Release Notes K.12.26

56
Enhancements
CLI Command for Rate Limiting
RL-PACLs use one meter per port and that meter is shared among all PERMIT statements for the RL-
PACL on that port. The meter is not shared with other ports. For a 24-port interface module, 24 meters
potentially can be used. (There are up to 256 meters available per module.)
Operating features include:
■ Each port individually enforces the rate limit specified for that port.
■ Only one rate-limiting ACL is allowed per port. Rate limits can be applied to a range of ports.
■ Rate limits set on one port do not affect the traffic on any other port
■ If you want to rate-limit some classes of traffic and drop others, the RL-PACL must be used
in combination with another CLI-configured PACL; this feature does not provide that
functionality.
■ The rate-limiting configuration information is stored in the config file
■ Rate-limiting ACLs cannot be configured on a port that is part of a trunk.
Caution
All rate-limit values are in Kbps (1000 bits per second); some other rate-limiting features use Bps
(bits per second). Be careful to enter the rates correctly.
CLI Command for Rate Limiting
The interface <port-list> rate-limit command is enhanced to support the RL-PACL, as shown below:
Syntax: [no] interface <port-list> rate-limit ip access-group <name> in kbps <rate>
Applies the access-group name specified to the ports selected in <port-list>. All
packets that match a permit statement in access-group <name> are rate-limited
and all packets that match a deny statement in access-group <name> are not rate-
limited.
in Kbps <rate>: The range is 1-10,000,000 kilobits per second.
Figure 1. Example of Rate-Limiting RL-PACL on a Range of Ports
In the example in Figure 1 the ACL named Group_A is applied to port 4 through 8 with a limit of 10000
kbps (10 Mbps). When the packets enter the configured ports, all packets that match a PERMIT
statement in Group_A are rate-limited and all packets that match a DENY statement in Group_A are
not rate-limited. The ACL does not have to be defined before being applied as an RL-PACL.
ProCurve(config)# interface 4-8 rate-limit ip access-group Group_A in kbps 10000