All traffic rate-limiting
Rate-limiting for all traffic operates on a per-port basis to allow only the specified bandwidth to be used for inbound or outbound traffic. When traffic exceeds the configured limit, it is dropped. This effectively sets a usage level on a given port and is a tool for enforcing maximum service level commitments granted to network users. This feature operates on a per-port level and is not configurable on port trunks. Rate-limiting is designed to be applied at the network edge to limit traffic from non-critical users or to enforce service agreements such as those offered by Internet Service Providers (ISPs) to provide only the bandwidth for which a customer has paid.
Rate-limiting also can be applied by a RADIUS server during an authentication client session. Applying rate-limiting to desirable traffic is not recommended. For further details, see "RADIUS Authentication and Accounting" in the access security guide for your switch.
The switches also support ICMP rate-limiting to mitigate the effects of certain ICMP-based attacks.
ICMP traffic is necessary for network routing functions. For this reason, blocking all ICMP traffic is not recommended.