Configuring Port Rate Limit on AOS-S Switches

Rate limiting allows allocating a specific bandwidth for the incoming and outgoing traffic from each port. When traffic exceeds the configured limit, it is dropped. This effectively sets a usage level on a given port and is a tool for enforcing maximum service level commitments granted to network users. This feature operates on a per-port level and is not configurable on port trunks. Rate-limiting is designed to be applied at the network edge to limit traffic from non-critical users or to enforce service agreements such as those offered by Internet Service Providers (ISPs) to provide only the bandwidth for which a customer has paid.

Port rate limit is always disabled by default on AOS-S switches. To configure port rate limit for switches provisioned in the UI groups:

1. In the WebUI, select one of the following options:
   • To select a switch group in the filter:
     1. Set the filter to a group containing at least one switch.
        

        The dashboard context for the group is displayed.

     2. Under Manage, click Devices > Switches.
     3. Click the AOS-S or Config icon to view the switch configuration dashboard.
   • To select a switch in the filter:
     1. Set the filter to Global or a group containing at least one switch.
     2. Under Manage, click Devices > Switches.
        

        A list of switches is displayed in the List view.

     3. Click a switch under Device Name.
        

        The dashboard context for the switch is displayed.

     4. Under Manage, click Device.
        

        The tabs to configure the switch is displayed.

2. Click Security > Port Rate Limit. The Port Rate Limit page is displayed.
3. Under Port Rate Limit, select the port or ports you want to modify and click Edit.
4. Set the value of Limit to Traffic by Category if you prefer to set individual limitations.
   Else, set the value of Limit to All Traffic to set a collective limitation.

   Percentage limits are based on link speed. For example, if a 100 Mbps port negotiates a link at 100 Mbps and the inbound rate-limit is configured at 50%, then the traffic flow through that port is limited to no more than 50 Mbps. Similarly, if the same port negotiates a 10 Mbps link, then it allows no more than 5 Mbps of inbound traffic. Configuring a rate limit of 0 (zero) on a port blocks all traffic on that port. However, if this is the desired behavior on the port, disable the port instead of configuring a rate limit of 0.

   1. If you select All Traffic, rate limit is placed on all packets received from unknown sources. Move the slider to Enable and then enter the values for IN and OUT in percentage values.
   2. If you select Traffic by Category, refer to the following table to set the correct parameters.

   Table 1: Traffic by Category Parameters

   Name	Description	Value
   Broadcast	Sets a rate limit on broadcast traffic.	Expressed as percentage of the total bandwidth.
   Multicast	Indicates the operational status of the port.
   Unknown Unicast	Indicates the mode of operation. The port can be configured to function in Trunk or Access mode.
   ICMP	Sets a rate limit on ICMP Internet Control Message Protocol. ICMP is an error reporting protocol. It is used by network devices such as routers, to send error messages and operational information to the source IP address when network problems prevent delivery of IP packets. traffic.