H3C S3100 Series Operation Manual page 599

Table 1-20 Configure traffic policing for packets that are of a port group and match specific ACL rules
Operation
Enter system view
Enter port group view
Configure traffic
policing
Clear the traffic policing
statistics
Table 1-21 Configure traffic policing for packets passing a port and matching specific ACL rules
Operation
Enter system view
Enter Ethernet port
view
Configure traffic
policing
Clear the traffic
policing statistics
Traffic policing configured on a VLAN is only applicable to packets tagged with 802.1Q header.
Configuration example
Ethernet 1/0/1 belongs to VLAN 2 and is connected to the 10.1.1.0/24 network segment
Perform traffic policing on the packets from the 10.1.1.0/24 network segment, setting the rate to
128 kbps
Mark the DSCP precedence as 56 for the inbound packets exceeding the rate limit.
1) Method I
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 10.1.1.1 0.0.0.255
[Sysname-acl-basic-2000] quit
[Sysname] interface Ethernet1/0/1
[Sysname-Ethernet1/0/1] traffic-limit inbound ip-group 2000 128 exceed remark-dscp 56
2) Method II
<Sysname> system-view
Command
system-view
port-group group-id
traffic-limit inbound acl-rule target-rate
[ burst-bucket burst-bucket-size ] [ conform
con-action ] [ exceed exceed-action ]
[ meter-statistic ]
reset traffic-limit inbound acl-rule
Command
system-view
interface interface-type interface-number
traffic-limit inbound acl-rule target-rate
[ burst-bucket burst-bucket-size ] [ conform
con-action ] [ exceed exceed-action ]
[ meter-statistic ]
reset traffic-limit inbound acl-rule
1-20
Description
—
—
Required
By default, traffic
policing is disabled.
Optional
Description
—
—
Required
By default, traffic
policing is disabled.
Optional