A question concerning "External Rate Limit Percentage" vs "Rate"
If for instance, the requirement is to limit offending ICMP traffic to 25 %
of the interface bandwidth, would this be the correct way of tuning the
signature ?
Engine > Flood
Host
Event Action Settings > Request
Rate Limit
External Rate Limit type: Percentage
External Rate Limit Percentage: 25
Rate: 25
Protocol: ICMP
Am I right in saying that:
"External Rate Limit Percentage" is the percentage of the interface
bandwidth
while,
"Rate" is the number of packets per interval or maybe its the number of
packets that are seen before rate-limiting is triggered. Not entirely sure
about this particular value, and need clarification on this.
Why would I need to define "25" for both options ? Would not defining the
"External Rate Limit Percentage" be all I need to meet the requirement
Thanks again,
Mark
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit
www.ipexpert.com
