set firewall policer if-exceeding rate-limit

The set firewall policer if-exceeding rate-limit command configures the rate limit value for a policer.

NOTE:

It is NOT recommended to use the rate limit value for CPU queue due to hardware restrictions.

Command Syntax

set firewall policer <policer-name> if-exceeding rate-limit <value>

Parameters

Parameter

Description

policer <policer-name>

Specifies the policer name. The value is a string.

rate-limit <value>

Specifies the rate limit value of a policer. The data rate unit is set by set firewall policer if-exceeding count-mode command.

When the count mode is packet, the range of rate-limit is from 1 to 1000 pps.
When the count mode is kbit, the range of rate-limit is from 0 to 100000000 kbit/s.

Example

The following example configures rate limiting for the p1 policer to 100 pps (packets per second):

admin@Xorplus# set firewall policer p1 if-exceeding count-mode packet
admin@Xorplus# set firewall policer p1 if-exceeding rate-limit 100
admin@Xorplus# run show policer
Policer     rate limit   burst limit   count mode   action  
------------   ----------   ----------    ----------   ----------
p1        100       0         packet      discard