1-17[Sysname-acl-basic-2000] rule permit source 10.1.1.0 0.0.0.255[Sysname-acl-basic-2000] quit[Sysname] interface GigabitEthernet1/0/1[Sysname-GigabitEthernet1/0/1] traffic-priority inbound ip-group 2000 dscp 562) Method II system-view[Sysname] acl number 2000[Sysname-acl-basic-2000] rule permit source 10.1.1.0 0.0.0.255[Sysname-acl-basic-2000] quit[Sysname] traffic-priority vlan 2 inbound ip-group 2000 dscp 56Configuring Traffic PolicingRefer to section Traffic Policing for information about traffic policing.Configuration prerequisitesz The ACL rules used for traffic classification have been defined. Refer to the ACLmodule of this manual for information about defining ACL rules.z The rate limit for traffic policing, and the actions for the packets exceeding the rate limithave been determined.z The ports that need this configuration have been determined.Configuration procedureFollow these steps to configure traffic policing:To do… Use the command… RemarksEnter system view system-view —Enter Ethernet port view interface interface-typeinterface-number —Configure traffic policingtraffic-limit inbound acl-rule[ union-effect ] target-rate[ burst-bucketburst-bucket-size ] [ exceedaction ]RequiredSpecify a committed informationrate (CIR) for the target-rateargument, and specify acommitted bust size (CBS) for theburst-bucket-size argument.By default, traffic policing isdisabled.The granularity of traffic policing is 64 Kbps. If the number you input is in the range of N*64to (N+1)*64 (N is a natural number), it will be rounded off to (N+1)*64.Configuration example# Assume GigabitEthernet 1/0/1 of the switch is connected to the 10.1.1.0/24 networksegment. Perform traffic policing on the packets from the 10.1.1.0/24 network segment,setting the rate to 128 kbps. Mark the DSCP precedence as 56 for the inbound packetsexceeding the rate limit. system-view
