Technical Tip: Source interface in the traffic shaping policy
Description
This article describes how to add source interfaces as criteria for classifying traffic in a firewall shaping policy.
Solution
This CLI command is added.
# config firewall shaping-policy
edit 1
set srcintf <interface_name>
......
next
end
Example.
In this example, there are two shaping policies.
- Policy 1 is for traffic from the Office to the Server, with the speed limited to 5MB/s.
- Policy 2 is for traffic from the Lab to the Server, with the speed limited to 1MB/s.
- Policy 1 is for traffic from the Office to the Server, with the speed limited to 5MB/s.
- Policy 2 is for traffic from the Lab to the Server, with the speed limited to 1MB/s.
CLI commands to configure the FortiGate.
# config firewall shaping-policy
edit 1
set name "Office_Speed_5MB"
set service "ALL"
set srcintf "port13"
set dstintf "port9"
set traffic-shaper "5MB/s"
set traffic-shaper-reverse "5MB/s"
set srcaddr "all"
set dstaddr "all"
next
edit 2
set name "Lab_Speed_1MB"
set service "ALL"
set srcintf "port10"
set dstintf "port9"
set traffic-shaper "1MB/s"
set traffic-shaper-reverse "1MB/s"
set srcaddr "all"
set dstaddr "all"
next
end
