Traffic policing configured on a VLAN is only applicable to packets tagged with 802.1Q header.
Configuration example
Ethernet 1/0/1 belongs to VLAN 2 and is connected to the 10.1.1.0/24 network segment
Perform traffic policing on the packets from the 10.1.1.0/24 network segment, setting the rate to
128 kbps
Mark the DSCP precedence as 56 for the inbound packets exceeding the rate limit.
1)
Method I: configure traffic policing for port Ethernet 1/0/1
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 10.1.1.1 0.0.0.255
[Sysname-acl-basic-2000] quit
[Sysname] interface Ethernet1/0/1
[Sysname-Ethernet1/0/1] traffic-limit inbound ip-group 2000 128 exceed remark-dscp 56
2)
Method II: configure traffic policing for VLAN 2
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 10.1.1.1 0.0.0.255
[Sysname-acl-basic-2000] quit
[Sysname] traffic-limit vlan 2 inbound ip-group 2000 128 exceed remark-dscp 56
Configuring Port Rate Limiting
Refer to section
argument is committed information rate (CIR).
Configuration prerequisites
The port on which port rate limiting configuration is to be performed is determined.
The target rate and the direction of rate limiting (inbound or outbound) are determined.
Configuration procedure
Table 1-18 Configure port rate limiting
Operation
Enter system view
Enter Ethernet port
view
Configure port rate
limiting
Port Rate Limiting
for information about port rate limiting. Note that, the target-rate
system-view
interface interface-type
interface-number
line-rate { inbound | outbound }
target-rate
Command
1-18
Description
—
—
Required
By default, port rate limiting is
disabled.
Need help?
Do you have a question about the 4210 9-Port and is the answer not in the manual?
Questions and answers