HP VPN Firewall Appliances Network Management Configuration Guide

322
Configuring traffic policing at the CLI
Configure traffic policing by using either policy approach or non-policy approach. In non-policy
approach, you can configure CAR list-based traffic policing, ACL-based traffic policing, and traffic
policing for all traffic.
Configuring traffic policing by using policy approach
Ste
p
Command
1. Enter system view.
system-view
2. Create a class and enter class view.
traffic classifier classifier-name [ operator { and | or } ]
3. Configure match criteria.
if-match [ not ] match-criteria
4. Return to system view.
quit
5. Create a behavior and enter behavior view.
traffic behavior behavior-name
6. Configure a traffic policing action.
car cir committed-information-rate [ cbs
committed-burst-size [ ebs excess-burst-size ] ] [ green
action ] [ red action ]
7. Return to system view.
quit
8. Create a policy and enter policy view.
qos policy policy-name
9. Associate the class with the traffic behavior in
the QoS policy.
classifier classifier-name behavior behavior-name
10. Return to system view.
quit
11. Apply the QoS policy to an interface.
Applying the QoS policy to an interface
Configuring traffic policing by using non-policy approach
Configuring CAR-list-based traffic policing
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Configure a CAR
list.
qos carl carl-index { destination-ip-address |
source-ip-address } { subnet ip-address mask-length
| range start-ip-address to end-ip-address }
[ per-address [ shared-bandwidth ] ] }
Configure rules on the CAR
list.
3. Enter interface view.
interface interface-type interface-number N/A
4. Configure a CAR list
based CAR policy
on the interface.
qos car { inbound | outbound } carl carl-index cir
committed-information-rate [ cbs
committed-burst-size [ ebs excess-burst-size ] ]
[ green action ] [ red action ]
N/A