How to Configure Bandwidth Management for FTP and HTTP Traffic?

Zyxel_Charlie

SCENARIO DESCRIPTION:

This is an example of using ZyWALL/USG Bandwidth Management (BWM) to control the bandwidth allocation for FTP and HTTP traffic. You can use source interface, destination interface, destination port, schedule, user, source, destination information, DSCP code and service type as criteria to create a sequence of specific conditions to allocate bandwidth for the matching packets. When the BWM is configured, you can limit bandwidth consuming services, such as FTP, while providing consistent HTTP service with bandwidth guarantees.

SETUP/STEP BY STEP PROCEDURE:

1. In the ZyWALL/USG, go to CONFIGURATION > BWM > Configuration > Add Policy, select Enable and type FTP Any-to-WAN as the policy’s Description. 

Leave the Incoming Interface to any and select the Outgoing Interface to be wan1. Select Service Type to be the Service Object and select FTP from the list box. 

Set the Guaranteed Bandwidth Inbound to 200 (kbps) and set Priority 5 (low-to-medium). Set the Maximum to 400 (kbps). Set the Guaranteed Bandwidth Outbound to 200 (kbps) and set Priority 5. Set the Maximum to 400 (kbps). 

In order to view the result later, set the Log setting to be log alert. Click OK to return to the General screen.

Set Up the Bandwidth Management for HTTP on the ZyWALL/USG

1. In the ZyWALL/USG, go to CONFIGURATION > BWM > Configuration > Add Policy, select Enable and type HTTP Any-to-WAN as the policy’s Description (Optional).

Leave the Incoming Interface to any and select the Outgoing Interface to be wan1. Select Service Type to be the Service Object and select HTTP from the list box.

Set the Guaranteed Bandwidth Inbound to 600 (kbps) and set higher Priority 3. Set the Maximum to 800 (kbps). Set the Guaranteed Bandwidth Outbound Priority 3.

In order to view the result later, set the Log setting to be log alert. Click OK to return to the General screen.

Set Up the Bandwidth Management Global Setting on the ZyWALL/USG 

1. In the ZyWALL/USG, go to CONFIGURATION > BWM > BWM Global Setting, select Enable.

VERIFICATION:

1. Access the Internet to generate FTP traffic and HTTP traffic. In this example, a 123 MB file is downloading from an FTP server. The FTP file should download slowly.

2. Go to the ZyWALL/USG Monitor > Log, you will see [alert] log message such as below.

What Can Go Wrong? 

1. If the “outbound” in the guaranteed bandwidth settings apply to traffic going from the connection initiator to the outgoing interface. “Inbound” refers to the reverse direction.