System information

Note for Rate-
Limiting on Series
3400cl and 6400cl
Switches
Port Traffic Controls
All-Traffic Rate-Limiting for the 5300xl, 3400cl and 6400cl Switches
Under network stress conditions, a port may allow occasional bursts of
inbound traffic forwarding that exceed the port’s configured rate. For this
reason, rate-limiting should not be employed as a security feature.
Rate-Limiting Operation
Rate-Limiting operates on a per-port basis to allow only the specified percent-
age of the port’s bandwidth to be used for inbound traffic. For example, if a
100 Mbps port negotiates a link at 100 Mbps and is rate-limit configured at 50%,
then the inbound traffic flow through that port is limited to no more than 50
Mbps. Similarly, if the same port negotiates a 10 Mbps link, then it allows no
more than 5 Mbps of inbound traffic.
Configuring rate-limiting on a 3400cl or 6400cl switch port consumes one per-
port rule and one per-port QoS mask. This affects the resources available for
configuring QoS and ACLs. If you plan to configure QoS and/or ACLs on a
3400cl or 6400cl switch, refer to the chapters on these topics in the Advanced
Traffic Management Guide for your switch.
Configuring Inbound Rate-Limiting
This command controls inbound usage of a port by setting a limit on the
bandwidth available for inbound traffic. Beginning with software release
E.10.02, the syntax of the rate-limiting command has changed to accommo-
date the new ICMP rate-limiting feature available. Refer to “ICMP Rate-
Limiting” on page 14-10.
Syntax: [no] int < port- list > rate-limit < all | icmp >< 0..100 >
Configures an inbound traffic rate limit (on non-trunked
ports) as a percentage of the bandwidth available on the link.
You can configure a rate limit from either the global
configuration level (as shown above) or from the port context
level. The "no" form of the command disables rate-limiting on
the specified ports. (Default: Disabled.)
Notes:
– Rate-Limiting applies only to non-trunked ports (and is
not recommended for meshed ports).
– Configuring a rate limit of 0 (zero) on a port blocks all
inbound traffic on that port. However, if this is the de-
sired behavior for the port, ProCurve recommends that
you use < port-list > disable to disable the port instead of
configuring a rate limit of 0.
14-5