Brocade Virtual ADX Security Guide (Supporting ADX v03.1.00) - Manual (Page 25)

Brocade Virtual ADX Security Guide 13
53-1003250-01
Transaction rate limit
1
Changing the maximum number of rules globally
You can change the maximum number of TRL rules globally on a Brocade Virtual ADX for all policies
as shown.
Virtual ADX(config)# client-trans-rate-limit max-ipv4-rules 50
Syntax: [no] client-trans-rate-limit { max-ipv4-rules | max-ipv6-rules } rules-count
The max-ipv4-rules parameter specifies that the rules limit is being set for IPv4 rules.
The max-ipv6-rules parameter specifies that the rules limit is being set for IPv6 rules.
The rules-count variable specifies the number of rules that will be supported globally. The
maximum values (also the default) are: 512 for IPv4 and 256 for IPv6.
Changing the maximum number of rules locally per-policy
You can change the maximum number of TRL rules for an individual policy on a Brocade Virtual
ADX as shown.
Virtual ADX(config)# client-trans-rate-limit tcp trl1
Virtual ADX(config-client-trl-trl1)# trl max-ipv4-rules 50
Syntax: [no] trl { max-ipv4-rules | max-ipv6-rules } rules-count
The max-ipv4-rules parameter specifies that the rules limit is being set for IPv4 rules for the
specified policy.
The max-ipv6-rules parameter specifies that the rules limit is being set for IPv6 rules for the
specified policy.
The rules-count variable specifies the number of rules that will be supported for the specified policy
that this command is being configured under. The default values are: 50 for IPv4 and 50 for IPv6.
The value for each (IPv4 and IPv6) can be set to any number as long as the global limits are
observed.
Saving a TRL configuration
The following applies to saving a TRL config:
• The startup-config cannot store 512 IPv4 and 256 IPv6 rules.
• If the total number of IPv4 and IPv6 rules exceeds 50, issuing the write mem command stores
the TRL rules in the “trl_conf.txt” file which is saved in the LINUX file system in the VM.
• The policy config and global/local maximum rule count config is always stored in the
startup-config.
Disabling the storage of TRL rules on the internal USB drive
By default, storage of TRL rules on the internal USB drive of a Brocade Virtual ADX is enabled. You
can disable the storage of TRL rules on the internal USB drive of a Brocade Virtual ADX as shown.
Virtual ADX(config)# no client-trans-rate-limit usb-config-gen
Syntax: no client-trans-rate-limit usb-config-gen