Hi community,
Is it possible to use a shared shaper and a per-ip shaper in the same traffic shaping policy?
For example:
I want to create a shared shaper for youtube with maximum bandwith of 100mbits.
But I also want to create a per-ip shaper for youtube with a maximum bandwith of 2mbits, that only each client can use maximum 2 mbits for youtube.
Regards
Chris
Hi Chris,
assuming you do not have a bunch of Youtubers in your network :) and you only want to shape streams from from Youtube (not uploading of videos), then you will need to create a shaping policy for Youtube application with reversed 100Mbps shaper and 2Mbps per-ip shaper .
Example of shaping policy that should work for your needs:
config firewall shaping-policy
edit 0
set name "shape_youtube"
set service "ALL"
set application 31077 # Youtube app ID
set dstintf <your_WAN_port> # Interface(s) towards your ISP(s)
set traffic-shaper-reverse <shaper_name> # Your 100Mbps shared shaper
set per-ip-shaper <shaper_name> # Your 2Mbps per-ip shaper
set srcaddr "all"
set dstaddr "all"
next
end
Note: For application-based shaping policy to work correctly, ensure your firewall policy has application control enabled.
Hello @CvB,
You can either use a shared shaper with a maximum bandwidth of 100 Mbps for all YouTube traffic, which would be shared among all clients accessing YouTube, or you can use a per-IP shaper to limit each client's YouTube bandwidth to 2 Mbps. However, you cannot combine both methods within the same traffic shaping policy.
Thanks
User | Count |
---|---|
2260 | |
1226 | |
772 | |
451 | |
367 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.