I was configure traffic shaper policy for limit internet speed from lan to the internet, the policy name is 'pc_to_internet'.
Policy 'pc_to_internet' is working normally and for source i use my LAN address.
But i have another shaper policy to limit speed from the ipsec vpn site to site (1st row).
When i set source using my LAN address (same with policy pc_to_internet) then i try to copy file from another site2 then the speed is not limited. But if i change the source to site2 address and destination to my LAN address then the speed is imited.
Anyone can help me to understand why src and dst is different to limit bandwidh to the internet and to the another site using vpn site2site?
When you set source=LAN and dest=Site2_Addr, do you set source_intf=Local_VLANs and dest_intf=Tunnel?
If you see below when i set src to LAN, dst to site2 address, src intf to my VLAN and dst intf to the sdwan then the policy is not work (the bandwidth is 2.17kbps)
If i reverse set src to site2 address, dst to LAN, src intf to sdwan and dst intf to my VLAN then the policy is work (the bandwidth is 151.38Mbps)
Can you share the shaper configuration?
here my config
Are you doing NAT for the traffic from LAN to the tunnel?
no nat, see below
In the traffic shaper rule, can you try with outgoing interface "any" and see the result?
it's not working
policy
result
User | Count |
---|---|
2554 | |
1356 | |
795 | |
647 | |
455 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.