How to configure Per-IP Bandwidth Management on SonicOS 6.2 and above
03/26/2020 
59 
15395
DESCRIPTION:
BWM Elementals is to provide a method of allowing a single BWM rule to apply to the individual elements of that rule. "Per-IP Bandwidth Management" BWM is introduced as the first "Elemental" feature. This feature is a sub-option of Bandwidth Object. When Per-IP BWM is enabled, each individual IP under its parent rule will be applied to the elemental bandwidth settings.
RESOLUTION:
Step 1: Enabling Bandwidth Management Settings
- Login to the SonicWall Management GUI.
- Navigate to the Firewall Settings | BWM page.
- Select radio-button Advanced under Bandwidth Management Type.
- Click on Accept to save changes.
Note: Every time the Bandwidth Management Type is changed, all bandwidth management settings on the Firewall Rules will be reset to the factory defaults; therefore, you MUST reconfigure those rules.
Step 2: Creating Bandwidth Object
Navigate to the Firewall | Bandwidth Objects page, on the left side click Add button.
On the General tab
- Name: per-ip limitation (Type any Friendly Name)
- Guaranteed Bandwidth: 0 kbps (Type the required value which should be given out of total bandwidth)
- Maximum Bandwidth: 5 Mbps (Type the maximum value which can be given in more bandwidth available)
- Traffic Priority: 0 Realtime (Select priority out of eight default queue)
- Violation Action: Delay (Either select Delay or Drop for the traffic violating this bandwidth).
Click the Elemental tab
- Select Enable Per-IP Bandwidth Management
- Maximum Bandwidth: 1 Mbps (enter the maximum elemental bandwidth that can be allocated to a protocol under the parent traffic class)
- Click OK button to create the bandwidth object
Note : The maximum elemental bandwidth can't be greater than its parent class.
Step 3: Creating access rule with Bandwidth Management
- Navigate to Firewall | Access Rule page.
- Select the Matrix in the View Style section and go to LAN to WAN access rules.
- Click the Edit button of the default rule on the right side.
- Click the BWM tab.
Select "Enable Egress Bandwidth Management ('Allow' rules only)"
Bandwidth Object: per-ip limitation (Select the bandwidth object which you created)
Select "Enable Ingress Bandwidth Management ('Allow' rules only)"
Bandwidth Object: per-ip limitation (Select the bandwidth object which you created)
Click OK button to create access rule with bandwidth management.
The access rule will have the bandwidth icon in it with status information
Step 4: Test on the client PC
FTP or other download tools could be used to test the download and upload speed, which should be less than 1Mbps per IP in this case. Here a speed test website was used on the client PC to verify the Bandwidth Management.
Resolution for SonicOS 6.5
This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.
Step 1: Enabling Bandwidth Management Settings
- Login to the SonicWall Management GUI.
- Navigate to the Manage > Security Configuration > Firewall Settings | Bandwidth Management page.
- Select radio-button Advanced under Bandwidth Management Type.
- Click on Accept to save changes.
Note: Every time the Bandwidth Management Type is changed, all bandwidth management settings on the Firewall Rules will be reset to the factory defaults; therefore, you MUST reconfigure those rules.
Step 2: Creating Bandwidth Object
Navigate to the Manage > Policies > Objects > Bandwidth Objects page, on top click Add button.
On the General tab
- Name: per-ip limitation (Type any Friendly Name)
- Guaranteed Bandwidth: 0 kbps (Type the required value which should be given out of total bandwidth)
- Maximum Bandwidth: 5 Mbps (Type the maximum value which can be given in more bandwidth available)
- Traffic Priority: 0 Realtime (Select priority out of eight default queue)
- Violation Action: Delay (Either select Delay or Drop for the traffic violating this bandwidth).
Click the Elemental tab
- Select Enable Per-IP Bandwidth Management
- Maximum Bandwidth: 1 Mbps (enter the maximum elemental bandwidth that can be allocated to a protocol under the parent traffic class)
- Click OK button to create the bandwidth object
Note : The maximum elemental bandwidth can't be greater than its parent class.
Step 3: Creating access rule with Bandwidth Management
- Navigate to Manage > Policies > Rules > Access Rule page.
- Select the Matrix in the View Style section and go to LAN to WAN access rules.
- Click the Edit button of the default rule on the right side.
- Click the BWM tab.
Select "Enable Egress Bandwidth Management ('Allow' rules only)"
Bandwidth Object: per-ip limitation (Select the bandwidth object which you created)
Select "Enable Ingress Bandwidth Management ('Allow' rules only)"
Bandwidth Object: per-ip limitation (Select the bandwidth object which you created)
Click OK button to create access rule with bandwidth management.
The access rule will have the bandwidth icon in it with status information
Step 4: Test on the client PC
FTP or other download tools could be used to test the download and upload speed, which should be less than 1Mbps per IP in this case. Here a speed test website was used on the client PC to verify the Bandwidth Management.
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Capture Security applianceAdvanced Threat Protection for modern threat landscape
Network Security ManagerModern Security Management for today’s security landscape
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
