Brocade Communications Systems Brocade ICX 6650 6650 Manual De Usuario

Descargar
Página de 332
Brocade ICX 6650 Security Configuration Guide
141
53-1002601-01
Chapter
5
ACL-based Rate Limiting
 lists the ACL-based rate limiting features supported on Brocade ICX 6650. These features 
are supported in the Layer 2, edge Layer 3, and full Layer 3 software images, except where 
explicitly noted.
 
ACL-based rate limiting overview
ACL-based rate limiting is a method for restricting inbound IP traffic that was permitted by extended 
IP ACLs, to administrator-configured rates. ACL-based rate limiting is available in the Layer 2 and 
Layer 3 images.
ACL-based rate limiting is defined using traffic policies. To configure ACL-based rate limiting, you 
create a traffic policy, reference the traffic policy in one or more ACL entries, and bind the ACL to an 
interface or port. The traffic policies become effective on ports to which the ACL is bound.
You can configure ACL-based rate limiting on the following interface types:
Physical Ethernet interfaces
Virtual interfaces
Trunk ports
Specific VLAN members on a port
A subset of ports on a virtual interface
Types of ACL-based rate limiting
ACL-based rate limiting is of two types:
Fixed rate limiting – Enforces a strict bandwidth limit. Traffic that exceeds the configured rate 
limit is either dropped or forwarded at the lowest priority level, depending on the action 
specified in the traffic policy. To configure fixed rate limiting, refer to 
TABLE 19
Supported ACL-based rate limiting features
Feature
Brocade ICX 6650
Traffic policies
Yes
ACL-based fixed rate limiting
Yes
ACL-based adaptive rate limiting
Yes
802.1p priority bit inspection in the ACL 
for adaptive rate limiting
Yes
ACL statistics
Yes