Example - Traffic Shaping for WAN Connections
This article provides information on how to apply the default traffic shaping scheme to a new interface and how to add the basic QoS profile to a static and a dynamic ISP link.
The steps in this article use the following example settings:
ISP 1 | ISP 2 (dynamic) | Firewall Rule | |||
|---|---|---|---|---|---|
Port | eth1 | Port | dhcp | Name | LAN-2-INTERNET |
Traffic Outbound Rate | 10 Mbit/Sec | Traffic Outbound Rate | 2 Mbit/Sec | Service | HTTPS |
Traffic Inbound Rate | 10 Mbit/Sec | Traffic Inbound Rate | 2 Mbit/Sec |
| |
Step 1. Create a New Interface
To create a new interface and assign it to the default Basic profile, complete the following steps.
Go to CONFIGURATION > Configuration Tree > Box > Traffic Shaping.
Click Lock.
In the Interface section, right-click and select Add new Interface.
In the Interface Tree Mapping window, set the following settings:
Setting
Description
Interface
The name of the interface. For example, enter eth1 for ISP 1 and dhcp for ISP 2.
To apply traffic shaping, select or enter your specific port name as it is listed on the CONTROL > Network page. For dial-up connections like xDSL, ISDN, or Wireless WAN, you must enter the correct port name in order to apply traffic shaping that uses dynamic IP addresses. For example, if your xDSL port is listed as xDSL(ppp1), enter ppp1 in the Interface field.
Assigned Profile
The QoS profile to assign to this interface. For example, Default.
Rate
In this section, select Enable Shaping and specify limits for the Outbound and Inbound bandwidth settings. For example, enter 10 Mbit/Sec as the bandwidth limits for ISP 1 and 2 Mbit/Sec as the bandwidth limits for ISP 2.
Click OK.
Click Send Changes and Activate.
For advanced options, see How to Create a QoS Profile.
Step 2. Apply the QoS Band to a Firewall Rule
Select the QoS Band in the Policy settings of an access or application rule.
Go to CONFIGURATION > Configuration Tree > Box > Assigned Services > Firewall > Forwarding Rules.
Click Lock.
Create or double-click the access or application rule to which you are applying the QoS Band. For example, LAN-2-INTERNET-https.
To apply the QoS Band to an access rule:
Select the QoS Band from the QoS Band (Fwd) and QoS Band (Reply) list in the Policy section. For example, Background.
The outbound and inbound rate of a virtual interface is ignored when the QoS Band policy in the corresponding access rule is set to No-Shaping.
To apply the QoS Band to an application rule:
Select the Change QoS Band (Fwd) check box in the Policy section and select the QoS Band from the list .
Click OK.
Click Send Changes and Activate.
On the FIREWALL > Live page, verify that the correct QoS Band was applied to your session.