The present invention provides a method and an apparatus for data traffic restriction, which is applied to a network device where a link aggregation group interface includes member ports located on different chipsets of single boards, firstly, configuring, for each link aggregation group interface, a credit bucket for storing tokens overflowing from a token bucket corresponding to each member port, and the tokens overflowing from the different token buckets are distinctively labeled; receiving a packet to be sent, if a number of tokens in the token bucket is not sufficient for sending the packet to be sent, borrowing, from the credit bucket, tokens overflowing from a non-current token bucket, if the tokens of the current token bucket and the borrowed tokens are sufficient for sending the packet to be sent, sending the packet to be sent, and meanwhile, reducing the number of tokens in the current token bucket and tokens in the credit bucket. A dynamic restriction of data traffic over a plurality of links of each link aggregation group interface in the network equipment is achieved, so that the sum of the data traffic over the member ports in the link aggregation group interfaces can be better matched with the entire data traffic restricted for the link aggregation group interfaces.