Traffic Shaping Policy, Shared Shaper and Per-IP Shaper

[CvB]

Hi community,

Is it possible to use a shared shaper and a per-ip shaper in the same traffic shaping policy?

For example:

I want to create a shared shaper for youtube with maximum bandwith of 100mbits.

But I also want to create a per-ip shaper for youtube with a maximum bandwith of 2mbits, that only each client can use maximum 2 mbits for youtube.

Regards

Chris

[bpozdena_FTNT]

Hi Chris,

assuming you do not have a bunch of Youtubers in your network :) and you only want to shape streams from from Youtube (not uploading of videos), then you will need to create a shaping policy for Youtube application with reversed 100Mbps shaper and 2Mbps per-ip shaper .  

Example of shaping policy that should work for your needs:

config firewall shaping-policy
    edit 0
        set name "shape_youtube"
        set service "ALL"
        set application 31077                       # Youtube app ID
        set dstintf <your_WAN_port>                 # Interface(s) towards your ISP(s)
        set traffic-shaper-reverse <shaper_name>    # Your 100Mbps shared shaper
        set per-ip-shaper <shaper_name>             # Your 2Mbps per-ip shaper
        set srcaddr "all"
        set dstaddr "all"
    next
end

Note: For application-based shaping policy to work correctly, ensure your firewall policy has application control enabled.