Ingress Bandwidth Rate Limiter

Ingress bandwidth rate limiter functionality handles congestion, meters traffic, and takes action based on the ACL filter rules. A policer can be attached directly to an ACL ACE entry to perform flow-based rate limiting. You can configure the service rate and peak rate. All traffic that qualifies for a filter is metered. Every packet that exceeds the service rate is marked as yellow, and every packet that exceeds the peak rate is marked as red and is dropped.

The ingress flow-based policer limits the traffic rate accepted by the specified ingress port. The port drops or re-marks violating traffic. The line rate of the port is the maximum rate that can be configured.

Operation Considerations

The following section describes operational considerations for ingress bandwidth rate limiter functionality:

• If you configure ingress policer/port rate limiter and QoS port rate limiter on VSP 4900 Series, and a flow matches both of them, then green marked packets can be dropped.

• IPv4 policer statistics for red, yellow, and green packets and bytes are available on VSP 7400 Series.

• Only IPv4 policer statistics for red packets and bytes are available on VSP 4900 Series. Yellow and green packet counters are not supported on VSP 4900 Series.

• Egress port (outPort) interface is not supported.

• Policers are not supported on IPv6 ACLs.

• Supports QoS ACEs only.

• You can configure the default action policer within an ACL for permit action mode only.

• Drop action mode is not supported.

• monitor-dst-ports, monitor-dst-mlt, or monitor-isid-offset actions are supported. All traffic received is mirrored.

• The filter with policer and redirect-next-hop actions redirect only the traffic that passes the policer (if the stream is 100 Mbps, and the policer peak-rate is 50 Mbps, only 50 Mbps is redirected).

• Ingress policer/port rate limiter and QoS port rate limiter features are partially incompatible. Configuring both of these features together that can affect the same traffic can result in more traffic drop than expected. The best practices are as follows:

  • If ACL type is inPort, do not configure Qos port limiter on any of the ports that are part of ACL

  • If ACL type is inVlan, do not configure Qos port limiter on ports that are part of any VLAN in the ACL

  • If ACL type is inVsn, do not configure Qos port limiter on ports that are part of any VSN in the ACL