sonicwal TZ210

I have a sonic wall TZ210, my bandwith from my ISP is a 6 meg wireless point to point connection. I want to be able to split this circuit giving 3 megs to one company and the other 3 to ours. Can it be done? How? Thank you
rlazojrAsked:
Who is Participating?
 
_TyrantCommented:

Hi rlazojr,

This can indeed be done, but the steps will vary depending on the version of firmware you're running on the SonicWALL. If you're running the General Release firmware, 5.6, this is very easy; simply take the steps I have listed below:

-- Login to the SonicWALL
-- Expand the Network menu
-- Go to the Interfaces page
-- Click the configure icon for the WAN interface
-- Go to the Advanced tab
-- Enable the Bandwidth Management checkboxes for ingress and engress
--- You MUST specify the ingress (in) and egress (out) bandwidth in Kbps
-- Click the OK button to save the configuration

The first of this two step process is over. Step two can be a little trickier depending on how you have laid out the environment. If the two networks are in different Zones (ex. Zone1 and Zone2) you can simply create a Zone1 to WAN and a Zone2 to WAN firewall access rule, allowing only 3 Mbps per each rule. If you have them both in the LAN Zone, for example, then you will need to create an Address Object which represents both networks.

In case of the former:
-- Expand the Firewall menu
-- Go to the Access Rules page
-- Go to the Zone1 to WAN access rules
-- You likely have a default access rule which allows all traffic out to the Internet, or perhaps you have custom access rules for this same purpose. No matter the case, modify the appropriate rule(s).
-- In the access rule you will find a BWM or Ethernet BWM tab; go to it.
-- Under this tab you will have options for ingress and egress Bandwidth Management
-- Set the guaranteed bandwidth to 0 %
-- Set the maximum allowed bandwidth to 50%
-- The same process will be followed for the Zone2 to WAN access rules

In case of the latter:
-- Go to the Address Objects page
-- Scroll to the bottom of the page
-- Click the Add button
-- Create an Address Object for each of the networks
-- As an example:
--- Network 1 is 192.168.0.1 - 192.168.0.254
--- Network 2 is 192.168.1.1 - 192.168.1.254

-- Set a name for each object
-- Specify the appropriate Zone (ex. LAN)
-- Set the Type to Network
-- Specify the subnet network address as the IP (ex. 192.168.0.0)
-- Specify the subnet mask (ex. 255.255.255.0)

-- Expand the Firewall menu
-- Go to the Access Rules page
-- Go to the LAN to WAN access rules (again, for example)
-- You likely have a default access rule which allows all traffic out to the Internet, or perhaps you have custom access rules for this same purpose. In case you have a default rule, you will want to remove it and create a custom rule for each network. In case you have custom rules already, ensure you have one for each network. This is done by specifying the source; you'll choose the Address Objects you created above.
-- In the access rules you will find a BWM or Ethernet BWM tab; go to it.
-- Under this tab you will have options for ingress and egress Bandwidth Management
-- Set the guaranteed bandwidth to 0 %
-- Set the maximum allowed bandwidth to 50%


Once you have taken these steps you will have successfully limited the available bandwidth for each network to 3 Mbps.

I strongly caution that you do this after hours and that you backup your configuration before making any changes. You could possibly create Internet access issues, or completely cut off Internet access if you happen to make a mistake.

I hope that this helps!


Take care,
Tyrant
0
 
Aaron TomoskySD-WAN SimplifiedCommented:
Yes. In network settings tell the sonicwall you have a 6/6 connection. Then you can add bandwidth management to any firewall rule. So make a LAN->wan allow, 50% max 50% guaranteed them make a lan2 (you do have a LAN2 right?) -> wan 50%, 50% allow rule.
0
 
rlazojrAuthor Commented:
I appreciate the tip but can you be a little more specific I'm not familiar with Sonicwall
0
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

 
Aaron TomoskySD-WAN SimplifiedCommented:
Is the sonicwall all setup right now with both companies having Internet access but not able to talk to each other? Like lan1 and lan2?
0
 
rlazojrAuthor Commented:
Tyrant I appreciate the thorough explanation I will follow your instructions tonight and keep you updated on what the results were.
0
 
rlazojrAuthor Commented:
I just got a chance to implemt this thanks tyrant
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.