VLAN Egress Bandwidth Not Respected on ATP?

NEP
NEP Posts: 72  Ally Member
First Comment Friend Collector Second Anniversary
in Security

Hello,

I was setting up some equipment today which has minimum bandwidth requirements. So, I ran a speed test and was surprised by the results. Currently, the ingress/egress bandwidth is set to 10240 Kbps on the ATP. According to the docs, ingress is just filler for later use. Anyway, the speed test showed roughly 10 Mbps download but it was 70 Mbps upload.

Why would that be? Do I also have to set bandwidth settings on the switch port?

Hopefully someone can point me in the correct direction. Thanks.

All Replies

  • PeterUK
    PeterUK Posts: 3,392  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited October 8

    so you want to limit upload? that be by the WAN interface not LAN

  • NEP
    NEP Posts: 72  Ally Member
    First Comment Friend Collector Second Anniversary

    Yes, I want to limit the upload going out the WAN.

    How can I add the bandwidth limit to the WAN if it's also used by other LANs?

    Why wouldn't it work as configured? My understanding is that ingress is traffic heading to the connected device from the ZyWall, while egress is traffic heading to the ZyWall from the connected device. Forgive my ignorance, but is that incorrect?

  • PeterUK
    PeterUK Posts: 3,392  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited October 8

    So on LAN interface

    Egress is from Zywall to your devices

    Ingress is to Zywall from your devices

    However Ingress rate limiting due to the way its always been does not work well.

  • NEP
    NEP Posts: 72  Ally Member
    First Comment Friend Collector Second Anniversary

    Does "So on LAN interface" mean that WAN is then the opposite?

    Regardless, is there a way to limit this VLAN's traffic leaving on the WAN?

  • PeterUK
    PeterUK Posts: 3,392  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    WAN is

    Egress is from Zywall to internet

    Ingress is to Zywall from internet

    You can limit more by BWM rules

    and a option I enable by SSH is

    configure terminal
bwm control-tcp-ack

  • NEP
    NEP Posts: 72  Ally Member
    First Comment Friend Collector Second Anniversary

    Thanks. I'll look into that tomorrow.

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）