Exception for connection-rate filtering
Connection-rate filtering can be configured along
with one or more other ACL applications on the same interface. In
this case, a connection-rate match for a filter
action
is carried out according to the configured policy, regardless of whether
any other ACLs on the interface have a match for a deny
action.
Also, if a connection-rate filter permits (ignore
action)
a packet, it can still be denied by another ACL on the interface.