thanks, i will read it 1st

Your RPD are inside the IPSec VPN? If yes, you can't shape what's inside … You could, but you'd need 2 pfSense boxes at both end. Like that : Network #1 <--> pfSense (Shaper) <--> pfSense (IPSec) <--> Internet <--> pfSense (IPSec) <--> pfSense (Shaper) <--> Network #2 The pfSense (Shaper) would have normal LAN/WAN scenario that the spaher is happy with and the pfSense (IPSec) would take care of the Internet connection and IPSec. In this scenario you'll have to use 4 different Class C private IP range. MageMinds

solved, just applied rules again, and now traffic shaper does not limit LAN bandwidth , why? I do not why! but it works.

Create a set of queues that have higher priority then other regular traffic (not as high as the ACK queues of course), create a rule set that matches your desired traffic patterns, and assign them to your newly created queues. Since these queues will be higher priority then the rest of the traffic on the network, and those rules are the only ones sending traffic to them, your desired traffic will have higher priority over all the rest of the traffic.

Use the wizard and tell it the IP address of your Asterisk. If you want to create rules by yourself here are mine. I have an alias for my Asterisk server as you can see in the image below. [image: yiao8.png]

This is a very old post, but could you give a follow up to what you did to fix your problem, if you ever got it resolved?

start with these: http://doc.pfsense.org/index.php/Traffic_Shaping_Guide http://devwiki.pfsense.org/wikka.php?wakka=HFSCBandwidthShapingNotes …

Good morning :) Yeah i set 1% i even put it a blank no luck :( jigp Davao City

ok … I choose mikrotik.

Error for post above reads php: : There were error(s) loading the rules: /tmp/qwanRoot.rules:30: syntax error pfctl: Syntax error in config file: pf rules not loaded pfctl: load anchors - The line in question reads [30]:

Thanks for the reply. I have reinstalled PFSENSE this morning. I'm gonna try once again, maybe after a few reading. I am not familiar with vi editor, certainly I messed up the file. I thought it's just like editing in notepad or something.

If you are putting all traffic from the "default" alias through a queue that is set to have an Upplerlimit m2 of 500Kb then EVERYTHING going through that queue will have a maximum of 500 Kb/s traffic, not just individual connections/states. At least that is how I understand it, feel free to correct me :)

By the way, you get errors like that where all child queues show as having no parent queue when you try to set a rule to have both interfaces the same (found this out when trying to get squid transparent proxy and traffic shaping to work together before I found http://forum.pfsense.org/index.php/topic,14436.0.html ;))

I don't know if this is the right answer but if it works the same way as squid on transparent proxy the same fix may work. As far as I understand (prob wrong) is that is uses the internal routing rather then sending it back to the LAN ip which is why the traffic shaping doesn't detect it.