Simple way to limit bandwidth usage

[#1]

new to traffic shaping. just want to know if there is a simple way to just set a limit so that nothing can use the entire bandwidth without editing every single policy we have. Thanks in advance

[ede_pfau]

IMHO... - limiting bandwidth is interface-specific. Even different WAN interfaces need different bw limits. - you only have to check one checkbox in the policy to activate traffic shaping. - you only have to do that on policies which carry the main traffic, ie. which allow HTTP and (maybe) IMAP/SMTP. If you really have lots of policies (why?) then you could edit the config directly in an editor and reload it. Or use batch commands.

[ede_pfau]

sorry just a thought: I think you can specify bw limits on interfaces rather than policies. CLI only. Have a look at the Handbook or the CLI Guide.

[#4]

Okay let me be more specific. I have what I consider a lot of policies because of the services we provide to remote offices. Having said that I already made an attempt at traffic shaping but it did not work. I think our problem is just downloads eating up all our bandwidth so I tried to start but just limiting the policy internal to wan ... all all I placed a 5 meg limit ... then ran a bandwidth test on the internet and was still getting our full 10 meg... hope that makes some sense

[#5]

that would help if I could do it at the interface level I checked the guides already which is why I came here I will try again

[ede_pfau]

depending on the FortiOS version the limit is specified in kBit/sec or kBytes/sec. The latter in 4.3.

[ede_pfau]

 conf sys interface
 set inbandwidth <n>
 set outbandwidth <n>

inbandwidth <bandwidth_integer> Enter the KB/sec limit for incoming traffic for this interface. Use this command to configure inbound traffic shaping for an interface. Inbound traffic shaping limits the bandwidth accepted by the interface. Limiting inbound traffic takes precedence over traffic shaping applied by firewall policies. You can set inbound traffic shaping for any FortiGate unit interface and it can be active for more than one FortiGate unit interface at a time. Setting <bandwidth_integer> to 0 (the default) means unlimited bandwidth or no traffic shaping. outbandwidth <bandwidth_integer> Enter the KB/sec limit for outgoing (egress) traffic for this interface. Use this command to configure outbound traffic shaping for an interface. Outbound traffic shaping limits the bandwidth accepted by the interface. Limiting outbound traffic takes precedence over traffic shaping applied by firewall policies. You can set outbound traffic shaping for any FortiGate interface and it can be active for more than one FortiGate interface at a time. Setting <bandwidth_integer> to 0 (the default) means unlimited bandwidth or no traffic shaping.

[#8]

sorry to go on and on about this. In my case i would want to place this limit on my internal interface? I am trying to ensure my portal attached to a DMZ port always has bandwidth I assume if I place it on the WAN then that would limit everything? Sorry if I sound confused. because i am a bit... lol

[#9]

I found my mistake the limits are in Bytes not Bits thanks