Solved

Limit bandwidth by LAN IPs using SonicWall

Posted on 2009-05-14
5
9,572 Views
Last Modified: 2012-05-07
Hello,

I have Sonicwall TZ170.. I live in a shared house and there are four of us.  I would like to share the bandwidth equally amonst ourselves.  We have 2MB Broadband therefore would like 0.5 MBps per person.

How can I do this in Sonicwall TZ170?
0
Comment
Question by:fais79
  • 3
5 Comments
 
LVL 6

Expert Comment

by:KevinCovert
ID: 24397474
From the Soniwall SIte:
http://www.sonicwall.com/downloads/SonicWALL_SonicOS_Standard_3.1_Administrators_Guide.pdf
"
You must select Bandwidth Management on the WAN > Ethernet tab. Click Network, then
Configure in the WAN line of the Interfaces table, and enter your available bandwidth in the
Available WAN Bandwidth (Kbps) field
"
I have this setup on my Sonicwall NSA 2400, I would set it up that each of you have a gauranteed .5mb and not a static .5 that way when the others are gone, the one still home can enjoy the full pipe.

KMC
0
 
LVL 6

Expert Comment

by:KevinCovert
ID: 24397521
Sorry its on page 31.

After you apply bandwidth management on your WAN, you then go to your firewall rule LAN > WAN and there should be some additional settings on that policy now.  Mine is a NSA 2400, but it looks like the attached image.

Its the rule that is ANY-ANY-ANY from your LAN > WAN

5-15-2009-9-30-18-AM.png
0
 

Author Comment

by:fais79
ID: 24398509
I have 2Mbps broadband connection and would like to share it equally four ways between house mates therefore, what figures should I specify in Soniwall??
0
 
LVL 6

Accepted Solution

by:
KevinCovert earned 500 total points
ID: 24399162
2Mbs = 2000Kbs /4 = 500Kbs

that would be the guaranteed bandwidth, and I would set the maximum to 2000Kbs.

In order to do this you will have to create 4 separate rules one for each user, and they will have to have a static IP address.

Then create a firewall policy for each of those IP addresses for LAN>WAN and specify the bandwidth throttling.

If you were using an 192.x.x.x

So your firewall policies would look something like this

Source       Dest           Service               Action
192.x.x.2   ANY           ANY                    Allow
192.x.x.3   ANY           ANY                    Allow
192.x.x.4   ANY           ANY                    Allow
192.x.x.5   ANY           ANY                    Allow

And on each of those policies should have the 500kbs min 2000kbpmax
Be sure that these rules are above the

ANY ANY ANY Allow

Otherwise your policies will not apply.

Hope this helps.
0
 

Expert Comment

by:isplus
ID: 27734391
To eliminate the need to make DHCP Reservations to give fixed IP addresses, you could use the MAC address in the rule instead of the IP Address. This sames a step. This is very useful when you have 50+ rules to set up for something like a school where you have students who have to "share" the internet.
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Suggested Solutions

It happens many times that access list (ACL) have to be applied to outgoing router interface in order to limit some traffic.This article is about how to test ACL from the router which is not very intuitive for everyone. Below scenario shows simple s…
There are two basic ways to configure a static route for Cisco IOS devices. I've written this article to highlight a case study comparing the configuration of a static route using the next-hop IP and the configuration of a static route using an outg…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now