set firewall policer connection-policer if-exceeding bandwidth-limit 100m

set firewall policer connection-policer if-exceeding burst-size-limit 128k set firewall policer connection-policer then discard

set firewall family ethernet-switching filter ingress-vlan-rate-limit term 1 from source-address 192.168.100.100/32

set firewall family ethernet-switching filter ingress-vlan-rate-limit term 1 from destination-address x.x.x.x/y set firewall family ethernet-switching filter ingress-vlan-rate-limit term 1 then policer connection-policer set firewall family ethernet-switching filter ingress-vlan-rate-limit term 2 then accept

set vlans vlan-100 filter input ingress-vlan-rate-limit

     本文转自杰1992 51CTO博客，原文链接：http://blog.51cto.com/holger/2051647，如需转载请自行联系原作者