H3C Technologies H3C S3100 Series Switches - Manual (Page 611)

1-32
Network diagram
Figure 1-9 Network diagram for traffic policing configuration
Configuration procedure
1) Define an ACL for traffic classification.
# Create ACL 2000 and enter basic ACL view to classify packets sourced from the 192.168.1.0/24
network segment.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 192.168.1.0 0.0.0.255
[Sysname-acl-basic-2000] quit
# Create ACL 2001 and enter basic ACL view to classify packets sourced from the 192.168.2.0/24
network segment.
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule permit source 192.168.2.0 0.0.0.255
[Sysname-acl-basic-2001] quit
2) Configure traffic policing
# Set the maximum rate of outbound IP packets sourced from the R&D department to 128 kbps.
[Sysname] interface Ethernet 1/0/1
[Sysname-Ethernet1/0/1] traffic-limit inbound ip-group 2000 128 exceed drop
# Set the maximum rate of outbound IP packets sourced from the marketing department to 64 kbps.
[Sysname] interface Ethernet 1/0/2
[Sysname-Ethernet1/0/2] traffic-limit inbound ip-group 2001 64 exceed drop