Versionen im Vergleich

Schlüssel

  • Diese Zeile wurde hinzugefügt.
  • Diese Zeile wurde entfernt.
  • Formatierung wurde geändert.

...

Info
titleHow Traffic Shaping works:


The packets must be assigned to a Traffic Group to be processed by the Traffic Shaping module. There are two ways assign traffic to a Traffic Group:

  1. By selecting the Traffic Group in a desktop connection, an IPsec connection, or an Application Routing profile
  2. By selecting a DSCP value in the field Incoming DSCP of the Traffic Group. This means that all data traffic transmitted via the Unified Firewall and with the matching DSCP value is assigned to the Traffic Group.

 

When assigning the Traffic Group or a DSCP value via Outgoing DSCP outbound for a desktop connection, an IPsec connection, or an Application Routing profile, the following options are available:

  1. Neither the traffic group nor a DSCP value is selected for Outgoing DSCP outbound.
    No traffic shaping takes place.
  2. The Traffic Group is selected but no DSCP value is set for Outgoing DSCP outbound.
    → The data traffic is assigned to a Traffic Group and prioritized or limited according to the Shaping configurationConfiguration.
  3. No Traffic Group is selected but a DSCP value is set for Outgoing DSCP outbound.
    → The Unified Firewall sets the DSCP value for all outbound packets (can be recognized by downstream devices and prioritized accordingly).
  4. A traffic group Traffic Group is selected and a DSCP value is set for Outgoing DSCP outbound.
    → The data traffic is the assigned to a Traffic Group and prioritized or limited according to the Shaping configuration.
    → The Unified Firewall sets the DSCP value for all outbound packets (can be recognized by downstream devices and prioritized accordingly).

 

Behavior of a Traffic Group with or without an assigned DSCP value:

  • In a Traffic Group with an assigned DSCP value, the first packet received with this value is treated as an inbound packet. The source (LAN or WAN) is irrelevant.
  • If a Traffic Group has no DSCP value assigned to it, the allocation of traffic to a Traffic Group can only be achieved by entering it into a desktop connection, an IPsec connection, or an Application Routing profile.


1) Creating a traffic group Traffic Group (required):

1.1) Connect to the Unified Firewall, go to the menu Network → Traffic Shaping → Traffic Groups and click on the "+” icon to create a new traffic group.

...

Info

Specifying a DSCP value in the field Incoming DSCP is optional.



2) Creating a Shaping configuration Configuration (optional):

2.1) Go to the menu Network → Traffic Shaping → Shaping Configurations and click the “+” icon to create a new shaping configurationShaping Configuration.

2.2) Change the following parameters:

  • Interface: Select the Interface used for the Internet connection from the drop-down menu. Only one shaping configuration Shaping Configuration can be created per interface at any time.
  • Maximum Download Bandwith: Enter the Maximum Download Bandwidth of the Internet connection (in this example 100 Mbps).
  • Maximum Upload Bandwith: Enter the Maximum Upload Bandwidth of the Internet connection (in this example 40 Mbps).

...

Hinweis

To apply the Shaping Configuration created in step 2, the Traffic Group created in it needs to be reference referenced from a desktop connection, an IPsec connection, or an Application Routing profile (or in several of these ways).

...