Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
CvB
New Contributor

Traffic Shaping Policy, Shared Shaper and Per-IP Shaper

Hi community,

 

Is it possible to use a shared shaper and a per-ip shaper in the same traffic shaping policy?

 

For example:

I want to create a shared shaper for youtube with maximum bandwith of 100mbits.

But I also want to create a per-ip shaper for youtube with a maximum bandwith of 2mbits, that only each client can use maximum 2 mbits for youtube.

 

Regards

Chris

 

 

2 REPLIES 2
bpozdena_FTNT

Hi Chris,

 

assuming you do not have a bunch of Youtubers in your network :) and you only want to shape streams from from Youtube (not uploading of videos), then you will need to create a shaping policy for Youtube application with reversed 100Mbps shaper and 2Mbps per-ip shaper .  

 

Example of shaping policy that should work for your needs:

config firewall shaping-policy
    edit 0
        set name "shape_youtube"
        set service "ALL"
        set application 31077                       # Youtube app ID
        set dstintf <your_WAN_port>                 # Interface(s) towards your ISP(s)
        set traffic-shaper-reverse <shaper_name>    # Your 100Mbps shared shaper
        set per-ip-shaper <shaper_name>             # Your 2Mbps per-ip shaper
        set srcaddr "all"
        set dstaddr "all"
    next
end

 

Note: For application-based shaping policy to work correctly, ensure your firewall policy has application control enabled. 

HTH,
Boris
pavankr5
Staff
Staff

Hello @CvB,

 

You can either use a shared shaper with a maximum bandwidth of 100 Mbps for all YouTube traffic, which would be shared among all clients accessing YouTube, or you can use a per-IP shaper to limit each client's YouTube bandwidth to 2 Mbps. However, you cannot combine both methods within the same traffic shaping policy.

 

Thanks

Top Kudoed Authors