Configuration Guide User guide

1774 FastIron Configuration Guide
53-1002494-02
Traffic policies overview
• ACL counting policy
• Combined rate limiting and ACL counting policy
The maximum number of supported active TPDs is a system-wide parameter and depends on
the device you are configuring. The total number of active TPDs cannot exceed the system
maximum. Refer to “Maximum number of traffic policies supported on a device” on
page 1775.
When you apply a traffic policy to an interface, you do so by adding a reference to the traffic policy
in an ACL entry, instead of applying the individual traffic policy to the interface. The traffic policy
becomes an active traffic policy or active TPD when you bind its associated ACL to an interface.
To configure traffic policies for ACL-based rate limiting, refer to “Configuring ACL-based fixed rate
limiting” on page 1777 and “ACL-based adaptive rate limiting configuration” on page 1778.
To configure traffic policies for ACL counting, refer to “Enabling ACL statistics” on page 1783.
Configuration notes and feature limitations
for traffic policies
Note the following when configuring traffic policies:
• Traffic policies applies to IP ACLs only.
• Traffic policies are supported on FastIron X Series devices, but not on the 10 Gbps Ethernet
interfaces of the SX-FI62XG and SX-FI42XG modules.
• The maximum number of supported active TPDs is a system-wide parameter and depends on
the device you are configuring. The total number of active TPDs cannot exceed the system
maximum. Refer to “Maximum number of traffic policies supported on a device” on
page 1775.
• You can reference the same traffic policy in more than one ACL entry within an ACL. For
example, two or more ACL statements in ACL 101 can reference a TPD named TPD1.
• You can reference the same traffic policy in more than one ACL. For example, ACLs 101 and
102 could both reference a TPD named TPD1.
• To modify or delete an active traffic policy, you must first unbind the ACL that references the
traffic policy.
• When you define a TPD (when you enter the CLI command traffic-policy), explicit marking of
CoS parameters, such as traffic class and 802.1p priority, are not available on the device. In
the case of a TPD defining rate limiting, the device re-marks CoS parameters based on the
DSCP value in the packet header and the determined conformance level of the rate limited
traffic, as shown in Table 289.