Brocade Communications Systems 6650 Switch User Manual


 
144 Brocade ICX 6650 Security Configuration Guide
53-1002601-01
Configuring adaptive rate limiting
Syntax: [no] traffic-policy TPD-name rate-limit fixed cir-value exceed-action action [count]
Syntax: access-list num permit | deny.... traffic policy TPD-name
Syntax: [no] ip access-group num in
NOTE
For brevity, the access-list command does not include all parameters.
ATTENTION
Brocade ICX 6650 allows you to add a reference to a non-existent TPD in an ACL statement and to
bind that ACL to an interface. Brocade ICX 6650 does not issue a warning or an error message for
non-existent TPDs.
Use the no form of the command to delete a traffic policy definition. Note that you cannot delete a
traffic policy definition if it is currently in use on a port. To delete a traffic policy, first unbind the
associated ACL.
The traffic-policy TPD-name parameter is the name of the traffic policy definition. This value can be
eight or fewer alphanumeric characters.
The rate-limit fixed cir-value parameter enforces a strict bandwidth.The cir-value variable is the
committed information rate in packets per second. This value can be from 125 through
15,000,000 packets per second.
The exceed-action action parameter specifies what happens to packets that exceed the configured
committed information rate (CIR) value. Refer to “Handling packets that exceed the rate limit” on
page 147.
The count parameter is optional and enables ACL counting. Refer to “Enabling and using ACL
statistics” on page 148.
Configuring adaptive rate limiting
Adaptive rate limiting enforces a flexible bandwidth limit. The port forwards traffic that is within the
limit. If the port receives more than the specified number of fragments in a one-second interval, the
device either drops or forwards subsequent fragments in hardware, depending on the exceed
action you specify.
NOTE
For information on related traffic policy features and limitations, see “Configuration notes for traffic
policies” on page 143.
Table 20 lists the configurable parameters for ACL-based adaptive rate limiting.