set firewall policer connection-policer if-exceeding bandwidth-limit 100m
set firewall policer connection-policer if-exceeding burst-size-limit 128k
set firewall policer connection-policer then discard
set firewall family ethernet-switching filter ingress-vlan-rate-limit term 1 from source-address 192.168.100.100/32
set firewall family ethernet-switching filter ingress-vlan-rate-limit term 1 from destination-address x.x.x.x/y
set firewall family ethernet-switching filter ingress-vlan-rate-limit term 1 then policer connection-policer
set firewall family ethernet-switching filter ingress-vlan-rate-limit term 2 then accept
set vlans vlan-100 filter input ingress-vlan-rate-limit
本文转自杰1992 51CTO博客，原文链接：http://blog.51cto.com/holger/2051647，如需转载请自行联系原作者
