R3166-R3206-HP High-End Firewalls Network Management Configuration Guide-6PW101

234
To do… Use the command… Remarks
Configure an ACL based CAR
policy on the interface or port
group
qos car { inbound | outbound } acl
acl-number cir
committed-information-rate [ cbs
committed-burst-size [ ebs
excess-burst-size ] ] [ green action ]
[ red action ]
Required
c. Configuring traffic policing for all traffic
Follow these steps to configure traffic policing for all traffic:
To do… Use the command…
Remarks
Enter system view system-view —
Enter interface view
interface interface-type
interface-number
Required
Settings in interface view take effect
on the current interface.
Configure a CAR action for all
traffic on the interface or port
group
qos car { inbound | outbound } any
cir committed-information-rate [ cbs
committed-burst-size [ ebs
excess-burst-size ] ] [ green action ]
[ red action ]
Required
Displaying and maintaining traffic policing
To do… Use the command… Remarks
Display CAR list information display qos carl [ carl-index ] Available in any view
Display the CAR information on
the specified interface
display qos car interface
[ interface-type interface-number ]
Available in any view
Traffic policing configuration examples
1. Network requirements
As shown in Figure 133,
• G
igabitEthernet 0/3 of Firewall A is connected to GigabitEthernet 0/1 of Firewall B.
• Server, Host A, and Host B can access the Internet through Firewall A and Firewall B.
• Server, Host A, and GigabitEthernet 0/1 of Firewall A are in the same network segment.
• Host B, and GigabitEthernet 0/2 of Firewall A are in the same network segment.
Perform traffic control for packets received on GigabitEthernet 0/1 of Firewall A from Server and Host A
respectively as follows:
• Limit the rate of packets from Server to 54 kbps. When the traffic rate is below 54 kbps, the traffic
is forwarded properly. When the traffic rate exceeds 54 kbps, the excess packets are marked with
IP precedence 0 and then forwarded.
• Limit the rate of packets from Host A to 8 kbps. When the traffic rate is below 8 kbps, the traffic is
forwarded properly. When the traffic rate exceeds 8 kbps, the excess packets are dropped.
Traffic control for packets forwarded by GigabitEthernet 0/1 and GigabitEthernet 0/2 of Firewall B is as
follows: