Brocade TurboIron 24X Series Configuration Guide - Manual (Page 966)

932 Brocade TurboIron 24X Series Configuration Guide
53-1003053-01
ACL-based rate limiting using traffic policies
You can configure ACL-based rate limiting on the following interface types:
• physical Ethernet interfaces
• virtual interfaces
• trunk ports
• specific VLAN members on a port (New in 02.3.03 – refer to “Applying an IPv4 ACL to specific
VLAN members on a port (Layer 2 devices only)” on page 921
• a subset of ports on a virtual interface (New in 02.3.03 – refer to “Applying an IPv4 ACL to a
subset of ports on a virtual interface (Layer 3 devices only)” on page 922.)
Support for fixed rate limiting and adaptive rate limiting
Devices support the following types of ACL-based rate limiting:
• Fixed rate limiting – Enforces a strict bandwidth limit. The device forwards traffic that is within
the limit but either drops all traffic that exceeds the limit, or forwards all traffic that exceeds
the limit at the lowest priority level, according to the action specified in the traffic policy.
• Adaptive rate limiting – Enforces a flexible bandwidth limit that allows for bursts above the
limit. You can configure Adaptive Rate Limiting to forward, modify the IP precedence of and
forward, or drop traffic based on whether the traffic is within the limit or exceeds the limit.
Configuring ACL-based fixed rate limiting
Use the procedures in this section to configure ACL-based fixed rate limiting. Before configuring
this feature, see what to consider in
“Configuration notes and feature limitations” on page 930.
Fixed rate limiting enforces a strict bandwidth limit. The port forwards traffic that is within the limit.
If the port receives more than the specified number of fragments in a one-second interval, the
device either drops or forwards subsequent fragments in hardware, depending on the action you
specify.
To implement the ACL-based fixed rate limiting feature, first create a traffic policy, then reference
the policy in an extended ACL statement. Lastly, bind the ACL to an interface. Follow the steps
below.
1. Create a traffic policy. Enter a command such as the following.
TurboIron(config)#traffic-policy TPD1 rate-limit fixed 100 exceed-action drop
2. Create an extended ACL entry or modify an existing extended ACL entry that references the
traffic policy.
Example
TurboIron(config)#access-list 101 permit ip host 10.10.12.2 any traffic-policy
TPD1
3. Bind the ACL to an interface.
TurboIron(config)#int e 5
TurboIron(config-if-e5)#ip access-group 101 in
TurboIron(config-if-e5)#exit