How to limit the IP speed of Huawei core switches

Huawei core switches can limit IP speed using interface-based rate limiting, ACL-based traffic policing, or by manually setting interface speeds.

1. Interface-Based Rate Limiting

Interface-based rate limiting controls the bandwidth of all packets on a specific interface, either inbound, outbound, or both. This method is simple and effective for limiting traffic per port or department. To configure:

• Enter system view and interface view.
• Enable rate limiting and set the committed information rate (CIR) for inbound and outbound traffic.
• Example: Limit outbound traffic on GE0/0/1 to 8 Mbit/s for one department and 5 Mbit/s for another . This method applies to all traffic on the interface regardless of packet type.

2. ACL-Based Traffic Policing

Traffic policing allows more granular control by limiting traffic based on IP addresses, VLANs, or services:

• Create VLANs and assign interfaces to them.
• Configure ACLs to match specific IP addresses, VLAN IDs, or service types.
• Apply traffic policing to the ACL to enforce bandwidth limits.
• Example: Limit VLAN 20 Internet access to 2–4 Mbit/s, discarding traffic exceeding 4 Mbit/s . This approach is useful when different services or departments require different bandwidth allocations.

3. Configuring Interface Speed

For physical interfaces, you can manually set the interface speed to limit maximum throughput:

• Disable auto-negotiation using undo negotiation auto.
• Set the interface speed with the speed command.
• Ensure both ends of the link are configured with the same speed.
• Example: MultiGE interfaces on S6720 series can be set up to 10 Gbit/s, while FE interfaces have lower limits . This method is suitable for controlling the maximum link capacity rather than per-IP or per-service traffic.

4. Verification

After configuration, verify the settings:

• Use display interface [interface-type interface-number] to check interface status and speed.
• Use traffic monitoring commands to ensure rate limiting is effective.

Summary

• Interface-based rate limiting: Simple, per-port bandwidth control.
• ACL-based traffic policing: Granular control by IP, VLAN, or service.
• Manual interface speed: Limits maximum link throughput. Combining these methods allows Huawei core switches to efficiently manage network bandwidth and prevent congestion.