A device generates a service protection factor (SPFi) for links (N) on a link aggregation group (LAG), determines a traffic allocation bandwidth on the LAG for a service class based on the service protection factor (SPFi) and a congestion guard factor (CGFi), and restricts the traffic allocation bandwidth on the LAG. The service protection factor (SPFi) may guarantee a service availability target in the presence of link failure, and the congestion guard factor (CGFi) may protect against link overload that may arise from imperfectness in traffic load balancing across links in the LAG.