H3C H3C S3600 Series, Command Manual, Page: 772 / 1277

1-23
Parameters
inbound : Imposes traffic limit on the packets received through the interface.
acl-rule : ACL rules to be applied for traffic classification. This argument can be the combination of
multiple ACLs. For more information about this argument, refer to Table 1-4 and Table 1-5 . Note that the
ACL rules referenced must be those defined with the permit keyword.
union-effect : Specifies that all the ACL rules, including those identified by the acl-rule argument in this
command and those applied previously, are valid. If this keyword is not specified, traffic policing issues
both the rate limiting action and the permit action at the same time, that is, traffic policing permits the
conforming traffic to pass through. If this keyword is specified, traffic policing issues only the rate limiting
action but not the permit action. In this case, if a packet matches both an ACL rule specified in the
traffic-limit command and another previously applied ACL rule with the deny keyword specified, the
packet will be dropped.
On Ethernet 1/0/1, assume that the filter command is configured to filter packets destined to IP address
2.2.2.2 and the traffic-limit command is configured to limit the rate of packets sourced from IP address
1.1.1.1 within 128 kbps. Whether packets conforming to the rate limit of 128 kbps, sourced from IP
address 1.1.1.1, and destined to IP address 2.2.2.2 (referred to as packets A later) will be dropped
depends on the union-effect keyword of the traffic-limit command.
z
If the union-effect keyword is not specified, the traffic-limit command issues both the rate limiting
action and the permit action. Whether packets A can pass through depends on the configuration
order of the filter command and the traffic-limit command. If the traffic-limit command is
configured after the filter command is configured, packets A can pass through; otherwise, packets
A are dropped.
z
If the union-effect keyword is specified, the traffic-limit command issues only the rate limiting
action. Whether packets A can pass through depends on the filter command. As for this example,
packets A are dropped.
egress-port interface-type interface-number : Enables traffic policing for the outbound packets of the
port identified by interface-type interface-number . The interface-type interface-number argument refers
to the port type and port number. If you specify this keyword-argument combination, this command
applies to the outbound unicast packets that pass the port and match the ACL rules.