Configuring Inbound Interface-based Rate Limiting
Context
If rates of traffic sent from users are not limited, continuous burst data from many users will congest the network. Inbound interface-based rate limiting controls the rate of traffic entering an interface within a specified range.
Procedure
- Run:
system-viewThe system view is displayed.
- (Optional) Run:
qos-car exclude-interframe
The system is configured not to count the inter-frame gap and preamble of packets when calculating the incoming traffic rate on an interface.
The qos-car exclude-interframe command configures the system not to count the inter-frame gap and preamble of packets when calculating the traffic rate for inbound interface-based rate limiting and traffic policing.
- Run:
interface interface-type interface-number
The interface view is displayed.
- Run:
qos lr inbound cir cir-value [ cbs cbs-value ]
Inbound interface-based rate limiting is configured.
When interface-based 802.1X authentication is configured and the RADIUS server delivers the rate limit, the interface does not support the rate limit.
When inbound interface-based rate limiting, broadcast traffic suppression in a VLAN (for details on how to configure broadcast traffic suppression in a VLAN, see Configuring Traffic Suppression in a VLAN in "Traffic Suppression and Storm Control Configuration" in the S600-E V200R010C00 Configuration Guide - Security), and inbound MQC-based traffic policing are configured simultaneously, these rules take effect in descending order of priority: inbound interface-based rate limiting > broadcast traffic suppression in a VLAN > inbound MQC-based traffic policing. For example, if both inbound interface-based rate limiting and broadcast traffic suppression in a VLAN are configured, inbound interface-based rate limiting takes effect.
If both the IPSG function and inbound interface-based rate limiting are configured on an interface, both IPSG and interface-based rate-limiting configurations take effect as long as the configurations do not conflict. Otherwise, only the IPSG configuration takes effect.
Configuration Tips
Deleting the Configuration of Inbound Interface-based rate LimitingRun the undo qos lr inbound command in the interface view to delete the configuration of inbound interface-based rate limiting configuration
Verifying the Configuration of Inbound Interface-based Rate Limiting
Run the display qos statistics command to check the rate limiting result and determine whether inbound interface-based rate limiting takes effect. Statistics about incoming packets on an interface (queried using the display interface or display this interface command) are collected before inbound interface-based rate limiting is performed on the interface. Therefore, you cannot determine whether the rate limit takes effect by comparing the number of incoming packets on an interface with the rate limit.
