How to Configure Bandwidth Management on SonicOS Enhanced (5.8 & below)
03/26/2020 50 People found this article helpful 491,899 Views
Description
SonicOS Enhanced offers an integrated traffic shaping mechanism through its Egress (outbound) and Ingress (inbound) bandwidth management (BWM) interfaces. Outbound BWM can be applied to traffic sourced from Trusted and Public Zones (such as LAN and DMZ) destined to Untrusted and Encrypted Zones (such as WAN and VPN). Inbound BWM can be applied to traffic sourced from Untrusted and Encrypted Zones destined to Trusted and Public Zones.
Resolution
Configuration/Implementation Steps:
Step 1: Enabling Bandwidth Management Settings on the Firewall Settings | BWM page
Step 2: Configuring Bandwidth Management Settings on the WAN Interface | Advanced tab
Step 3: Configuring Bandwidth Management Settings on the Firewall | Access Rules page
NOTE: Once BWM has been enabled on an interface, and a link speed has been defined, traffic traversing that link will be throttled both inbound and outbound to the declared values, even if no Access Rules are configured with BWM settings.
Step 1: Enabling Bandwidth Management Settings on theFirewall Settings | BWM page
Please login to your SonicWall Management page and follow below steps
1) Navigate to Firewall Settings | BWM page
2) On the right side select WAN radio button near Bandwidth Management Type
3) Click Accept Button at the top.
Step 2: Configuring Bandwidth Management Settings on the WAN Interface | Advanced tab
Please login to your SonicWall Management page and follow below steps
1) Navigate to Network -| Interface, on the right side configure your WAN interface to get Edit interface X1 Window.
2) Go to Advanced tab to see Bandwidth Management section
3) Select Enable Egress Bandwidth Management check box
- Available Interface Egress Bandwidth (Kbps): 100000 (Type the upload speed of your ISP in Kbps)
4) Select Enable Ingress Bandwidth Management check box
- Available Interface Egress Bandwidth (Kbps): 100000 (Type the download speed of your ISP in Kbps)
After configuring above information click OK button.
Egress and Ingress BWM can be enabled jointly or separately on WAN interfaces. Different bandwidth values may be entered for outbound and inbound bandwidth to support asymmetric links. Link rates up to 100,000 Kbps (100Mbit) may be declared on Fast Ethernet interfaces, while Gigabit Ethernet interfaces will support link rates up to 1,000,000 Kbps (Gigabit). The speed declared should reflect the actual bandwidth available for the link. Oversubscribing the link (i.e. declaring a value greater than the available bandwidth) is not recommended.
Step 2: Configuring Bandwidth Management Settings on the Firewall | Access Rules page
Once one or both BWM settings are enabled on the WAN interface and the available bandwidth has been declared, a Bandwidth tab will appear on Access Rules. The Bandwidth tab will present either Inbound settings, Outbound settings, or both, depending on what was enabled on the WAN interface:
The configuration on the General tab will classify the traffic. In the above example, which assumes no other configured BWM rules, traffic from the LAN (Trusted) Zone's LAN Subnets destined to the VPN (Encrypted) Zone's 10.50.165.0 remote subnet, consisting of Service Group VOIP will be guaranteed 30% of the declared bandwidth (30% of 1500Kbps = 450Kbps), but it will not be permitted to exceed 80% (80% of 1500Kbps = 1200Kbps), leaving 300Kbps for other traffic.
Related Articles
Categories