ERS/VOSS - Is it possible to rate-limit on port/VLAN based on the number of unicast packets ?

[EF]

Hi team!!

In order to protect an special device (IoT) we want limit the number of unicast packets delivered by one  port (maybe in VLAN would be usefull if in port is not possible).

I see that ERS/VSP has rate limit for broadcast and multicast traffic but not unicast.

Is there any way or technic to achieve this?

Thanks a lot!!

EF

[Jamestibbets · Accepted solution]

---

@EF wrote:

Hi team!!

In order to protect an special device (IoT) we want limit the number of unicast packets delivered by one  port (maybe in VLAN would be usefull if in port is not possible).

I see that ERS/VSP has rate limit for broadcast and multicast traffic but not unicast.   MyAccountAccess

Is there any way or technic to achieve this?

Thanks a lot!!

EF

---

Hello,

In ERS/VSP switches, rate limiting based on the number of unicast packets is not a built-in feature. The rate limiting capabilities in these switches typically focus on broadcast and multicast traffic.

However, there are alternative approaches you can consider to achieve your goal of limiting the number of unicast packets delivered by a specific port or VLAN:

Traffic policing: You can use traffic policing to limit the overall bandwidth usage of a port or VLAN. While this won't directly limit the number of unicast packets, it can effectively restrict the amount of traffic that can be transmitted, which indirectly limits the number of packets.

VLAN-based filtering: If you want to limit unicast packets within a specific VLAN, you can consider using VLAN-based filtering techniques. For example, you can configure a VLAN access control list (VACL) to drop or rate limit specific types of unicast traffic within the VLAN.

Access control lists (ACLs): You can apply ACLs to specific ports or VLAN interfaces to control the traffic flow. By defining rules in the ACL, you can permit or deny specific types of unicast packets based on various criteria such as source/destination IP address, source/destination port, etc. You can also set rate limits within the ACL to control the rate of specific unicast traffic.