Extreme Networks 200 Series - Manual (Page 119)

Using Access Control Lists
Summit 200 Series Switch Installation and User Guide 117
For packets that match a particular access control list, you can specify the following actions:
• Drop —Drop the packets. Matching packets are not forwarded.
• Permit-established —Drop the packet if it would initiate a new TCP session (see, “The
permit-established Keyword” on page 118).
• Permit —Forward the packet. You can send the packet to a particular QoS profile, and modify the
packet’s 802.1p value and/or DiffServe code point.
Rate Limits
Each entry that makes up a rate limit contains a unique name and specifies a previously created access
mask. Like an access list, a rate limit includes a list of values to compare with the incoming packets and
an action to take for packets that match. Additionally, a rate limit specifies an action to take when
matching packets arrive at a rate above the limit you set. When you create a rate limit, you must specify
a value for each of the fields that make up the access mask used by the list.
NOTE
Unlike an access list, a rate limit can only be applied to a single port. Each port will have its own rate
limit defined separately.
On a 100 Mbps port (100BASE-TX), you can configure the rate limit value in the range from 1 Mbps to
100 Mbps in 1 Mbps increments, which is to say, the rate limit value can be set at 1, 2, 3, 4 … 100 Mbps.
On a 1000 Mbps port (Gigabit Ethernet uplink port), you can configure the rate limit value in the range
from 8 Mbps to 1000 Mbps in increments of 8 Mbps, which is to say the rate limit value can be set at 8,
16, 24, 32 … 1000 Mbps.
NOTE
The rate limit specified in the command line does not precisely match the actual rate limit imposed by
the hardware, due to hardware constraints. See the release notes for the exact values of the actual rate
limits, if required for your implementation.
For packets that match a particular list, and arrive at a rate below the limit, you can specify the
following action:
• Permit —Forward the packet. You can send the packet to a particular QoS profile, and modify the
packet’s 802.1p value and/or DiffServe code point.
For packets that match a particular list and arrive at a rate that exceeds the limit, you can specify the
following actions:
• Drop —Drop the packets. Excess packets are not forwarded.
• Permit with rewrite —Forward the packet, but modify the packet’s DiffServe code point.