It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see End-of-Support for CloudGen Firewall Firmware for further information on our EoS policy.

Example - Traffic Shaping for WAN Connections

  • Last updated on

This article provides information on how to apply the default traffic shaping scheme to a new interface and how to add the basic QoS profile to a static and a dynamic ISP link. 

The steps in this article uses the following example settings:

ISP 1 ISP 2 (dynamic)Firewall Rule
Traffic Outbound Rate10 Mbit/SecTraffic Outbound Rate2 Mbit/SecServiceHTTPS
Traffic Inbound Rate10 Mbit/SecTraffic Inbound Rate2 Mbit/Sec 

Step 1. Create a New Interface

To create a new interface and assign it to the default Basic profile, complete the following steps.

  1. Go to CONFIGURATION > Configuration Tree > Box > Traffic Shaping.
  2. Click Lock.
  3. In the Interface section, right-click and select Add new Interface.
  4. In the Interface Tree Mapping window, set the following settings:


    The name of the interface. For example, enter eth1 for ISP 1 and dhcp for ISP 2.

    To apply traffic shaping, select or enter your specific port name as it is listed on the CONTROL > Network page. For dial-up connections like xDSL, ISDN, or Wireless WAN, you must enter the correct port name in order to apply traffic shaping that uses dynamic IP addresses. For example, if your xDSL port is listed as xDSL(ppp1), enter ppp1 in the Interface field.

    Assigned Profile The QoS profile to assign to this interface. For example, Default.

    In this section, select Enable Shaping and specify limits for the Outbound and Inbound bandwidth settings. For example, enter 10 Mbit/Sec as the bandwidth limits for ISP 1 and 2 Mbit/Sec as the bandwidth limits for ISP 2.

  5. Click OK.
  6. Click Send Changes and Activate.

For advanced options, see How to Create a QoS Profile.

Step 2. Apply the QoS Band to a Firewall Rule

Select the QoS Band in the Policy settings of an access or application rule.

  1. Go to CONFIGURATION > Configuration Tree > Box > Virtual Servers > your virtual server > Assigned Services > Firewall > Forwarding Rules.
  2. Click Lock.
  3. Create or double-click the access or application rule to which you are applying the QoS Band. For example, LAN-2-INTERNET-https.
    • To apply the QoS Band to an access rule:
      • Select the QoS Band from the QoS Band (Fwd) and QoS Band (Reply) list in the Policy section. For example, Background.

        The outbound and inbound rate of a virtual interface is ignored when the QoS Band policy in the corresponding access rule is set to No-Shaping.

    • To apply the QoS Band to an application rule:
      • Select the Change QoS Band (Fwd) check box in the Policy section and select the QoS Band from the list.

  4. Click OK.
  5. Click Send Changes and Activate.

On the FIREWALL > Live page, verify that the correct QoS band was applied to your session.

Last updated on