- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to apply traffic shaping base on user groups
Is it possible to apply traffic shaping on tranperant vdom base on user groups ?
Backgroup
FortiOS 7.4.5 runung as a explic proxy
User authenticate with LDAP user account
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Please refer to this article:- https://docs.fortinet.com/document/fortigate/7.6.0/administration-guide/209245/traffic-shaping-based...
You can apply a traffic shaper to the firewall policy and include a specific user group in the policy.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have created the firewall policy with user groups and assigned with correspond traffic shaper , but the traffic of Baisc user and operational user wont go to the policy assigend with groups
config firewall policy
edit 1
set uuid 25e9af14-e9b2-51e9-aa9f-a77c8ef65fb1
set srcintf "port3"
set dstintf "proxy_trans0"
set action accept
set srcaddr "NET_10.34.0.0"
set dstaddr "all"
set schedule "always"
set service "TCP_8080"
set logtraffic all
set groups "Basic Users"
set traffic-shaper "IASC Basic Users Shared Shaper"
set traffic-shaper-reverse "IASC Basic Users Shared Shaper"
next
edit 4
set uuid 012642fa-9c09-51ef-fffd-bcc99b8eed3f
set srcintf "port3"
set dstintf "proxy_trans0"
set action accept
set srcaddr "NET_10.34.0.0"
set dstaddr "all"
set schedule "always"
set service "TCP_8080"
set logtraffic all
set groups "Operational Users"
set traffic-shaper "IASC Operational Shared Shaper"
set traffic-shaper-reverse "IASC Operational Shared Shaper"
next
edit 3
set uuid 613f6188-9bf7-51ef-19b1-5266f53559bd
set srcintf "port3"
set dstintf "proxy_trans0"
set action accept
set srcaddr "NET_10.34.107.0" "NET_10.34.168.0" "NET_10.34.176.0" "NET_10.34.178.0" "NET_10.34.179.0"
set dstaddr "all"
set schedule "always"
set service "TCP_8080"
set logtraffic all
next
![](/skins/images/EC9FF2F7BE06D4243426EA19DD2C8052/responsive_peak/images/icon_anonymous_message.png)