Brocade Virtual ADX Security Guide (Supporting ADX v03.1.00) - Manual (Page 24)

12 Brocade Virtual ADX Security Guide
53-1003250-01
Transaction rate limit
1
Applying policy on virtual interface
Virtual ADX(config)# interface ve 20
Virtual ADX(config-vif-20)# ip udp trans-rate 53
Syntax: [no] ip tcp | udp trans-rate ports
Syntax: [no] ip icmp trans-rate
The ports parameter specifies one or more TCP or UDP ports to monitor. You can monitor up to
four ports.
Deleting all TRL rules in a policy
You can delete all TRL rules in a policy as shown.
Virtual ADX(config)# client-trans-rate-limit tcp trl1
Virtual ADX(config-client-trl-trl1)# trl delete-all-rules
Syntax: trl delete-all-rules
Download transaction rate limit configuration from a TFTP server
When a Transaction Rate Limit configuration becomes very large, you can optionally download the
configuration from a TFTP server.
NOTE
A TRL configuration file can have IPv4 as well as IPv6 rules.
The following example shows how to download a Transaction Rate Limit configuration from a TFTP
server.
Virtual ADX(config)# server trl tftp 10.1.1.1 test.trl 2
Syntax: server trl tftp ip-address trl_config_file_name retry_count
Specify the following values.
• ip_address —IP address of the TFTP server.
• trl_config_file_name —File name of Transaction Rate Limit configuration.
• retry_count —Retry number for the download.
Verify that the Transaction Rate Limit configuration file is in the following format.
client-trans-rate-limit tcp trl101
trl 10.2.24.0/24 monitor-interval 50 conn-rate 100 hold-down-time 60
trl 10.2.24.10/32 exclude
NOTE
This is the same format as the show running-configuration command generates.
Configuring the maximum number of rules
By default a TRL a policy can have up to 50 IPv4 rules and 50 IPv6 rules. A maximum of 512 IPv4
and 256 IPv6 rules are supported on a Brocade Virtual ADX for all policies. While the maximum
number of rules cannot be increased over the maximum, these limits can be changed globally or
locally per-policy.