Rate-limit

[eyeV]

Hi everybody.
I have two Summit x670 (15.4.1.3) switches and I'd like to limit inbound broadcast, multicast and unknown unicast packets on specific ports. So, I've configured rate-limit to 500pps.

config port 3 rate-limit flood broadcast 500
config port 3 rate-limit flood multicast 500
config port 3 rate-limit flood unknown-destmac 500Then I see the output of "show ports 3 stat" command. I see only 10-20 pps, but Flood Rate Exceeded counter is increasing and I have log messages like
Flood Rate Limiting activated on Port 3

[eyeV]

Ok. Thanks.

[PARTHIBAN_CHINN]

It could be but I would always do the maximum troubleshooting i can do and then reach out to TAC for confirmation.

[eyeV]

Thanks. CPU utilization in normal state. I'm going to capture traffic on this interface.

Could it be the bug in XOS or something? I found this topic here https://community.extremenetworks.com/extreme/topics/problem_with_rate_limit_on_summit_x650-l8ftu

[PARTHIBAN_CHINN]

These outputs doesnt justify there is an issue.
Next steps would be to take a packet capture on the ingress.
You can do it by yourself by port mirroring or.
if you reachout to TAC they can do TCPdump ---which needs debug password to get into debug mode.

could you also check the cpu utilisation.
is any specific process is high ex.bcmrx?

[eyeV]

This is the counter from acl

Policy Name Vlan Name Port Direction
Counter Name Packet Count Byte Count
==================================================================
bcast-counter * 2 ingress
bcast-pkt 43

* xCore1.49 # sh access-list counter
Policy Name Vlan Name Port Direction
Counter Name Packet Count Byte Count
==================================================================
bcast-counter * 2 ingress
bcast-pkt 43

* xCore1.49 # sh access-list counter
Policy Name Vlan Name Port Direction
Counter Name Packet Count Byte Count
==================================================================
bcast-counter * 2 ingress
bcast-pkt 50

* xCore1.49 # sh access-list counter
Policy Name Vlan Name Port Direction
Counter Name Packet Count Byte Count
==================================================================
bcast-counter * 2 ingress
bcast-pkt 62

* xCore1.49 # sh access-list counter
Policy Name Vlan Name Port Direction
Counter Name Packet Count Byte Count
==================================================================
bcast-counter * 2 ingress
bcast-pkt 69

* xCore1.49 # sh access-list counter
Policy Name Vlan Name Port Direction
Counter Name Packet Count Byte Count
==================================================================
bcast-counter * 2 ingress
bcast-pkt 70

* xCore1.49 # sh access-list counter
Policy Name Vlan Name Port Direction
Counter Name Packet Count Byte Count
==================================================================
bcast-counter * 2 ingress
bcast-pkt 83

I've run this command with 1 sec interval.