prec-transmit 5 exceed-action set-prec-transmit 0
December 2000
IronClad Rate Limiting
14 - 17