Fortinet FortiGate Series Administration Guide

Configuring Per IP traffic shaping Traffic Shaping
FortiGate Version 4.0 MR1 Administration Guide
444 01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
Configuring Per IP traffic shaping
Configure traffic shaping that is applied per IP address, instead of per policy or per shaper.
As with the shared traffic shaper, you select the per-IP traffic shaper in firewall policies.
Go to Firewall > Traffic Shaping > Per-IP to add per-IP traffic shapers.
To apply per-IP traffic shaping to a firewall policy, go to Firewall > Policy, add or edit a
firewall policy, select Per-IP Traffic Shaping and select a per-IP traffic shaper.
Figure 245: Configuring a per-IP traffic shaper
Guaranteed
Bandwidth
Select a value to ensure there is enough bandwidth available for a high-priority
service. Be sure that the sum of all Guaranteed Bandwidth in all firewall policies is
significantly less than the bandwidth capacity of the interface.
Maximum
Bandwidth
Select to limit bandwidth in order to keep less important services from using
bandwidth needed for more important ones.
Traffic Priority Select High, Medium, or Low. Select Traffic Priority so the FortiGate unit manages
the relative priorities of different types of traffic. For example, a policy for
connecting to a secure web server needed to support ecommerce traffic should be
assigned a high traffic priority. Less important services should be assigned a low
priority. The firewall provides bandwidth to low-priority connections only when
bandwidth is not needed for high-priority connections.
Be sure to enable traffic shaping on all firewall policies. If you do not apply any
traffic shaping rule to a policy, the policy is set to high priority by default.
Distribute firewall policies over all three priority queues.
Quotas and
Accounting
See “Accounting and quota enforcement” on page 445.
Name Enter a name for the per-IP traffic shaper.
Maximum Bandwidth Enter the maximum allowed bandwidth in Kbps. This limit applies to
each IP address. Range 1 to 2 097 000. Enter 0 to disable
bandwidth limit.
Quotas and Accounting See “Accounting and quota enforcement” on page 445.
IP List
IP/Range An IP address or address range that this shaper controls.

Fortinet FortiGate Series Specifications

General

Brand	Fortinet
Model	FortiGate Series
Category	Firewall
Language	English