How to limit the rate of packets through traffic-filter

12

Configure Eth2/0/0 to filter packets based on the ACL and configure it to allow packets with the source IP address of 192.168.0.2/32.
system-view
[Huawei] acl 3000
[Huawei-acl-adv-3000] rule 5 permit ip source 192.168.0.2 0
[Huawei-acl-adv-3000] quit
[Huawei] interface ethernet 2/0/0
[Huawei-Ethernet2/0/0] traffic-filter inbound acl 3000

Other related questions:
Why does an inbound traffic policy fail to filter traffic or limit the rate of inbound packets on an S series modular switch
For S series modular switches, a traffic policy fails to filter traffic or limit the rate of packets for users matching DHCP snooping binding tables. You can run the following commands to check whether static or dynamic binding entries exist: - Run thedisplay dhcp { snooping | static } user-bind { interface interface-type interface-number | ip-address ip-address | mac-address mac-address | vlan vlan-id } * [ verbose ] command to check static or dynamic DHCP snooping binding entries on an interface. - Run the display dhcp { snooping | static } user-bind all [ verbose ] command to check static or dynamic DHCP snooping binding entries on all interfaces.

Configure the traffic-filter command to filter packets
On Eth2/0/0, you can configure packet filtering based on an ACL that permits packets with source IP address 192.168.0.2/32 as follows: system-view [Huawei] acl 3000 [Huawei-acl-adv-3000] rule 5 permit ip source 192.168.0.2 0 [Huawei-acl-adv-3000] quit [Huawei] interface ethernet 2/0/0 [Huawei-Ethernet2/0/0] traffic-filter inbound acl 3000

How to configure rate limiting based on the SAC signature database on an AR?
The SAC signature database contains thousands of application protocols. An SAC traffic classifier defines the rule for matching packets. Users configure different SAC traffic classifiers to classify packets, and limit the rate of traffic in the traffic behavior. The traffic policy then can be applied in the inbound or outbound direction on the interface.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top