配置如下:
# 创建ACL并配置规则,来匹配源IP地址为192.168.1.2/24的数据。
<Quidway> system-view
[Quidway] acl number 2000
[Quidway-acl-basic-2000] rule 0 permit source 192.168.1.2 0
[Quidway-acl-basic-2000] quit
# 创建连接数限制策略,并配置子规则,对单一源地址发起的连接数进行限制。
[Quidway] connection-limit enable
[Quidway] connection-limit policy 0
[Quidway-connection-limit-policy-0] limit 0 acl 2000 per-source amount 10 1
[Quidway-connection-limit-policy-0] quit
# NAT引用连接数限制策略0。
[Quidway] nat connection-limit-policy 0