User Manual

Limiting Traffic Rate
444 Enterasys X-Pedition User Reference Manual
Aggregate Rate Limiting
Use an aggregate rate limiting policy if an aggregation of flows needs to be limited to a particular
rate. For example, you can use aggregate rate limiting to rate limit traffic to or from a particular
subnet.
Note: You cannot apply an aggregate rate limiting policy to an interface that spans ports on more
than one line card. For example, you cannot apply an aggregate rate limiting policy to the
interface ip2, if it interfaces to a VLAN that consists of ports et.1.(1-4) and et.2.(1-4).
Note: Aggregate and flow-aggregate rate limiting are not supported on 802.1q trunk ports.
To configure aggregate rate limiting policies, you must first enable aggregate rate limiting mode on
the line card (see Rate Limiting Modes on page 442). To define an aggregate rate limit policy and
apply the policy to an interface, use the following commands in the Configure mode:
Note: You cannot use non-IP ACLs for aggregate rate-limit policies. The XP will display
interface names up to 32 characters in length.
Example of Aggregate Rate Limiting
In the following example, incoming FTP and HTTP traffic to the subnetwork 122.132.0.0/16 will
be rate limited to 4 Mbps and 2 Mbps, respectively:
In the above example, the first configuration command is needed to enable the aggregate rate
limiting mode on the line card in slot 1 (per-flow is the default rate limiting mode).
Define an aggregate rate limit policy. rate-limit <name> aggregate acl <acl list> rate
<num> [drop-packets| no-action| lower-priority|
lower-priority-except-control|
tos-precedence-rewrite <num>|
tos-precedence-rewrite-lower-priority <num>]
[allocate-resources-during-apply|
allocate-resources-during-traffic]|
[burst-compensating]
Apply an aggregate rate limit policy
to an interface.
rate-limit <name> apply interface <interface>| all
system enable aggregate-rate-limiting slot 1
interface create ip engintf address-netmask 122.132.10.23/16 port et.1.6
acl engftp permit ip 122.132.0.0/16 any any 20
rate-limit engftp aggregate acl engftp rate 4000000 drop-packets
acl enghttp permit ip 122.132.0.0/16 any any 80
rate-limit enghttp aggregate acl enghttp rate 2000000 drop-packets
rate-limit engftp apply interface engintf
rate-limit enghttp apply interface engintf