- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
FortiGate Shaping Profile VPN interface
Hi All,
I'm implementing SDWAN topology with Dial-Up Ipsec VPNs. I also want to implement traffic shaping for the relevant traffic. I plan to use Shaping profiles on interfaces but I'm a little bit confused about where to put the shaping profile. On the VPN interface, or on the physical WAN interface. Or Both? Never find a documentation about that.
Thank you!
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Greetings!
To implement traffic shaping for your SD-WAN topology with dial-up IPsec VPNs, you can apply shaping profiles on the VPN interface or the physical WAN interface, depending on your specific requirements. Here's a general guideline to help you decide:
1. VPN Interface:
- Apply shaping profiles on the VPN interface if you want to shape traffic specifically for the VPN tunnels.
- This allows you to control the traffic shaping policies for individual VPN tunnels based on their characteristics.
2. Physical WAN Interface:
- Apply shaping profiles on the physical WAN interface if you want to shape traffic before it enters the VPN tunnels.
- This can help in managing overall bandwidth allocation and shaping traffic before it is encapsulated in the VPN tunnels.
3. Both Interfaces:
- You can apply shaping profiles on both the VPN interface and the physical WAN interface for a more granular control over traffic shaping.
- This approach allows you to shape traffic at different stages of the network flow, providing a comprehensive traffic management solution.
Consider your network design, traffic patterns, and shaping requirements to determine whether to apply shaping profiles on the VPN interface, physical WAN interface, or both. It's essential to test and monitor the impact of your traffic shaping configurations to ensure they meet your network performance goals effectively.
Regards!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Greetings!
To implement traffic shaping for your SD-WAN topology with dial-up IPsec VPNs, you can apply shaping profiles on the VPN interface or the physical WAN interface, depending on your specific requirements. Here's a general guideline to help you decide:
1. VPN Interface:
- Apply shaping profiles on the VPN interface if you want to shape traffic specifically for the VPN tunnels.
- This allows you to control the traffic shaping policies for individual VPN tunnels based on their characteristics.
2. Physical WAN Interface:
- Apply shaping profiles on the physical WAN interface if you want to shape traffic before it enters the VPN tunnels.
- This can help in managing overall bandwidth allocation and shaping traffic before it is encapsulated in the VPN tunnels.
3. Both Interfaces:
- You can apply shaping profiles on both the VPN interface and the physical WAN interface for a more granular control over traffic shaping.
- This approach allows you to shape traffic at different stages of the network flow, providing a comprehensive traffic management solution.
Consider your network design, traffic patterns, and shaping requirements to determine whether to apply shaping profiles on the VPN interface, physical WAN interface, or both. It's essential to test and monitor the impact of your traffic shaping configurations to ensure they meet your network performance goals effectively.
Regards!
