
Port Traffic Controls
All-Traffic Rate-Limiting for the 5300xl, 3400cl and 6400cl Switches
5300xl Switch
5300xl Switch
5300xl Switch Router
Server
Backup Server
Dormitory 1
Dormitory 2
Dormitory 3
Dormitory 4
Administration
Building
Classroom
Classroom
WAN
LAN
ICMP Rate-Limit
at 1%
ICMP Rate-Limit
at 1%
ICMP Rate-Limit
at 5%
Figure 14-3. Example of ICMP Rate-Limiting
ICMP Rate-Limiting Operation. ICMP rate-limiting operates on an inter-
face (per-port or per-trunk) basis to allow, on average, the highest expected
amount of legitimate, inbound ICMP traffic. For example, if a 100 Mbps port
negotiates a link to another switch at 100 Mbps and is ICMP rate-limit config-
ured at 5%, then the inbound ICMP traffic flow through that port is limited to
5 Mbps. Similarly, if the same port negotiates a 10 Mbps link, then it allows 0.5
Mbps of inbound traffic. (For more on performance under varying operating
conditions, refer to “Operating Notes for ICMP Rate-Limiting” on page 14-17.)
If an interface experiences an inbound flow of ICMP traffic in excess of its
configured limit, the switch generates a log message and an SNMP trap (if an
SNMP trap receiver is configured).
Applying ICMP Rate-Limiting to a Port Trunk. These rules apply to
ICMP rate-limiting when applied to a trunk:
■ The configured ICMP traffic limit is applied as a percentage of all traffic
inbound on the trunk.
■ ICMP rate-limiting is only supported on a port trunk where all members
of the trunk are in the same module slot. ICMP rate-limiting is not
supported on trunks having members in multiple module slots.
14-12
Comentários a estes Manuais