Configuring Per Ip Traffic Shaping - Fortinet FortiGate Series Administration Manual

Configuring Per IP traffic shaping

Configuring Per IP traffic shaping
444
Guaranteed Select a value to ensure there is enough bandwidth available for a high-priority
service. Be sure that the sum of all Guaranteed Bandwidth in all firewall policies is
Bandwidth
significantly less than the bandwidth capacity of the interface.
Maximum Select to limit bandwidth in order to keep less important services from using
bandwidth needed for more important ones.
Bandwidth
Traffic Priority Select High, Medium, or Low. Select Traffic Priority so the FortiGate unit manages
the relative priorities of different types of traffic. For example, a policy for
connecting to a secure web server needed to support ecommerce traffic should be
assigned a high traffic priority. Less important services should be assigned a low
priority. The firewall provides bandwidth to low-priority connections only when
bandwidth is not needed for high-priority connections.
Be sure to enable traffic shaping on all firewall policies. If you do not apply any
traffic shaping rule to a policy, the policy is set to high priority by default.
Distribute firewall policies over all three priority queues.
Quotas and See "Accounting and quota enforcement" on page
Accounting
Configure traffic shaping that is applied per IP address, instead of per policy or per shaper.
As with the shared traffic shaper, you select the per-IP traffic shaper in firewall policies.
Go to Firewall > Traffic Shaping > Per-IP to add per-IP traffic shapers.
To apply per-IP traffic shaping to a firewall policy, go to Firewall > Policy, add or edit a
firewall policy, select Per-IP Traffic Shaping and select a per-IP traffic shaper.
Figure 245: Configuring a per-IP traffic shaper
Name
Maximum Bandwidth
Quotas and Accounting
IP List
IP/Range
Enter a name for the per-IP traffic shaper.
Enter the maximum allowed bandwidth in Kbps. This limit applies to
each IP address. Range 1 to 2 097 000. Enter 0 to disable
bandwidth limit.
See "Accounting and quota enforcement" on page
An IP address or address range that this shaper controls.
FortiGate Version 4.0 MR1 Administration Guide
Traffic Shaping
445.
445.
01-410-89802-20090903
http://docs.fortinet.com/ • Feedback