Solved

bandwidth statement in tunnel interface

Posted on 2014-03-16
5
469 Views
Last Modified: 2014-03-31
My WAN link is 3 Mbps and I see 2 VPN IPSec tunnel interfaces configured on the router. What I don't understand is each tunnel has a bandwidth statement as 4500 Kbps. I am not sure how I should understand this bandwidth allocated for the tunnel. I only have 3Mbps and my 2 tunnel interfaces have bandwidth as 9000 Kbps. Thanks
0
Comment
Question by:leblanc
5 Comments
 
LVL 20

Expert Comment

by:masnrock
Comment Utility
What type of equipment are you using, and was it ever on a higher bandwidth connection?
0
 
LVL 1

Accepted Solution

by:
netdsg earned 250 total points
Comment Utility
The bandwidth statement is only evaluated when QoS is configured on the router.  Do you have QoS configured?  If not the attribute is not relevant.

Check for a service policy applied to the physical interface the tunnel uses or on the tunnel interface itself.
0
 
LVL 1

Author Comment

by:leblanc
Comment Utility
WE are all Cisco gear and yes there is QoS configured on it. What I don't understand is how you can set the bandwidth higher than your actual physical link.
0
 
LVL 68

Assisted Solution

by:Qlemo
Qlemo earned 250 total points
Comment Utility
The tunnel bandwidth is not bound to the restrictions of a physical interface, as it acts as virtual interface. And your physical interface bandwidth certainly is at least 10Mbit/s (more probably 100Mbit/s). So, even if bandwidth limits are checked against the maximum possible bandwidth for the interface, it's never checked if the aggregated bandwidth of all tunnel interfaces exceeds that.

Of course it would be much more useful to have a setting of "use up to 50%" instead of a hard limit without relation to what is really avaiable.
0
 
LVL 1

Expert Comment

by:netdsg
Comment Utility
Can you post the tunnel interface config as well as the config for the physical interface that it traverses?  This will give us some insight into what the bandwidth command is doing.
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Network ports are the threads that hold network communication together. They are an essential part of networking that can be easily ignore or misunderstood, my goals is to show those who don't have a strong network foundation how network ports opera…
In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now