Storm Control

This scenario shows how to configure a bridge interface and enable offloading to perform storm-control in the hardware switch.

../../../../_images/stormcontrol.svg

Test Storm-Control

Description

In these scenarios, the storm-control feature is configured to rate-limit different kinds of traffic generated below and above the limit rate.

Scenario

Example 1

Step 1: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.1.2/24
set interfaces ethernet eth2 traffic policy link-in LOGGER
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set traffic policy LOGGER rule 1 selector ACL
set traffic selector ACL rule 1 destination address 192.168.1.255

Step 2: Set the following configuration in DUT0 :

set interfaces bridge br0 address 192.168.1.1/24
set interfaces bridge br0 hardware-offload eth0
set interfaces ethernet eth0p0 bridge-group bridge br0
set interfaces ethernet eth0p0 bridge-group storm-control 1 burst 100ms
set interfaces ethernet eth0p0 bridge-group storm-control 1 protocol broadcast
set interfaces ethernet eth0p0 bridge-group storm-control 1 rate 1
set interfaces ethernet eth0p4 bridge-group bridge br0
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Ping the IP address 192.168.1.1 from DUT1:

admin@DUT1$ ping 192.168.1.1 count 1 size 56 timeout 1
Show output
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=0.563 ms

--- 192.168.1.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.563/0.563/0.563/0.000 ms

Note

Generate 40 Mbps of broadcast traffic against a 1 Mbps rate-limit and measure how much is actually received at the destination.

Step 4: Run the command traffic selector show on DUT1 and expect the following output:

Show output
Selector ACL (Policy LOGGER -- ifc eth2 -- hook link-in prio very-high -- rule 1)

-----------------------------------------------------
rule   pkts match  pkts eval  bytes match  bytes eval
-----------------------------------------------------
1              74         76        74444       74574
-----------------------------------------------------
Total          74         76        74444       74574

Example 2

Step 1: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.1.2/24
set interfaces ethernet eth2 traffic policy link-in LOGGER
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set traffic policy LOGGER rule 1 selector ACL
set traffic selector ACL rule 1 destination address 192.168.1.255

Step 2: Set the following configuration in DUT0 :

set interfaces bridge br0 address 192.168.1.1/24
set interfaces bridge br0 hardware-offload eth0
set interfaces ethernet eth0p0 bridge-group bridge br0
set interfaces ethernet eth0p0 bridge-group storm-control 1 burst 100ms
set interfaces ethernet eth0p0 bridge-group storm-control 1 protocol broadcast
set interfaces ethernet eth0p0 bridge-group storm-control 1 rate 5
set interfaces ethernet eth0p4 bridge-group bridge br0
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Ping the IP address 192.168.1.1 from DUT1:

admin@DUT1$ ping 192.168.1.1 count 1 size 56 timeout 1
Show output
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=1.04 ms

--- 192.168.1.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 1.037/1.037/1.037/0.000 ms

Note

Generate 40 Mbps of broadcast traffic against a 5 Mbps rate-limit and measure how much is actually received at the destination.

Step 4: Run the command traffic selector show on DUT1 and expect the following output:

Show output
Selector ACL (Policy LOGGER -- ifc eth2 -- hook link-in prio very-high -- rule 1)

-----------------------------------------------------
rule   pkts match  pkts eval  bytes match  bytes eval
-----------------------------------------------------
1             373        375       375238      375368
-----------------------------------------------------
Total         373        375       375238      375368

Example 3

Step 1: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.1.2/24
set interfaces ethernet eth2 traffic policy link-in LOGGER
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set traffic policy LOGGER rule 1 selector ACL
set traffic selector ACL rule 1 destination address 192.168.1.255

Step 2: Set the following configuration in DUT0 :

set interfaces bridge br0 address 192.168.1.1/24
set interfaces bridge br0 hardware-offload eth0
set interfaces ethernet eth0p0 bridge-group bridge br0
set interfaces ethernet eth0p0 bridge-group storm-control 1 burst 100ms
set interfaces ethernet eth0p0 bridge-group storm-control 1 protocol broadcast
set interfaces ethernet eth0p0 bridge-group storm-control 1 rate 20
set interfaces ethernet eth0p4 bridge-group bridge br0
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Ping the IP address 192.168.1.1 from DUT1:

admin@DUT1$ ping 192.168.1.1 count 1 size 56 timeout 1
Show output
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=1.06 ms

--- 192.168.1.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 1.060/1.060/1.060/0.000 ms

Note

Generate 40 Mbps of broadcast traffic against a 20 Mbps rate-limit and measure how much is actually received at the destination.

Step 4: Run the command traffic selector show on DUT1 and expect the following output:

Show output
Selector ACL (Policy LOGGER -- ifc eth2 -- hook link-in prio very-high -- rule 1)

-----------------------------------------------------
rule   pkts match  pkts eval  bytes match  bytes eval
-----------------------------------------------------
1            1490       1492      1498940     1499070
-----------------------------------------------------
Total        1490       1492      1498940     1499070

Example 4

Step 1: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.1.2/24
set interfaces ethernet eth2 traffic policy link-in LOGGER
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set traffic policy LOGGER rule 1 selector ACL
set traffic selector ACL rule 1 protocol tcp

Step 2: Set the following configuration in DUT0 :

set interfaces bridge br0 address 192.168.1.1/24
set interfaces bridge br0 hardware-offload eth0
set interfaces ethernet eth0p0 bridge-group bridge br0
set interfaces ethernet eth0p0 bridge-group storm-control 1 burst 100ms
set interfaces ethernet eth0p0 bridge-group storm-control 1 protocol tcp_data
set interfaces ethernet eth0p0 bridge-group storm-control 1 rate 1
set interfaces ethernet eth0p4 bridge-group bridge br0
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Ping the IP address 192.168.1.1 from DUT1:

admin@DUT1$ ping 192.168.1.1 count 1 size 56 timeout 1
Show output
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=0.266 ms

--- 192.168.1.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.266/0.266/0.266/0.000 ms

Note

Generate 40 Mbps of TCP traffic against a 1 Mbps rate-limit and measure how much is actually received at the destination.

Step 4: Run the command traffic selector show on DUT1 and expect the following output:

Show output
Selector ACL (Policy LOGGER -- ifc eth2 -- hook link-in prio very-high -- rule 1)

-----------------------------------------------------
rule   pkts match  pkts eval  bytes match  bytes eval
-----------------------------------------------------
1              74         77        75332       75546
-----------------------------------------------------
Total          74         77        75332       75546

Example 5

Step 1: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.1.2/24
set interfaces ethernet eth2 traffic policy link-in LOGGER
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set traffic policy LOGGER rule 1 selector ACL
set traffic selector ACL rule 1 protocol tcp

Step 2: Set the following configuration in DUT0 :

set interfaces bridge br0 address 192.168.1.1/24
set interfaces bridge br0 hardware-offload eth0
set interfaces ethernet eth0p0 bridge-group bridge br0
set interfaces ethernet eth0p0 bridge-group storm-control 1 burst 100ms
set interfaces ethernet eth0p0 bridge-group storm-control 1 protocol tcp_data
set interfaces ethernet eth0p0 bridge-group storm-control 1 rate 5
set interfaces ethernet eth0p4 bridge-group bridge br0
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Ping the IP address 192.168.1.1 from DUT1:

admin@DUT1$ ping 192.168.1.1 count 1 size 56 timeout 1
Show output
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=0.649 ms

--- 192.168.1.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.649/0.649/0.649/0.000 ms

Note

Generate 40 Mbps of TCP traffic against a 5 Mbps rate-limit and measure how much is actually received at the destination.

Step 4: Run the command traffic selector show on DUT1 and expect the following output:

Show output
Selector ACL (Policy LOGGER -- ifc eth2 -- hook link-in prio very-high -- rule 1)

-----------------------------------------------------
rule   pkts match  pkts eval  bytes match  bytes eval
-----------------------------------------------------
1             370        373       376660      376874
-----------------------------------------------------
Total         370        373       376660      376874

Example 6

Step 1: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.1.2/24
set interfaces ethernet eth2 traffic policy link-in LOGGER
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set traffic policy LOGGER rule 1 selector ACL
set traffic selector ACL rule 1 protocol tcp

Step 2: Set the following configuration in DUT0 :

set interfaces bridge br0 address 192.168.1.1/24
set interfaces bridge br0 hardware-offload eth0
set interfaces ethernet eth0p0 bridge-group bridge br0
set interfaces ethernet eth0p0 bridge-group storm-control 1 burst 100ms
set interfaces ethernet eth0p0 bridge-group storm-control 1 protocol tcp_data
set interfaces ethernet eth0p0 bridge-group storm-control 1 rate 20
set interfaces ethernet eth0p4 bridge-group bridge br0
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Ping the IP address 192.168.1.1 from DUT1:

admin@DUT1$ ping 192.168.1.1 count 1 size 56 timeout 1
Show output
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=1.11 ms

--- 192.168.1.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 1.108/1.108/1.108/0.000 ms

Note

Generate 40 Mbps of TCP traffic against a 20 Mbps rate-limit and measure how much is actually received at the destination.

Step 4: Run the command traffic selector show on DUT1 and expect the following output:

Show output
Selector ACL (Policy LOGGER -- ifc eth2 -- hook link-in prio very-high -- rule 1)

-----------------------------------------------------
rule   pkts match  pkts eval  bytes match  bytes eval
-----------------------------------------------------
1            1485       1487      1511730     1511860
-----------------------------------------------------
Total        1485       1487      1511730     1511860

Example 7

Step 1: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.1.2/24
set interfaces ethernet eth2 traffic policy link-in LOGGER
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set traffic policy LOGGER rule 1 selector ACL
set traffic selector ACL rule 1 protocol udp

Step 2: Set the following configuration in DUT0 :

set interfaces bridge br0 address 192.168.1.1/24
set interfaces bridge br0 hardware-offload eth0
set interfaces ethernet eth0p0 bridge-group bridge br0
set interfaces ethernet eth0p0 bridge-group storm-control 1 burst 100ms
set interfaces ethernet eth0p0 bridge-group storm-control 1 protocol udp
set interfaces ethernet eth0p0 bridge-group storm-control 1 rate 1
set interfaces ethernet eth0p4 bridge-group bridge br0
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Ping the IP address 192.168.1.1 from DUT1:

admin@DUT1$ ping 192.168.1.1 count 1 size 56 timeout 1
Show output
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=0.268 ms

--- 192.168.1.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.268/0.268/0.268/0.000 ms

Note

Generate 40 Mbps of UDP traffic against a 1 Mbps rate-limit and measure how much is actually received at the destination.

Step 4: Run the command traffic selector show on DUT1 and expect the following output:

Show output
Selector ACL (Policy LOGGER -- ifc eth2 -- hook link-in prio very-high -- rule 1)

-----------------------------------------------------
rule   pkts match  pkts eval  bytes match  bytes eval
-----------------------------------------------------
1              74         77        74444       74658
-----------------------------------------------------
Total          74         77        74444       74658

Example 8

Step 1: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.1.2/24
set interfaces ethernet eth2 traffic policy link-in LOGGER
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set traffic policy LOGGER rule 1 selector ACL
set traffic selector ACL rule 1 protocol udp

Step 2: Set the following configuration in DUT0 :

set interfaces bridge br0 address 192.168.1.1/24
set interfaces bridge br0 hardware-offload eth0
set interfaces ethernet eth0p0 bridge-group bridge br0
set interfaces ethernet eth0p0 bridge-group storm-control 1 burst 100ms
set interfaces ethernet eth0p0 bridge-group storm-control 1 protocol udp
set interfaces ethernet eth0p0 bridge-group storm-control 1 rate 5
set interfaces ethernet eth0p4 bridge-group bridge br0
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Ping the IP address 192.168.1.1 from DUT1:

admin@DUT1$ ping 192.168.1.1 count 1 size 56 timeout 1
Show output
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=0.281 ms

--- 192.168.1.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.281/0.281/0.281/0.000 ms

Note

Generate 40 Mbps of UDP traffic against a 5 Mbps rate-limit and measure how much is actually received at the destination.

Step 4: Run the command traffic selector show on DUT1 and expect the following output:

Show output
Selector ACL (Policy LOGGER -- ifc eth2 -- hook link-in prio very-high -- rule 1)

-----------------------------------------------------
rule   pkts match  pkts eval  bytes match  bytes eval
-----------------------------------------------------
1             371        374       373226      373440
-----------------------------------------------------
Total         371        374       373226      373440

Example 9

Step 1: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.1.2/24
set interfaces ethernet eth2 traffic policy link-in LOGGER
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set traffic policy LOGGER rule 1 selector ACL
set traffic selector ACL rule 1 protocol udp

Step 2: Set the following configuration in DUT0 :

set interfaces bridge br0 address 192.168.1.1/24
set interfaces bridge br0 hardware-offload eth0
set interfaces ethernet eth0p0 bridge-group bridge br0
set interfaces ethernet eth0p0 bridge-group storm-control 1 burst 100ms
set interfaces ethernet eth0p0 bridge-group storm-control 1 protocol udp
set interfaces ethernet eth0p0 bridge-group storm-control 1 rate 20
set interfaces ethernet eth0p4 bridge-group bridge br0
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Ping the IP address 192.168.1.1 from DUT1:

admin@DUT1$ ping 192.168.1.1 count 1 size 56 timeout 1
Show output
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=1.05 ms

--- 192.168.1.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 1.053/1.053/1.053/0.000 ms

Note

Generate 40 Mbps of UDP traffic against a 20 Mbps rate-limit and measure how much is actually received at the destination.

Step 4: Run the command traffic selector show on DUT1 and expect the following output:

Show output
Selector ACL (Policy LOGGER -- ifc eth2 -- hook link-in prio very-high -- rule 1)

-----------------------------------------------------
rule   pkts match  pkts eval  bytes match  bytes eval
-----------------------------------------------------
1            1488       1490      1496928     1497058
-----------------------------------------------------
Total        1488       1490      1496928     1497058

Example 10

Step 1: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.1.2/24
set interfaces ethernet eth2 traffic policy link-in LOGGER
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set traffic policy LOGGER rule 1 selector ACL
set traffic selector ACL rule 1 protocol icmp

Step 2: Set the following configuration in DUT0 :

set interfaces bridge br0 address 192.168.1.1/24
set interfaces bridge br0 hardware-offload eth0
set interfaces ethernet eth0p0 bridge-group bridge br0
set interfaces ethernet eth0p0 bridge-group storm-control 1 burst 100ms
set interfaces ethernet eth0p0 bridge-group storm-control 1 protocol other
set interfaces ethernet eth0p0 bridge-group storm-control 1 rate 1
set interfaces ethernet eth0p4 bridge-group bridge br0
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Ping the IP address 192.168.1.1 from DUT1:

admin@DUT1$ ping 192.168.1.1 count 1 size 56 timeout 1
Show output
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=0.337 ms

--- 192.168.1.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.337/0.337/0.337/0.000 ms

Note

Generate 40 Mbps of ICMP traffic against a 1 Mbps rate-limit and measure how much is actually received at the destination.

Step 4: Run the command traffic selector show on DUT1 and expect the following output:

Show output
Selector ACL (Policy LOGGER -- ifc eth2 -- hook link-in prio very-high -- rule 1)

-----------------------------------------------------
rule   pkts match  pkts eval  bytes match  bytes eval
-----------------------------------------------------
1              76         77        74612       74658
-----------------------------------------------------
Total          76         77        74612       74658

Example 11

Step 1: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.1.2/24
set interfaces ethernet eth2 traffic policy link-in LOGGER
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set traffic policy LOGGER rule 1 selector ACL
set traffic selector ACL rule 1 protocol icmp

Step 2: Set the following configuration in DUT0 :

set interfaces bridge br0 address 192.168.1.1/24
set interfaces bridge br0 hardware-offload eth0
set interfaces ethernet eth0p0 bridge-group bridge br0
set interfaces ethernet eth0p0 bridge-group storm-control 1 burst 100ms
set interfaces ethernet eth0p0 bridge-group storm-control 1 protocol other
set interfaces ethernet eth0p0 bridge-group storm-control 1 rate 5
set interfaces ethernet eth0p4 bridge-group bridge br0
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Ping the IP address 192.168.1.1 from DUT1:

admin@DUT1$ ping 192.168.1.1 count 1 size 56 timeout 1
Show output
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=0.573 ms

--- 192.168.1.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.573/0.573/0.573/0.000 ms

Note

Generate 40 Mbps of ICMP traffic against a 5 Mbps rate-limit and measure how much is actually received at the destination.

Step 4: Run the command traffic selector show on DUT1 and expect the following output:

Show output
Selector ACL (Policy LOGGER -- ifc eth2 -- hook link-in prio very-high -- rule 1)

-----------------------------------------------------
rule   pkts match  pkts eval  bytes match  bytes eval
-----------------------------------------------------
1             373        374       373394      373440
-----------------------------------------------------
Total         373        374       373394      373440

Example 12

Step 1: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.1.2/24
set interfaces ethernet eth2 traffic policy link-in LOGGER
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set traffic policy LOGGER rule 1 selector ACL
set traffic selector ACL rule 1 protocol icmp

Step 2: Set the following configuration in DUT0 :

set interfaces bridge br0 address 192.168.1.1/24
set interfaces bridge br0 hardware-offload eth0
set interfaces ethernet eth0p0 bridge-group bridge br0
set interfaces ethernet eth0p0 bridge-group storm-control 1 burst 100ms
set interfaces ethernet eth0p0 bridge-group storm-control 1 protocol other
set interfaces ethernet eth0p0 bridge-group storm-control 1 rate 20
set interfaces ethernet eth0p4 bridge-group bridge br0
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Ping the IP address 192.168.1.1 from DUT1:

admin@DUT1$ ping 192.168.1.1 count 1 size 56 timeout 1
Show output
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=0.662 ms

--- 192.168.1.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.662/0.662/0.662/0.000 ms

Note

Generate 40 Mbps of ICMP traffic against a 20 Mbps rate-limit and measure how much is actually received at the destination.

Step 4: Run the command traffic selector show on DUT1 and expect the following output:

Show output
Selector ACL (Policy LOGGER -- ifc eth2 -- hook link-in prio very-high -- rule 1)

-----------------------------------------------------
rule   pkts match  pkts eval  bytes match  bytes eval
-----------------------------------------------------
1            1489       1490      1496090     1496136
-----------------------------------------------------
Total        1489       1490      1496090     1496136

Example 13

Step 1: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.1.2/24
set interfaces ethernet eth2 traffic policy link-in LOGGER
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set traffic policy LOGGER rule 1 selector ACL
set traffic selector ACL rule 1 protocol udp
set traffic selector ACL rule 2 protocol icmp

Step 2: Set the following configuration in DUT0 :

set interfaces bridge br0 address 192.168.1.1/24
set interfaces bridge br0 hardware-offload eth0
set interfaces ethernet eth0p0 bridge-group bridge br0
set interfaces ethernet eth0p0 bridge-group storm-control 1 burst 100ms
set interfaces ethernet eth0p0 bridge-group storm-control 1 protocol udp
set interfaces ethernet eth0p0 bridge-group storm-control 1 rate 1
set interfaces ethernet eth0p0 bridge-group storm-control 2 burst 100ms
set interfaces ethernet eth0p0 bridge-group storm-control 2 protocol other
set interfaces ethernet eth0p0 bridge-group storm-control 2 rate 1
set interfaces ethernet eth0p4 bridge-group bridge br0
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Ping the IP address 192.168.1.1 from DUT1:

admin@DUT1$ ping 192.168.1.1 count 1 size 56 timeout 1
Show output
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=0.270 ms

--- 192.168.1.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.270/0.270/0.270/0.000 ms

Note

Generate 40 Mbps of UDP or ICMP traffic against a 1 Mbps rate-limit and measure how much is actually received at the destination.

Step 4: Run the command traffic selector show on DUT1 and expect the following output:

Show output
Selector ACL (Policy LOGGER -- ifc eth2 -- hook link-in prio very-high -- rule 1)

-----------------------------------------------------
rule   pkts match  pkts eval  bytes match  bytes eval
-----------------------------------------------------
1              74         77        74444       74658
2               2          3          168         214
-----------------------------------------------------
Total          76         77        74612       74658

Example 14

Step 1: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.1.2/24
set interfaces ethernet eth2 traffic policy link-in LOGGER
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set traffic policy LOGGER rule 1 selector ACL
set traffic selector ACL rule 1 protocol udp
set traffic selector ACL rule 2 protocol icmp

Step 2: Set the following configuration in DUT0 :

set interfaces bridge br0 address 192.168.1.1/24
set interfaces bridge br0 hardware-offload eth0
set interfaces ethernet eth0p0 bridge-group bridge br0
set interfaces ethernet eth0p0 bridge-group storm-control 1 burst 100ms
set interfaces ethernet eth0p0 bridge-group storm-control 1 protocol udp
set interfaces ethernet eth0p0 bridge-group storm-control 1 rate 5
set interfaces ethernet eth0p0 bridge-group storm-control 2 burst 100ms
set interfaces ethernet eth0p0 bridge-group storm-control 2 protocol other
set interfaces ethernet eth0p0 bridge-group storm-control 2 rate 5
set interfaces ethernet eth0p4 bridge-group bridge br0
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Ping the IP address 192.168.1.1 from DUT1:

admin@DUT1$ ping 192.168.1.1 count 1 size 56 timeout 1
Show output
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=0.409 ms

--- 192.168.1.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.409/0.409/0.409/0.000 ms

Note

Generate 40 Mbps of UDP or ICMP traffic against a 5 Mbps rate-limit and measure how much is actually received at the destination.

Step 4: Run the command traffic selector show on DUT1 and expect the following output:

Show output
Selector ACL (Policy LOGGER -- ifc eth2 -- hook link-in prio very-high -- rule 1)

-----------------------------------------------------
rule   pkts match  pkts eval  bytes match  bytes eval
-----------------------------------------------------
1             371        374       373226      373440
2               2          3          168         214
-----------------------------------------------------
Total         373        374       373394      373440

Example 15

Step 1: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.1.2/24
set interfaces ethernet eth2 traffic policy link-in LOGGER
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set traffic policy LOGGER rule 1 selector ACL
set traffic selector ACL rule 1 protocol udp
set traffic selector ACL rule 2 protocol icmp

Step 2: Set the following configuration in DUT0 :

set interfaces bridge br0 address 192.168.1.1/24
set interfaces bridge br0 hardware-offload eth0
set interfaces ethernet eth0p0 bridge-group bridge br0
set interfaces ethernet eth0p0 bridge-group storm-control 1 burst 100ms
set interfaces ethernet eth0p0 bridge-group storm-control 1 protocol udp
set interfaces ethernet eth0p0 bridge-group storm-control 1 rate 20
set interfaces ethernet eth0p0 bridge-group storm-control 2 burst 100ms
set interfaces ethernet eth0p0 bridge-group storm-control 2 protocol other
set interfaces ethernet eth0p0 bridge-group storm-control 2 rate 20
set interfaces ethernet eth0p4 bridge-group bridge br0
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Ping the IP address 192.168.1.1 from DUT1:

admin@DUT1$ ping 192.168.1.1 count 1 size 56 timeout 1
Show output
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=0.610 ms

--- 192.168.1.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.610/0.610/0.610/0.000 ms

Note

Generate 40 Mbps of UDP or ICMP traffic against a 20 Mbps rate-limit and measure how much is actually received at the destination.

Step 4: Run the command traffic selector show on DUT1 and expect the following output:

Show output
Selector ACL (Policy LOGGER -- ifc eth2 -- hook link-in prio very-high -- rule 1)

-----------------------------------------------------
rule   pkts match  pkts eval  bytes match  bytes eval
-----------------------------------------------------
1            1488       1491      1496928     1497142
2               2          3          168         214
-----------------------------------------------------
Total        1490       1491      1497096     1497142