H3C S7500 Series Ethernet Switches Command Manual

Command Manual – NAT, Netstream, Policy Routing
H3C S7500 Series Ethernet Switches Chapter 1
NAT Configuration Commands
1-12
cir-value: CIR control threshold for connection setup rate, long time average rate on
port, in the unit of sessions per second This argument ranges from 20 to 262,144. The
default value is 250. (CIR: committed information rate.)
cbs-value: CBS control threshold for connection setup rate, in the unit of sessions per
second. This argument ranges from cir-value to 90 x cir-value and must be less than
4,294,960. The default value is 375. (CBS: conformed burst size.)
ebs-value: EBS control threshold for connection setup rate, in the unit of sessions per
second. This argument ranges from 0 to 90 x cir-value and must be less than or equal
to cbs-value. The default value is 0. (EBS: extended burst size.)
Description
Use the nat blacklist limit rate command to set the global or specific control
thresholds for connection setup rate (number of connections established per second).
Use the undo nat blacklist limit rate command to restore the default control
thresholds for connection setup rate.
Note that:
z If you do not use the source ip keyword, the command applies to all global users.
z If you use the source ip keyword, the command applies to only specific users
(users specified by the nat blacklist limit rate source user-ip command with
source IP addresses).
z If you do not use the nat blacklist limit rate command, the system adopts the
default values for cir-value, cbs-value, and ebs-value. They are 250, 375, and 0
respectively.
z If you only configure cir-value by using the nat blacklist limit rate command, the
value of cbs-value is cir-value x 1.5 and the value of ebs-value is 0.