VLAN Rate limiting on Black Diamond X8
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
01-04-2017 01:20 PM
Hi community,
we have BlackDiamond X8 Firmware
Release 16.1.3.6
how best to configure rate limiting with max 5Gbps (10Gbps available) at a dedicated VLAN for Backup-Traffic ?
Would you recommend to configure "meter" plus "acl" ingress to VLAN ?
Any working examples ?
Could something like this work fine:
create meter Backup-limit
configure meter Backup-limit committed-rate 5 Gbps out-actions drop
create access-list BackupTraffic-ACL "" "meter Backup-limit" (with "" all incoming traffic matches)
configure access-list add BackupTraffic-ACL vlan Backup-VLAN ingress
Thank you.
we have BlackDiamond X8 Firmware
Release 16.1.3.6
how best to configure rate limiting with max 5Gbps (10Gbps available) at a dedicated VLAN for Backup-Traffic ?
Would you recommend to configure "meter" plus "acl" ingress to VLAN ?
Any working examples ?
Could something like this work fine:
create meter Backup-limit
configure meter Backup-limit committed-rate 5 Gbps out-actions drop
create access-list BackupTraffic-ACL "" "meter Backup-limit" (with "" all incoming traffic matches)
configure access-list add BackupTraffic-ACL vlan Backup-VLAN ingress
Thank you.
4 REPLIES 4
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
01-16-2017 04:28 AM
Hi Marcus,
Please find below working example to configure rate limiting,
1. Create meter “create meter”
2. Configure meter
3. Create policy-file
4. Bind the policy file on each port for which you wish to configure limiting.
* X440G2-48t-10G4.1 # create meter testmeter
* X440G2-48t-10G4.2 # configure meter "testmeter" committed-rate 5 Gbps out-actions drop
* X440G2-48t-10G4.3 # vi testratelimit.pol
egrep: testratelimit.pol: No such file or directory
entry Rareingress {
if {
source-address x.x.x.x/x;
}
then {
meter testmeter;
}
}
X440G2-48t-10G4.4 # check policy testratelimit
Policy file check successful.
* X440G2-48t-10G4.5 # configure access-list testratelimit ports 1 ingress
done!
Please find below working example to configure rate limiting,
1. Create meter “create meter
2. Configure meter
3. Create policy-file
4. Bind the policy file on each port for which you wish to configure limiting.
* X440G2-48t-10G4.1 # create meter testmeter
* X440G2-48t-10G4.2 # configure meter "testmeter" committed-rate 5 Gbps out-actions drop
* X440G2-48t-10G4.3 # vi testratelimit.pol
egrep: testratelimit.pol: No such file or directory
entry Rareingress {
if {
source-address x.x.x.x/x;
}
then {
meter testmeter;
}
}
X440G2-48t-10G4.4 # check policy testratelimit
Policy file check successful.
* X440G2-48t-10G4.5 # configure access-list testratelimit ports 1 ingress
done!
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
01-08-2017 12:39 AM
i totally agree with Roy here applying this on egress buffer rather than on ingress one... Because as far as i am concerned this functionality Is not available in EXOS for ingress limiting. For example, if any incoming packet coming on any physical port or VLAN is larger than any particular size say 500 bytes then it should be dropped on ingress port/VLAN. Hence it might not be possible to rate-limit on ingress port/VLAN based on the packet size.
The below article clearly says the above concept. Please refer the same for more information:
https://gtacknowledge.extremenetworks.com/articles/Q_A/Packet-size-limit-on-VLAN-or-port/
The below article clearly says the above concept. Please refer the same for more information:
https://gtacknowledge.extremenetworks.com/articles/Q_A/Packet-size-limit-on-VLAN-or-port/
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
01-06-2017 01:52 AM
Hi Marcus,
Your configuration is correct as Naresh said.
But you should make sure that match condition only contains backup traffic or management traffic(stp, eaps, ospf...) could be also dropped in congestion state.
I don't know if you can do but I would rather choose rate-limiting on egress port so the switch uses egress buffer.
With egress buffer, management traffic in QP8 could be delivered without being dropped in congestion state.
Your configuration is correct as Naresh said.
But you should make sure that match condition only contains backup traffic or management traffic(stp, eaps, ospf...) could be also dropped in congestion state.
I don't know if you can do but I would rather choose rate-limiting on egress port so the switch uses egress buffer.
With egress buffer, management traffic in QP8 could be delivered without being dropped in congestion state.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
01-05-2017 05:55 AM
Hi Marcus,
The configuration that you have provided to configure rate-limit is correct.
The configuration that you have provided to configure rate-limit is correct.
