H3C Technologies H3C S3100 Series Switches - Manual (Page 599)

1-20
Table 1-20 Configure traffic policing for packets that are of a port group and match specific ACL rules
Operation Command Description
Enter system view system-view —
Enter port group view port-group group-id —
Configure traffic
policing
traffic-limit inbound acl-rule target-rate
[ burst-bucket burst-bucket-size ] [ conform
con-action ] [ exceed exceed-action ]
[ meter-statistic ]
Required
By default, traffic
policing is disabled.
Clear the traffic policing
statistics
reset traffic-limit inbound acl-rule Optional
Table 1-21 Configure traffic policing for packets passing a port and matching specific ACL rules
Operation Command Description
Enter system view system-view —
Enter Ethernet port
view
interface interface-type interface-number —
Configure traffic
policing
traffic-limit inbound acl-rule target-rate
[ burst-bucket burst-bucket-size ] [ conform
con-action ] [ exceed exceed-action ]
[ meter-statistic ]
Required
By default, traffic
policing is disabled.
Clear the traffic
policing statistics
reset traffic-limit inbound acl-rule Optional
Traffic policing configured on a VLAN is only applicable to packets tagged with 802.1Q header.
Configuration example
z Ethernet 1/0/1 belongs to VLAN 2 and is connected to the 10.1.1.0/24 network segment
z Perform traffic policing on the packets from the 10.1.1.0/24 network segment, setting the rate to
128 kbps
z Mark the DSCP precedence as 56 for the inbound packets exceeding the rate limit.
1) Method I
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 10.1.1.1 0.0.0.255
[Sysname-acl-basic-2000] quit
[Sysname] interface Ethernet1/0/1
[Sysname-Ethernet1/0/1] traffic-limit inbound ip-group 2000 128 exceed remark-dscp 56
2) Method II
<Sysname> system-view