Is there a way to make time-based traffic shaper policies? Example. During working hours, I would use a limit for each ip of xx Mb. In the evening, this may / should be removed or increased by many Mb.
I want to stay away from two common traffic policies, which may be based on time.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
I want to stay away from two common traffic policies, which may be based on time.
Why? Having two policies with different shape is what and how you would do this is.How would you expect a new TS to take place if you didn't have a policy with TimeOfDay schedule set?
Ken
PCNSE
NSE
StrongSwan
The other thing you can do is set one or the other level as baseline, and then a specific TOD policy higher in the chain. I have a "Work Hours" schedule set from 8am-noon and 1-5pm that tightens down web filtering, but then off-hours and during lunch break the fw is more open, with the default policy being the more open. Seems to work well.
Hello Philippe,
Sounds good.
Can you please share screen shot for schedule option how you setup.
Regards,
Sudarsan Babu P
Hi,
Sorry for the delay! :)
Let say we have a Internet link 100Mbps/100Mbps
Create schedule for DayTime:
config firewall schedule recurring edit "DayTime-7to17" set start 07:00 set end 17:00 set day sunday monday tuesday wednesday thursday friday saturday next end
Create shared shapers: config firewall shaper traffic-shaper edit "Shared-75Mbps" set maximum-bandwidth 76800 set priority low next edit "Shared-50Mbps" set maximum-bandwidth 51200 set priority low next end
Create Per-IP shapers: config firewall shaper per-ip-shaper edit "Per-IP-4Mpbs" set max-bandwidth 4096 next edit "Per-IP-10Mbps" set max-bandwidth 10240 next end
Create now Shaping policies: config firewall shaping-policy edit 1 set service "ALL" set schedule "DayTime-7to17" set dstintf "wan1" set traffic-shaper "Shared-50Mbps" set traffic-shaper-reverse "Shared-50Mbps" set per-ip-shaper "Per-IP-4Mpbs" set srcaddr "User-Network" set dstaddr "all" next edit 2 set service "ALL" set dstintf "wan1" set traffic-shaper "Shared-75Mbps" set traffic-shaper-reverse "Shared-75Mbps" set per-ip-shaper "Per-IP-10Mbps" set srcaddr "User-Network" set dstaddr "all" next end
Shaping policies are applied the same way as firewall policies: top-down matches.
Have a nice day
Philippe
Nice , will have to look at this more
PCNSE
NSE
StrongSwan
Thanks superb .
Regards,
Sudarsan Babu P
Regards,
Sudarsan Babu P
Hi philippe
Thanks for updating it's really nice info
benevolent share CLI to check feature
Thanks & Regards
Asus
Can i still use this via cli on 5.4.6?
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1712 | |
1093 | |
752 | |
447 | |
231 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.