Chapter 6 Bandwidth Management Commands

Figure 2 Managing the Bandwidth of VPN traffic between hosts

How you configure this command affects how you can implement bandwidth management as follows.

Leave this command set to off to be able to create bandwidth management groups for individual unencrypted VPN traffic that are connecting through the same remote IPSec router. With this setting you can also specify the type of traffic either using the service list (like SIP or FTP) or by specifying port numbers in BWM filter settings.

Use off with this command to set the ZyWALL uses the source and destination IP addresses of unencrypted VPN packets in managing the bandwidth of the VPN traffic. This means that it looks at the IP address of the computer that sent the packets and the IP address of the computer to which it is sending the packets. The following figure shows an example of this. The ZyWALL uses the IP addresses of computers A and B to manage the bandwidth of the VPN traffic.

6.3Command Examples

This example displays the LAN interface’s BWM settings and then configures the LAN interface using bandwidth 10,000 bps and the priority-based queuing method.

ras> bm show interface lan

===============================================================================

Interface : LAN

[ Enabled ]

 

bandwidth =

100M (bps)

0 (bps)

allocated bandwidth =

MTU = 1500 (byte)

 

===============================================================================

ras> bm interface iface lan enable bandwidth 10000 prr

This example adds one LAN class using following settings.

Class number: 1

Bandwidth: 5,000,000 bps

Class Name: LAN-class1

ras> bm config load

ras> bm class lan add 1 bandwidth 5M name LAN-class1 ras> bm config save

46

 

ZyWALL (ZyNOS) CLI Reference Guide