Configuration Considerations for VLAN-based
Rate Limiting
VLAN-based rate limiting is applicable for
ingress traffic only. Egress traffic is blocked by the SLX-OS device.
There is one policer per ACL, which applies to all
the rules for that ACL.
One thousand and twenty four (1,024) TCAM entries are
shared between VLAN rate limiting and DAI features on a first-come, first serve
basis.
Packets drops caused by any action other than ACL
rate limiting are included in policing counters.
Only a permit clause in an ACL rule is subject to rate limit traffic calculations. A deny clause does not result in a policing action.
Metering is performed at Layer 1 on the packet size as received on the wire (including IPG, Preamble and SOF, ignoring FCS/CRC).
A policy map can be applied to a physical port, a LAG
interface, and a system.
Multiple class maps with user ACLs can be added in a
policy map. However, when a matching ACL clause is found, the device does not
evaluate subsequent ACL clauses and rate limits those ACLs.
A configured rate in bps is rounded up to the next
achievable rate.
The device does not support the specifying of actions to perform on traffic with a color-class priority, such as having packet DSCP priority, traffic class (internal queue assignment), or traffic class (internal queue assignment) set to specific values.
Statistics display only two colors. Conform includes
Green and Yellow packets. Violated includes dropped or a RED packet.
You cannot delete a policy map that is active on the
interface.
You cannot delete a class map from a policy map when the policy map is active on the interface.
( SLX 9640 and SLX 9540 only) Configure CIR and EIR in multiples of 22
kbps. If the value is below 22 kbps, then 22 kbps is programmed in the device.
If a police map is applied to an interface and no
policer attributes are present in that policy map, then ingress and egress packets
on that interface are marked as green (conforming).
If you do not configure EIR, then the Single-rate
Three Color scheme (SrTCM) is applied.
You must configure rate limit threshold values on an interface based on interface speed.
No validation is performed for user-configured values against interface speed.
A policy map cannot be bound to an interface if a
class map is not associated with that policy map.
( SLX 9640 and SLX 9540 only) VLAN rate limiting does not work for VLANs
that are carried inside a pseudowire (PW) tunnel.