Configuring Resource Quota

VSYSs work independently in functions but share system resources including concurrent sessions, zone number, policy rule number, SNAT rule number, and DNAT rule number. You can specify the reserved quota and maximum quota for each type of system resource in a VSYS by creating a VSYS profile. Reserved quota refers to the resource number reserved for the VSYS; maximum quota refers to the maximum resource number available to the VSYS. Only root RXW administrators have the permission to create VSYS profiles.

Creating a Quota Rule

To create a Quota Rule, take the following steps:

On the Navigation pane, click Configuration > Network > VSYS to visit the VSYS page.

Click Quota tab.

Click New.

In the Quota dialog, type a quota name into the Name box.

Specify the reserved quota value of CPU in the Limit box, and then specify the maximum quota value of CPU in the Reserve box. If you enter the percentage value in the Alarm threshold box, the system will generate logs when the CPU utilization exceeds the specified percentage. The value range is 50 to 99.

Specify the reserved quota value and maximum quota value of session into Session number box.

Specify the reserved quota value and maximum quota value of zone into Zones box.

Specify the reserved quota value and maximum quota value of policy into Policy rules box.

Specify the reserved quota value and maximum quota value of SNAT into SNAT rules box.

Specify the reserved quota value and maximum quota value of session in the stat-set into Stat-set (session) box.

Specify the reserved quota value and maximum quota value of objects except session in the stat-set into Stat-set (others) box.

Specify the reserved quota value and maximum quota value of IPsec tunnel into IPsec box.

Click OK.

Note:

Up to 128 VSYS quota rules are supported.
The default quota rule of the root VSYS named root-vsys-profile and the default quota rule of non-root VSYS named default-vsys-profile cannot be edited or deleted.
Before deleting a quota rule, you must delete all the VSYSs referencing the VSYS quota rule.
The reserved quota and maximum quota vary from different platforms.The reserved quota should not exceed the maximum quota.

Editing a Quota Rule

To edit a Quota Rule, take the following steps:

On the Navigation pane, click Configuration > Network > VSYS to visit the VSYS page.

Click Quota tab.

Select the quota rule you want to edit from the list, and click Edit.

In the Quota dialog, modify according to your need.

Click OK to save your changes.

Deleting a Quota Rule

To delete a Quota Rule, take the following steps:

On the Navigation pane, click Configuration > Network > VSYS to visit the VSYS page.

Click Quota tab.

Select a Quota Rule you want to delete from the list, and click Delete.