topic Re: ICX 7250/7150. Broadcast limit doesn't work. in ICX Switches

ICX 7250/7150. Broadcast limit doesn't work.

nikita_kulikov — Mon, 06 May 2019 13:31:50 GMT

Hi team!
I test broadcast/multicast/unknown-unicast limits on ICX7250 and ICX7150 (hw ver. 8.0.9).
I've configured ports as:
interface ethernet 1/1/1
spanning-tree 802-1w admin-edge-port
broadcast limit 96 kbps
multicast limit 400 kbps
unknown-unicast limit 96 kbps
stp-bpdu-guard
But, nothing happens! I genarate broadcast traffic, but port works normally in this moment.
Can anyone come across this problem?

Re: ICX 7250/7150. Broadcast limit doesn't work.

jijo_panangat — Tue, 07 May 2019 07:04:25 GMT

Hello Nik kul,

Is this a standalone, stack or SPX environment ? BUM rate limiting is not supported on PE ports in an SPX environment but do support on CB ports.

Do u see the configured values under show rate-limit broadcast/multicast/unknown-unicast output ?

Re: ICX 7250/7150. Broadcast limit doesn't work.

nikita_kulikov — Tue, 07 May 2019 08:38:25 GMT

Hi Jijo,

I tested on stack of two ICX7250 and standalone ICX7150.
What's mean PE and CB ports?

Output from console:
7250#show rate-limit broadcast
Broadcast Limit Settings:
Port Limit Packets/Kbps
1/1/1 96 Kbps
1/1/2 96 Kbps
1/1/3 96 Kbps
2/1/1 96 Kbps
2/1/2 96 Kbps

Re: ICX 7250/7150. Broadcast limit doesn't work.

jijo_panangat — Tue, 07 May 2019 09:29:41 GMT

Hi Nik Kul,

Thanks , PE and CB are terminologies in campus fabric, reference link below.

http://docs.ruckuswireless.com/fastiron/08.0.60/fastiron-08060-switchstackingguide/GUID-B2FA4C26-4F2F-4AA8-AF69-2379202BBE6D.html

It seems the config is applied correctly, would you be able to open a tac case for debugging your environment ? There are some shell commands to check if the HW registers are correctly set and need remote access.

Re: ICX 7250/7150. Broadcast limit doesn't work.

nikita_kulikov — Tue, 07 May 2019 11:18:02 GMT

Unfortunately, I can't open tac case.
This equipment was got from provider for testing by short period. It doesn't have support licenses.

Re: ICX 7250/7150. Broadcast limit doesn't work.

jijo_panangat — Tue, 07 May 2019 11:36:15 GMT

Hello Nik kul,

Understood, The commands are bit complex and not straightforward.
Could you also test the same on 08.0.70e code ?

Re: ICX 7250/7150. Broadcast limit doesn't work.

nikita_kulikov — Tue, 07 May 2019 13:25:07 GMT

Tested on 08.0.70e code. Without changes.
Mb there is any misconfiguration?

ver 08.0.70eT211
!
stack unit 1
  module 1 icx7150-c12-poe-port-management-module
  module 2 icx7150-2-copper-port-2g-module
  module 3 icx7150-2-sfp-plus-port-20g-module
!
!
!
lag LAG_2 dynamic id 2
 ports ethe 1/3/1 to 1/3/2 
!
!
!
vlan 1 name DEFAULT-VLAN by port
 spanning-tree 802-1w
!
vlan 100 name Management by port
 tagged lag 2 
 untagged ethe 1/1/1 
 spanning-tree 802-1w
!
vlan 200 name TEST by port
 tagged lag 2 
 untagged ethe 1/1/2 
 spanning-tree 802-1w
!
errdisable recovery cause bpduguard
errdisable recovery interval 30
aaa authentication web-server default local
aaa authentication login default local
enable telnet authentication
enable aaa console
enable acl-per-port-per-vlan
hostname 7150
ip dhcp snooping vlan 100
ip dhcp snooping vlan 200
ip address 172.16.0.61 255.255.255.0
ip default-gateway 172.16.0.1
!
link-keepalive ethe 1/3/1 to 1/3/2 
no telnet server
username super password 8 $1$lDtHLIdf$XADHzuiRUFNzmF1o7FIRC/
username admin password 8 $1$W6H2vMPP$tuaydGN2bNddv0kupfJtB.
password-change any
!
!
interface ethernet 1/1/1
 no dhcp snooping relay information
 spanning-tree 802-1w admin-edge-port
 broadcast limit 96 kbps
 multicast limit 400 kbps
 unknown-unicast limit 96 kbps
 stp-bpdu-guard
!
interface lag 2
 dhcp snooping trust
!
end