How can I configure Global bandwidth management?

10/14/2021 474 People found this article helpful 58,434 Views

Download

Print

Share

• LinkedIn
• Twitter
• Facebook
• Email
• Copy URL The link has been copied to clipboard

Description

Bandwidth management (BWM) is a means of allocating bandwidth resources to critical applications on a network. Global BWM is controlled by the SonicWall Security Appliance on ingress (inbound) and egress (outbound) traffic. It allows network administrators to guarantee minimum bandwidth
and prioritize traffic based on access rules. Balancing the bandwidth allocated to different network traffic and then assigning priorities to traffic can improve network performance.

Global BWM works by first enabling bandwidth management on an interface and then allocating the available bandwidth for that interface on the ingress and egress traffic. It then assigns individual limits for each class of network traffic. By assigning priorities to network traffic,applications requiring a quick response time, such as Telnet, can take precedence over traffic requiring less response time, such as FTP.

Global BWM provides eight priority queues:

Resolution

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

To view the BWM configuration

1. Click Manage in the top navigation menu
2. Navigate toFirewall Settings | Bandwidth Management page.
   
   
   
   

 TIPS:

• This priority table is used only when global bandwidth management is selected.
• In global BWM mode, all traffic (by default) is marked as  medium priority unless configured via firewall rule/app firewall rule. Three priority queues are set by default:
• The default settings for this page consists of three priorities with preconfigure guaranteed and maximum bandwidth. The medium priority has the highest guaranteed value since this priority queue is used by default for all traffic not governed by a BWM enabled policy.
• When global BWM is enabled on an interface, all of the traffic to and from that interface is bandwidth managed.

BWM Types

• Advanced (WAN):  Only WAN zones can have assigned guaranteed and maximum bandwidth to services and have prioritized traffic.
• Global:  (Default) All zones can have assigned guaranteed and maximum bandwidth to services and have prioritized traffic.
• None  :  Disables BWM.

Configuring WAN Bandwidth Management (BWM)

1. Login to the SonicWall management GUI.
2. Navigate to Firewall Settings | Bandwidth Management page.
3. Select radio-button Advanced under Bandwidth Management Type.
4. Click Accept .
   
   

    NOTE: Every time the Bandwidth Management Type is changed, all bandwidth management settings on the Firewall Rules will be reset to the factory defaults; therefore, you must reconfigure those rules.

Enabling Bandwidth Management on the WAN Interface

BWM configurations begin by enabling BWM on the relevant WAN interface, and declaring the interface’s available bandwidth in Kbps (Kilobits per second).

1. Click Manage in the top navigation menu.
2. Navigate to  Network | Interfaces page.
3. Click  configure under X1 (or another interface on the WAN zone).
4. Click  Advanced tab.
5. Set the Egress and Ingress bandwidth under the Bandwidth Management section.
   
   
   
   

    NOTE:Once BWM has been enabled on an interface, and a link speed has been defined, traffic traversing that link will be throttled—both inbound and outbound—to the declared values, even if no Access Rules are configured with BWM settings.Once one or both BWM settings are enabled on the WAN interface and the available bandwidth has been declared, a Bandwidth tab will appear on Access Rules. The Bandwidth tab will present either Inbound settings, Outbound settings, or both, depending on what was enabled on the WAN interface:
   

   
   

Configuring Global Bandwidth Management (BWM)

1. Login to the SonicWall management GUI.
2. Click Manage in the top navigation menu.
3. Navigate to Firewall Settings | Bandwidth Management page.
4. Select radio-button Global under Bandwidth Management Type.
5. Click Accept.
   
   
   
6. When changing BWM settings, the following warning message will be displayed. Click OK. 
   

Enabling Bandwidth Management on LAN / DMZ Interfaces 

1. Click Manage in the top navigation menu.
2. Navigate to Network | Interfaces page.
3. Click  configure under X0 (or another interface on a non-WAN zone).
4. Click Advanced tab.
5. Set the Egress and Ingress bandwidth under the Bandwidth Management section.
   
   
   

    NOTE: The Bandwidth Management section will be greyed-out in non-WAN interfaces if the Bandwidth Management Type is either WAN or None, and will be configurable only when it is set to Global.

   
   

Global BWM Option in Access Rules 

1. The following option is available in the Ethernet BWM tab of a rule under Firewall | Access Rules when Bandwidth Management Type is set to Global. 
   
   
   

    NOTE: All priorities will be displayed (Realtime – Lowest) regardless if all have been configured. Refer to the Firewall Settings | Bandwidth Management page to determine which priorities are enabled. If the Bandwidth Management Type is set to Global and you select a Bandwidth Priority that is not enabled, the traffic is automatically mapped to the level 4 priority (Medium). For a BWM Type of WAN, the default priority is level 7 (Low). 

BWM Option in App Rules 

A number of BWM action options are also available in the predefined, default action list. The BWM action options change depending on the Bandwidth Management Type setting on the Firewall Settings | Bandwidth Managementpage. If the Bandwidth Management Type is set to Global, all eight levels of BWM are available. If the Bandwidth Management Type is set to Advanced, the predefined actions list includes three levels of Advanced BWM. 

The following table lists the predefined default actions that are available when adding a policy.

1. Actions Objects when Bandwidth Management Type is set to Advanced. 
   
   
2. Actions Objects when Bandwidth Management Type is set to Global. 
   
   
3. BWM in Application Control Policies .
   

Resolution for SonicOS 6.2 and Below

The below resolution is for customers using SonicOS 6.2 and earlier firmware. For firewalls that are generation 6 and newer we suggest to upgrade to the latest general release of SonicOS 6.5 firmware.

To view the BWM configuration, navigate to Firewall Settings | BWM page.

TIPS: 

• This priority table is used only when global bandwidth management is selected.
• In global BWM mode, all traffic (by default) is marked as medium priority unless configured via firewall rule/app firewall rule. Three priority queues are set by default:
• The default settings for this page consists of three priorities with preconfigure guaranteed and maximum bandwidth. The medium priority has the highest guaranteed value since this priority queue is used by default for all traffic not governed by a BWM enabled policy.
• When global BWM is enabled on an interface, all of the traffic to and from that interface is bandwidth managed.
  
  

BWM TYPES

• WAN   :  Only WAN zones can have assigned guaranteed and maximum bandwidth to services and have prioritized traffic.
• Global:  (Default) All zones can have assigned guaranteed and maximum bandwidth to services and have prioritized traffic.
• None  :  Disables BWM.

Configuring WAN Bandwidth Management (BWM)

1. Login to the SonicWall management GUI.
2. Navigate to Firewall Settings | BWM page.
3. Select radio-button WAN under Bandwidth Management Type.
4. Click Accept.
   
   

   NOTE: Every time the Bandwidth Management Type is changed, all bandwidth management settings on the Firewall Rules will be reset to the factory defaults; therefore, you must reconfigure those rules.

   
   

Enabling Bandwidth Management on the WAN Interface

BWM configurations begin by enabling BWM on the relevant WAN interface, and declaring the interface’s available bandwidth in Kbps (Kilobits per second).

1. Navigate to  Network | Interfaces page.
2. Click on configure under X1 (or another interface on the WAN zone).
3. Click  Advanced tab.
4. Set the Egress and Ingress bandwidth under the Bandwidth Management section.
   
   
   

   NOTE: Once BWM has been enabled on an interface, and a link speed has been defined, traffic traversing that link will be throttled—both inbound and outbound—to the declared values, even if no Access Rules are configured with BWM settings.Once one or both BWM settings are enabled on the WAN interface and the available bandwidth has been declared, a Bandwidth tab will appear on Access Rules. The Bandwidth tab will present either Inbound settings, Outbound settings, or both, depending on what was enabled on the WAN interface:

   
   

Configuring Global Bandwidth Management (BWM)

1. Login to the SonicWall management GUI.
2. Navigate to Firewall Settings | BWM page.
3. Select radio-button Global under Bandwidth Management Type.
4. Click Accept .
   
   
   
5. When changing BWM settings, the following warning message will be displayed. Click OK . 
   

Enabling Bandwidth Management on LAN / DMZ Interfaces

1. Navigate to Network | Interfaces page.
2. Click  configure under X0 (or another interface on a non-WAN zone).
3. Click  Advanced tab.
4. Set the Egress and Ingress bandwidth under the Bandwidth Management section.
   
   
   

   NOTE: The Bandwidth Management section will be greyed-out in non-WAN interfaces if the Bandwidth Management Type is either WAN or None, and will be configurable only when it is set to Global.

   
   

Global BWM Option in Access Rules

1. The following option is available in the Ethernet BWM tab of a rule under Firewall | Access Rules when Bandwidth Management Type is set to Global. 
   
   
   

   NOTE: All priorities will be displayed (Realtime – Lowest) regardless if all have been configured. Refer to the Firewall Settings | BWM page to determine which priorities are enabled. If the Bandwidth Management Type is set to Global and you select a Bandwidth Priority that is not enabled, the traffic is automatically mapped to the level 4 priority (Medium). For a BWM Type of WAN, the default priority is level 7 (Low). 

BWM Option in App Rules

A number of BWM action options are also available in the predefined, default action list. The BWM action options change depending on the Bandwidth Management Type setting on the Firewall Settings | BWM page. If the Bandwidth Management Type is set to Global, all eight levels of BWM are available. If the Bandwidth Management Type is set to WAN, the predefined actions list includes three levels of WAN BWM.

The following table lists the predefined default actions that are available when adding a policy.

1. Actions Objects when Bandwidth Management Type is set to WAN. 
   
   
   
2. Actions Objects when Bandwidth Management Type is set to Global. 
   
3. BWM in App Rules Policies .
   

Related Articles

• How to force an update of the Security Services Signatures from the Firewall GUI
• How to upload security services signatures manually on Closed Environments?
• How to Create Gen 7 Settings File by Using the Online Migration Tool

Categories

• Firewalls > NSa Series > Networking
• Firewalls > NSv Series > Networking
• Firewalls > TZ Series > Networking