![background image](http://html.mh-extra.com/html/foundry-networks/switch-and-router/switch-and-router_installation-and-configuration-manual_2324275435.webp)
IronClad Rate Limiting
December 2000
14 - 15
NOTE:
To characterize the traffic, configure ACLs. You can use ACLs for rate policy rules applied to IP
interfaces or to virtual interfaces, but not for rate policy rules applied directly to port-based VLANs. When you
apply a rate policy rule to a port-based VLAN, the policy applies to all IP traffic.
•
Specify how much bandwidth you want to allow the traffic for normal service, and whether you want the
device to change the precedence for the traffic before forwarding it.
•
For bandwidth above the normal service, specify the action you want the device to take. For example, you
can configure the device to drop all traffic that exceeds the normal bandwidth allocation, or change the
traffic’s precedence or Diffserv control point, and so on.
•
Apply the traffic characterization, the bandwidth limits, and the actions to incoming or outgoing traffic on a
specific IP interface, virtual interface, or port-based VLAN.
Characterizing the Traffic
You can use the following types of ACLs to characterize traffic. When you configure a rate policy rule on an
interface, you can refer to the ACLs. In this case, the rate policy rule applies to the traffic that matches the ACLs.
•
Standard IP ACL – Matches packets based on source IP address.
•
Extended IP ACL – Matches packets based on source and destination IP address and also based on IP
protocol information. If you specify the TCP or UDP IP protocol, you also match packets based on source or
destination TCP or UDP application port.
•
Rate limit ACL – Matches packets based on source MAC address, IP precedence or Diffserv control points, or
a set of IP precedence values.
You can configure a rate policy rule without using an ACL. In this case, the rule applies to all types of IP traffic. In
fact, you cannot use ACLs in a rate policy rule you apply to a port-based VLAN. A rate policy rule you apply to a
port-based VLAN applies to all types of IP traffic.
To configure the ACLs used by the rate policy in Figure 14.2 on page 14-6, enter the following commands:
NetIron(config)# access-list 101 permit tcp any any eq http
NetIron(config)# access-list 102 permit tcp any any eq ftp
NetIron(config)# access-list 103 permit udp any any eq dns
These ACLs match on all IP packets whose TCP application port is HTTP, FTP, or DNS.
To configure the rate limit ACL used in Figure 14.3 on page 14-8, enter the following command:
NetIron(config)# access-list rate-limit 100 aaaa.bbbb.cccc
The configuration in Figure 14.4 on page 14-9 applies a rate policy rule directly to a port-based VLAN and does
not use ACLs.
Here is the syntax for standard ACLs.
Syntax:
[no] access-list <num> deny | permit <source-ip> | <hostname> <wildcard> [log]
or
Syntax:
[no] access-list <num> deny | permit <source-ip>/<mask-bits> | <hostname> [log]
Syntax:
[no] access-list <num> deny | permit host <source-ip> | <hostname> [log]
Syntax:
[no] access-list <num> deny | permit any [log]
NOTE:
The
deny
option is not applicable to rate limiting. Always specify
permit
when configuring an ACL for
use in a rate limiting rule.
Here is the syntax for extended ACLs.
Syntax:
access-list <num> deny | permit <ip-protocol> <source-ip> | <hostname> <wildcard> [<operator>
<source-tcp/udp-port>] <destination-ip> | <hostname> <wildcard> [<operator> <destination-tcp/udp-port>]
[precedence <num> | <num>] [tos <name> | <num>] [log]
Summary of Contents for Switch and Router
Page 2: ...December 2000 Copyright 2000 by Foundry Networks Inc ...
Page 26: ...Foundry Switch and Router Installation and Configuration Guide xxvi December 2000 ...
Page 64: ...Foundry Switch and Router Installation and Configuration Guide 2 34 December 2000 ...
Page 162: ...Foundry Switch and Router Installation and Configuration Guide 5 38 December 2000 ...
Page 196: ...Foundry Switch and Router Installation and Configuration Guide 6 34 December 2000 ...
Page 208: ...Foundry Switch and Router Installation and Configuration Guide 7 12 December 2000 ...
Page 236: ...Foundry Switch and Router Installation and Configuration Guide 8 28 December 2000 ...
Page 258: ...Foundry Switch and Router Installation and Configuration Guide 9 22 December 2000 ...
Page 420: ...Foundry Switch and Router Installation and Configuration Guide 13 32 December 2000 ...
Page 442: ...Foundry Switch and Router Installation and Configuration Guide 14 22 December 2000 ...
Page 554: ...Foundry Switch and Router Installation and Configuration Guide 15 112 December 2000 ...
Page 574: ...Foundry Switch and Router Installation and Configuration Guide 16 20 December 2000 ...
Page 626: ...Foundry Switch and Router Installation and Configuration Guide 17 52 December 2000 ...
Page 682: ...Foundry Switch and Router Installation and Configuration Guide 18 56 December 2000 ...
Page 826: ...Foundry Switch and Router Installation and Configuration Guide 20 20 December 2000 ...
Page 994: ...Foundry Switch and Router Installation and Configuration Guide 26 10 December 2000 ...
Page 1004: ...Foundry Switch and Router Installation and Configuration Guide B 6 December 2000 ...
Page 1044: ...Foundry Switch and Router Installation and Configuration Guide C 40 December 2000 ...
Page 1048: ...Foundry Switch and Router Installation and Configuration Guide D 4 December 2000 ...
Page 1070: ...Foundry Switch and Router Installation and Configuration Guide Index 18 December 2000 ...