SRX

Expand all | Collapse all

set download bandwdith on SRX

Jump to Best Answer
  • 1.  set download bandwdith on SRX

    Posted 08-03-2015 21:57

    Hello,

     

    I would like to also set download bandwidth limit for ge-0/0/11. when i set followings coonfig there seem like to limit only upload. please see my current configuration below;

    -----------------------------------

    ge-0/0/11 {
    unit 0 {
    family inet {
    filter {
    input filter-1.5mpbs;
    }
    address 192.168.102.1/24;
    }
    }
    }

    -------------------------

    firewall {
    policer 1.5mpbs {
    if-exceeding {
    bandwidth-limit 1048576;
    burst-size-limit 262144;
    }
    then discard;
    }
    filter filter-1.5mpbs {
    term a {
    from {
    source-address {
    192.168.102.0/24;
    }
    }
    then {
    policer 1.5mpbs;
    accept;
    }
    }
    term b {
    then accept;
    }
    }
    }

     

    thanks,

    George



  • 2.  RE: set download bandwdith on SRX

     
    Posted 08-03-2015 22:13

    Hello ,

     

    For setting the download limit , I would suggest to make the same filter as Input in your WAN Interface  .

     

    You can try putting the same filter as output to the LAN interface :

     

    ge-0/0/11 {
    unit 0 {
    family inet {
    filter {
    input filter-1.5mpbs;

    output filter-1.5mpbs;
    }
    address 192.168.102.1/24;
    }
    }
    }

     



  • 3.  RE: set download bandwdith on SRX

    Posted 08-03-2015 23:00

    Hello,

     

    download bandwdith still hight. upload is okey.

     

    ge-0/0/11 {
    unit 0 {
    family inet {
    filter {
    input filter-1.5mpbs;
    output filter-1.5mpbs;
    }
    address 192.168.102.1/24;
    }
    }
    }

     

    thanks,

    George



  • 4.  RE: set download bandwdith on SRX

     
    Posted 08-03-2015 23:07

    Hello ,

     

    Did you try to put this as input in your WAN Interface and check  ? Please check the same and let us know . 



  • 5.  RE: set download bandwdith on SRX

    Posted 08-03-2015 23:17

    Hello,

     

    sorry i just confirm that should i input also in my WAN link for that command too?? if so others port maybe slow too?? 

     

    here's WAN interface

    ge-0/0/7 {
    unit 0 {
    family inet {
    address 100.80.0.162/30;
    }
    }
    }

     

    thanks,

    George



  • 6.  RE: set download bandwdith on SRX

     
    Posted 08-03-2015 23:41

    Hello ,

     

    Normally if you want to rate limit the internet bandwidth  , we apply it in the input WAN ineterface . Is this your requirment or Just you need to rate limit to only one LAN segment ?



  • 7.  RE: set download bandwdith on SRX

    Posted 08-03-2015 23:51

    Hello,

     

    i just want to rate limit to only one LAN segment (192.168.102.0/24, ge-0/0/11). here is my config;

    WAN interface ge-0/0/7

    LANs ge-0/0/11 (limit upload and download should be 1.5 mbps)

    ge-0/0/4 (full bandwidth)

     

    thanks,

    George



  • 8.  RE: set download bandwdith on SRX
    Best Answer

     
    Posted 08-03-2015 23:58

    Hello ,

     

    Found the issue , we need to make a different firewall filter :

     

    filter filter-1.5mpbs-download {
    term a {
    from {
    destination-address {
    192.168.102.0/24;
    }
    }
    then {
    policer 1.5mpbs;
    accept;
    }
    }
    term b {
    then accept;
    }
    }
    }

     

    Apply it in interface :

     

    ge-0/0/11 {
    unit 0 {
    family inet {
    filter {
    input filter-1.5mpbs;
    output filter-1.5mpbs-download;
    }
    address 192.168.102.1/24;
    }
    }
    }



  • 9.  RE: set download bandwdith on SRX

    Posted 08-04-2015 01:36

    Hello Sam,

     

    apprecaite your kindess. It's working.

     

    thanks,

    George



  • 10.  RE: set download bandwdith on SRX

     
    Posted 08-04-2015 02:20

    Hello George ,

     

    Thanks for the update . Glad that it worked .



  • 11.  RE: set download bandwdith on SRX

    Posted 11-19-2017 08:01

    Hi

    This policer configuration is not working for virtual routing instances.

    Let me know is there any work around.

    Thanks,

    AN