how to limit the bandwidth of a VLAN

Gel
Gel Posts: 33  Freshman Member
First Comment Friend Collector Third Anniversary

Hi, I have one more question. One of my WANs has a speed of 500Mb Full Duplex, and I would like 100Mb of that speed to be directed to a specific VLAN. How can I do this on the USG Flex 200?

All Replies

  • Gel
    Gel Posts: 33  Freshman Member
    First Comment Friend Collector Third Anniversary

    I've tried everything, and it doesn't work. They said I needed to create a rule in object/address/GeoIP, but that didn't work either. I need to resolve this issue because I need to limit the bandwidth for my VLANs.

  • Gel
    Gel Posts: 33  Freshman Member
    First Comment Friend Collector Third Anniversary

    1- I have this VLAN40 for example. Would the configuration be the same in this part?

    image.png

    2 - in BWM, editing vlan40, what do I need to change in these options so that its bandwidth is 50Mb?

    image.png

    3- In address/Geo ip, do I need to create this rule?

    image.png

    I've tried everything and I can't limit the download and upload bandwidth of the VLANs. If anyone can help me, I'd be very grateful.

  • Zyxel_Tina
    Zyxel_Tina Posts: 159  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers First Comment

    Hi @Gel,

    From the second screenshot you shared, if your goal is to allow the traffic between VLAN40 and the WAN and limit the speed to 100 Mbps, you will need to adjust the BWM (Bandwidth Management) settings.

    Specifically, the Outgoing Interface should be set to the desired WAN, and the Guaranteed Bandwidth should be configured as 100,000 kbps.

    Zyxel Tina

  • PeterUK
    PeterUK Posts: 3,969  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited August 21

    The way in which the BWM works and the Guaranteed Bandwidth is based on interface Egress limiting

    Before we begin I recommand this option by SSH
    configure terminal
    bwm control-tcp-ack
    write

    So let say you have a LAN and VLAN subnet and you don't set any interface Egress limiting but use BWM I'm guessing this is download speed?

    So
    incoming VLAN40
    outgoing WAN

    So this is when VLAN40 makes outgoing connections to WAN

    inbound is download
    outbound upload

    and enter your speed if it needs to be Guaranteed and check maximize bandwidth for extra speed if available or set maximum box as Guaranteed speed for limiting

    so with that rule in place if VLAN download at 100Mb can LAN affect the VLAN Guaranteed download speed and the answer is YES! To which your rate limit is determined by your ISP rate limiting of 500Mb

    So how do stop that so that Guaranteed download speed is for VLAN meet well download speed has a interesting where if you rate limit at 500Mb you would think the USG then handles it but no because your ISP rate limit you at 500Mb meaning the USG does not fully handle the speed so how do you stop this? The only way is the rate limit less then your ISP rate limit and finding the balance of limit too much and not enough can be a art. but upload limit does not have this problem but you limit like -1Mb less then your ISP rate limit

    But this only works if you Egress rate limit on one interface then you have the problem of that interface rate limits for all traffic on that interface which may or may not be a problem.

    So back to you have 500Mb download limit and you have two subnet LAN and VLAN on VLAN40 interface where its got Egress bandwidth you limit at 100Mb along with your BWM rule to Guaranteed speed then on the other LAN subnet for interface Egress bandwidth you limit at say 380Mb~

    Now when LAN subnet tries to be greedy when downloading it can't due to your total download bandwidth is being limited by USG and the BWM rule insures 100Mb to VLAN

    the priority setting are another thing and how they work with maximize bandwidth usage option so best to use 7 for now.