Inbound Traffic Shaping does not work.

[chreggy]

Hello,

i have a 4m/0.9m adsl connection and want to prioritize inbound traffic. So to test that, i'm using an example with http and ftp. When i'm downloading from ftp at full speed, http must be higher priority to not suffer from ftp inbound. In a very simple steps, i have created 4 shapers :

"Down Low" : FTP 0.1Mb guaranted and 3.9Mb max Low prio

"Down High" : HTTP 3.8Mb guaranted and 3.9Mb max High prio

"Up Low" : FTP 0.1Mb / 0.7Mb Low

"Up High" : HTTP 0.6Mb / 0.7Mb High

Wan1 interface set inbound 3900Kb/outbound 700Kb

2 policies: internal -> wan1, FTP shaper "Up Low"/ Reverse "Down Low". HTTP shaper "Up High" / "Down High"

Upload is working very well, when FTP is at 0.7Mb, sending http will drop FTP to 0.1Mb. But downloading is not working. I have tested all the possibilites of guaranted traffic, DSCP, TOS, using same shaper with low priority, application control, nothing. FTP and HTTP downloading is approx the same rate 50% of inbound. I have also tested with no max and with no guaranted, not better. I can limit max bandwitdh to ftp, it's working but it is not i'm searching, i want FTP downloading to use max when other traffic is idle and being low when http traffic is used.

I have used too many times on this problem and support have no solution. So is the fortigate is really capable of limiting inbound traffic like i want ?

Thanks :o)

[rwpatterson]

I have been away from FGT for a bit. Confirm that the provisioning is in kiloBITS per second, and not kiloBYTES, as it was in the past.

[chreggy]

it's kb/s in the GUI and KB/s into the CLI