基于源地址的速率限制,基于源地址的速率限制
· 基于源地址的速率限制,基于源地址的速率限制
firewall {
filter Rate-limit {
policer 10.1.0.0_2m {
if-exceeding {
bandwidth-limit 2m;
burst-size-limit 200k;
}
then discard;
}
policer 10.2.0.0_10m {
if-exceeding {
bandwidth-limit 10m;
burst-size-limit 1m;
}
then discard;
}
term 10.1.0.0 {
from {
source-address {
10.1.0.0/24;
}
}
then {
count 2m-accepted;
policer 10.1.0.0._2m;
accept;
}
term 10.2.0.0 {
from {
source-address {
10.2.0.0/24;
}
}
then {
count 10m-accepted;
policer 10.2.0.0_10m;
accept;
}
term final {
then accept;
}
}
}
