HP VPN Firewall Appliances Network Management Command Reference

260
Default command level
2: System level
Parameters
carl-index: CAR list number, in the range of 1 to 199.
destination-ip-address: Configures a destination IP address-based CAR list.
source-ip-address: Configures a source IP address-based CAR list.
subnet ip-address mask-length: Specifies a subnet by the IP subnet address and IP subnet address mask
length.
range start-ip-address to end-ip-address: Specifies an IP address range by the start address and end
address. end-ip-address must be greater than start-ip-address. An IP address range can contain a
maximum of 1024 IP addresses.
per-address: Performs per-IP address rate limiting within the network segment. If this keyword is not
specified, rate limiting is performed for the entire network segment.
shared-bandwidth: Specifies that traffic of all IP addresses within the network segment shares the
remaining bandwidth.
Usage guidelines
When you apply an IP network segment-based CAR list to an interface with the qos car command, the
CIR you defined takes different meanings depending on the configuration of the per-address keyword
and the shared-bandwidth keyword for the CAR list.
• If the per-address keyword is not specified, the CIR specifies the total bandwidth for the network
segment and will be allocated to each IP address based on its traffic size.
• If the per-address keyword is specified but the shared-bandwidth keyword is not specified, the CIR
specifies the bandwidth of each IP address, and the bandwidth cannot be shared by the other IP
addresses within the network segment.
• If both the per-address keyword and the shared-bandwidth keyword are specified, the CIR
specifies the total shared bandwidth for the network segment, and will be dynamically and evenly
allocated to the traffic by IP address.
For example, apply a CAR list to an interface with 10 Mbps of total bandwidth to perform per-address
rate limiting for the network segment 192.168.0.1 to 192.168.0.100. If the shared-bandwidth keyword is
specified for the CAR list, you can set the CIR to 10 Mbps at maximum. If the shared-bandwidth keyword
is specified for the CAR list, you can set the CIR to 100 kbps at maximum.
Examples
# Apply CAR list 1 to the outbound direction of GigabitEthernet 0/1. CAR list 1 limits the rate of each PC
on the subnet 1.1.1.0/24 to 100 kbps, and traffic of IP addresses in the subnet does not share the
remaining bandwidth.
<Sysname> system-view
[Sysname] qos carl 1 source-ip-address subnet 1.1.1.0 24 per-address
[Sysname] interface gigabitethernet 0/1
[Sysname-GigabitEthernet0/1] qos car outbound carl 1 cir 100 cbs 6250 ebs 0 green pass
red discard
# Apply CAR list 1 to the outbound direction of GigabitEthernet 0/1. CAR list 2 limits the rate of each PC
on the network segment 1.1.2.100 through 1.1.2.199 to 5 Mbps, and traffic of IP addresses in the subnet
share the remaining bandwidth.
<Sysname> system-view