We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

Attention

Barracuda CloudGen Firewall version 8.0 is a cloud-only version. It is currently not available for on-premises deployments and can only be deployed in Microsoft Azure, Amazon Web Services, or Google Cloud Platform public clouds.

Example - Traffic Shaping for WAN Connections

  • Last updated on

This article provides information on how to apply the default traffic shaping scheme to a new interface and how to add the basic QoS profile to a static and a dynamic ISP link. 

The steps in this article uses the following example settings:

ISP 1  ISP 2 (dynamic) Firewall Rule
Port eth1 Port dhcp Name LAN-2-INTERNET
Traffic Outbound Rate 10 Mbit/Sec Traffic Outbound Rate 2 Mbit/Sec Service HTTPS
Traffic Inbound Rate 10 Mbit/Sec Traffic Inbound Rate 2 Mbit/Sec  

Step 1. Create a New Interface

To create a new interface and assign it to the default Basic profile, complete the following steps.

  1. Go to CONFIGURATION > Configuration Tree > Box > Traffic Shaping.
  2. Click Lock.
  3. In the Interface section, right-click and select Add new Interface.
  4. In the Interface Tree Mapping window, set the following settings:

    Setting Description
    Interface

    The name of the interface. For example, enter eth1 for ISP 1 and dhcp for ISP 2.

    To apply traffic shaping, select or enter your specific port name as it is listed on the CONTROL > Network page. For dial-up connections like xDSL, ISDN, or Wireless WAN, you must enter the correct port name in order to apply traffic shaping that uses dynamic IP addresses. For example, if your xDSL port is listed as xDSL(ppp1), enter ppp1 in the Interface field.

    Assigned Profile  The QoS profile to assign to this interface. For example, Default.
    Rate

    In this section, select Enable Shaping and specify limits for the Outbound and Inbound bandwidth settings. For example, enter 10 Mbit/Sec as the bandwidth limits for ISP 1 and 2 Mbit/Sec as the bandwidth limits for ISP 2.

  5. Click OK.
  6. Click Send Changes and Activate.

For advanced options, see How to Create a QoS Profile.

Step 2. Apply the QoS Band to a Firewall Rule

Select the QoS Band in the Policy settings of an access or application rule.

  1. Go to CONFIGURATION > Configuration Tree > Box > Virtual Servers > your virtual server > Assigned Services > Firewall > Forwarding Rules.
  2. Click Lock.
  3. Create or double-click the access or application rule to which you are applying the QoS Band. For example, LAN-2-INTERNET-https.
    • To apply the QoS Band to an access rule:
      • Select the QoS Band from the QoS Band (Fwd) and QoS Band (Reply) list in the Policy section. For example, Background.

        The outbound and inbound rate of a virtual interface is ignored when the QoS Band policy in the corresponding access rule is set to No-Shaping.

    • To apply the QoS Band to an application rule:
      • Select the Change QoS Band (Fwd) check box in the Policy section and select the QoS Band from the list.

  4. Click OK.
  5. Click Send Changes and Activate.

On the FIREWALL > Live page, verify that the correct QoS band was applied to your session.

Last updated on