BWM feature rule to bypass interface Egress rate limit

PeterUK
PeterUK Posts: 4,063  Guru Member
250 Answers 2500 Comments Friend Collector Eighth Anniversary
in Security Ideas

How this would work and be useful if you don't have a L3 switch

On a FLEX 200 (non H) you limit on the interface LAN1 egress to 204800kbps but you have LAN2 and you want LAN1 to receive at full speed from LAN2 thats where this rule comes in to bypass the interface Egress rate limit by a rule LAN2 to LAN1.

Now you might think why not just not set a interface Egress rate limit and use BWM rules? Does not work the more rules you have like

rule 1 from LAN1 to WAN max inbound to 204800kbps

That on its own would work but if you did

rule 1 from LAN1 to WAN TCP_any Guaranteed inbound 102400kbps max inbound to 204800kbps
rule 2 from LAN1 to WAN UDP_any Guaranteed inbound 102400kbps max inbound to 204800kbps

Now you have a problem you want max speed at any given time but the max of 200Mb but with the above its 400Mb if both protocols are used where as with interface Egress rate limit at 204800kbps the two protocols stay under 200Mb and BWM does what it can to deliver so if TCP is only used 200Mb if UDP is only use 200Mb if both 200Mb

1
Up Down
1 votes

Active · Last Updated

Comments

  • Zyxel_Melen
    Zyxel_Melen Posts: 3,850  Guru Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @PeterUK

    So, you need:

    1. From LAN 1 to any egress to 204800kbps (inbound 204800kbps).
    2. From LAN 1 to LAN 2 without the limit above.

    For this purpose, if you use:

    1. rule 1 from LAN1 to WAN max inbound to 204800kbps.
    2. rule 1 from LAN1 to WAN TCP_any Guaranteed inbound 102400kbps max inbound to 204800kbps
    3. rule 2 from LAN1 to WAN UDP_any Guaranteed inbound 102400kbps max inbound to 204800kbps

    With these three rules (what's the priority of these rule?), the maximum speed will not reach 400M but share with in 200M?

    Zyxel Melen


  • PeterUK
    PeterUK Posts: 4,063  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    edited 3:16PM

    So Melen

    Its more from LAN2 to LAN1 where LAN1 is receiving

    That not how BWM rules(but I with test to be sure) works priority is 7 (on all rules as the way priority works is unforgiven unless used correctly with the current way it works) if the rules follow in order the 1st rule will only happen for all protocols rule 2 and 3 will not happen?

    Edit after testing here yes rule 1 is used the other rules are not used

    Then the other problem is what if you have traffic from WAN to LAN1 which will push over the 200Mb if both sides LAN1 to WAN and WAN to LAN1 happen at the same time.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）