TABLE 15 CPU rate limits for packet type
Packet type
Rate limit in packets per second
ARP
6000
IP TTL exceed
150
Reverse path check failed
IP MTU failed
3000
IP tunnel-terminated packets which are fragmented or has options
IP tunnel-terminated packets with unsupported GRE tunnel header
IP Unicast packets mirrored to CPU due to ICMP redirect
100
Bridge packets forward to CPU
5000
Rate limiting broadcast, unknown unicast, and multicast traffic
Ruckus ICX devices can forward all flooded traffic at wire speed within a VLAN. However, some third party networking devices cannot
handle high rates of broadcast, unknown unicast, and multicast (BUM) traffic.
If high rates of traffic are being received by the device on a given port of that VLAN, you can limit the number of BUM packets or bytes
received each second on that port. This can help to control the number of such packets or bytes that are flooded on the VLAN to other
devices.
Ruckus ICX devices support byte-based and packet-based rate limiting.
Traffic policy ACL-based rate limiting
Traffic policies for ACL-based rate limit configuration notes
Traffic policies are rules that define rate limits on packets permitted by ACLs. As traffic policies apply rate limits on specific interfaces using
ACLs, this method is also called ACL-based rate limiting.
The process for applying a traffic policy to an interface involves:
1. Creating a traffic policy
2. Adding a reference to the traffic policy in an ACL entry
3. Binding the ACL associated with this ACL entry to an interface
Traffic policies consist of policy names and policy definitions::
•
Traffic policy name—A string of up to eight alphanumeric characters that identifies individual traffic policy definitions.
•
Traffic policy definition (TPD)—The command filter associated with a traffic policy name. A TPD can define any one of the following:
–
Rate limiting policy
–
ACL counting policy
–
Combined rate limiting and ACL counting policy
ACL-based rate limiting using traffic policies
ACL-based rate limiting provides the facility to limit the rate for IP traffic that matches the permit conditions in extended IP ACLs. This
feature is available in the Layer 2 and Layer 3 code.
To configure ACL-based rate limiting, you create individual traffic policies , and then reference the traffic policies in one or more ACL entries
(also called clauses or statements). The traffic policies become effective on ports to which the ACLs are bound.
Rate Limiting and Rate Shaping
Rate Limiting
Ruckus FastIron QoS and Traffic Management Configuration Guide, 08.0.70
Part Number: 53-1005294-01
53
