Traffic policing – H3C Technologies H3C S6300 Series Switches User Manual
Page 44
34
CBS is implemented with bucket C, and EBS with bucket E. When only the CIR is used for traffic
evaluation, packets are measured against the following bucket scenarios:
•
If bucket C has enough tokens, packets are colored green.
•
If bucket C does not have enough tokens but bucket E has enough tokens, packets are colored
yellow.
•
If neither bucket C nor bucket E has sufficient tokens, packets are colored red.
When both CIR and PIR are used to evaluate traffic, bucket P, which is equal to the sum of the CBS and
EBS in size, is introduced. In this case, packets are measured against the following bucket scenarios:
•
If both bucket C and bucket P have enough tokens, packets are colored green.
•
If bucket C does not have enough tokens but bucket P has enough tokens, packets are colored
yellow.
•
If bucket P does not have enough tokens, packets are colored red.
You can configure traffic control policies for packets of different colors by using the traffic policing
feature.
Traffic policing
Traffic policing supports policing the inbound traffic and the outbound traffic.
A typical application of traffic policing is to supervise the specification of certain traffic entering a
network and limit it within a reasonable range, or to "discipline" the extra traffic to prevent aggressive
use of network resources by a certain application. For example, you can limit bandwidth for HTTP
packets to less than 50% of the total. If the traffic of a certain session exceeds the limit, traffic policing can
drop the packets or reset the IP precedence of the packets.
shows an example of policing
outbound traffic on an interface.
Figure 7 Traffic policing
Traffic policing is widely used in policing traffic entering the networks of ISPs. It can classify the policed
traffic and take pre-defined policing actions on each packet depending on the evaluation result:
•
Forwarding the packet if the evaluation result is "conforming."
•
Dropping the packet if the evaluation result is "excess."
- H3C S5820V2 Series Switches H3C S5830 Series Switches H3C S5830V2 Series Switches H3C S3600V2 Series Switches H3C S6800 Series Switches H3C S3100V2 Series Switches H3C S12500-X Series Switches H3C S5560 Series Switches H3C WX6000 Series Access Controllers H3C WX5000 Series Access Controllers H3C WX3000 Series Unified Switches H3C LSWM1WCM10 Access Controller Module H3C LSWM1WCM20 Access Controller Module H3C LSQM1WCMB0 Access Controller Module H3C LSRM1WCM2A1 Access Controller Module H3C LSBM1WCM2A0 Access Controller Module H3C S9800 Series Switches H3C S5130 Series Switches H3C S5120 Series Switches