Not applicable
Created on 09-30-2011 07:09 AM
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Simple way to limit bandwidth usage
new to traffic shaping. just want to know if there is a simple way to just set a limit so that nothing can use the entire bandwidth without editing every single policy we have.
Thanks in advance
8 REPLIES 8
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
IMHO...
- limiting bandwidth is interface-specific. Even different WAN interfaces need different bw limits.
- you only have to check one checkbox in the policy to activate traffic shaping.
- you only have to do that on policies which carry the main traffic, ie. which allow HTTP and (maybe) IMAP/SMTP.
If you really have lots of policies (why?) then you could edit the config directly in an editor and reload it. Or use batch commands.
Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
sorry just a thought:
I think you can specify bw limits on interfaces rather than policies. CLI only. Have a look at the Handbook or the CLI Guide.
Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
Not applicable
Created on 09-30-2011 07:42 AM
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Okay let me be more specific.
I have what I consider a lot of policies because of the services we provide to remote offices.
Having said that I already made an attempt at traffic shaping but it did not work.
I think our problem is just downloads eating up all our bandwidth so I tried to start but just limiting the policy
internal to wan ... all all
I placed a 5 meg limit ... then ran a bandwidth test on the internet and was still getting our full 10 meg...
hope that makes some sense
Not applicable
Created on 09-30-2011 07:44 AM
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
that would help if I could do it at the interface level
I checked the guides already which is why I came here
I will try again
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
depending on the FortiOS version the limit is specified in kBit/sec or kBytes/sec. The latter in 4.3.
Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
conf sys interface set inbandwidth <n> set outbandwidth <n>
inbandwidth <bandwidth_integer> Enter the KB/sec limit for incoming traffic for this interface. Use this command to configure inbound traffic shaping for an interface. Inbound traffic shaping limits the bandwidth accepted by the interface. Limiting inbound traffic takes precedence over traffic shaping applied by firewall policies. You can set inbound traffic shaping for any FortiGate unit interface and it can be active for more than one FortiGate unit interface at a time. Setting <bandwidth_integer> to 0 (the default) means unlimited bandwidth or no traffic shaping. outbandwidth <bandwidth_integer> Enter the KB/sec limit for outgoing (egress) traffic for this interface. Use this command to configure outbound traffic shaping for an interface. Outbound traffic shaping limits the bandwidth accepted by the interface. Limiting outbound traffic takes precedence over traffic shaping applied by firewall policies. You can set outbound traffic shaping for any FortiGate interface and it can be active for more than one FortiGate interface at a time. Setting <bandwidth_integer> to 0 (the default) means unlimited bandwidth or no traffic shaping.
Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
Not applicable
Created on 09-30-2011 07:53 AM
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
sorry to go on and on about this.
In my case i would want to place this limit on my internal interface?
I am trying to ensure my portal attached to a DMZ port always has bandwidth
I assume if I place it on the WAN then that would limit everything?
Sorry if I sound confused. because i am a bit... lol
Not applicable
Created on 09-30-2011 08:10 AM
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I found my mistake the limits are in Bytes not Bits
thanks