I need to restrict the bandwidth of one of the interface. A firewall policier will set like below
# set firewall policer policer-1mb if-exceeding bandwidth-limit 1m
# set firewall policer policer-1mb if-exceeding burst-size-limit 625000
# set firewall policer policer-1mb then discard
According to the help explanation. "discard" mean discard the packet. Is that mean the current connection will interrupt?
Lets say the user download file from google drive with extreme high speed. As the interface connected to that user's PC was restricted to 1Mbps. Will the download speed lower to 1Mbps or all the connection to that interface will interrupt?
Answering to your query, if you apply the policing to an interface without any firewall filter specifying the Source IP and Destination IP then it will restrict the bandwidth to 1 Mbps for all the traffic coming towards that interface.
Thanks noobmaster. Restrict all traffic to have only 1Mbps on an interface is what I need. I just need to make sure "discard" doesn't mean block/disconnect the traffic.
Do you know the effect of "loss priority"?
You may wish to refere to the following techpub document to understand loss-ppriority:-
In a nutshell, it defines prioritizing what traffic to be dropped.
Hello ScreenJun. Thanks for the tips. Seems that "loss priority" is the advanced version of "discard". I'm going to try the "discard" action first.