Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Hard limits to Vlan and hard limits to IP

    Scheduled Pinned Locked Moved Traffic Shaping
    9 Posts 3 Posters 1.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kabrutus
      last edited by

      I would like to setup hard limits. I have a 100M pipe up/down.

      I would like to set up a VLAN with only 10M for the entire vlan. From that vlan i would like to limit each IP 1.5M max. Is this possible? I tried doing the limiters, but that only does the 10M for the vlan and not the IP's.

      1 Reply Last reply Reply Quote 0
      • NogBadTheBadN
        NogBadTheBad
        last edited by NogBadTheBad

        I think you can do one or the other with limiters, you'll need to read up on it.

        Have a play with the masking if you want to limit per host.

        https://www.netgate.com/docs/pfsense/trafficshaper/limiters.html

        Andy

        1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

        1 Reply Last reply Reply Quote 0
        • K
          kabrutus
          last edited by

          I have read all of that. It is not clear on how to set it up which is why i am here. I tried reading on how to setup the guaranteed bandwidth, but it doesn't specify how to set it up.

          Hoping someone has done it before and can shed some light.

          1 Reply Last reply Reply Quote 0
          • NogBadTheBadN
            NogBadTheBad
            last edited by

            https://forum.netgate.com/topic/102217/limiter-bandwidth-per-ip/4

            Andy

            1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

            1 Reply Last reply Reply Quote 0
            • K
              kabrutus
              last edited by

              using the captive portal seems too much like a hack. Does PFSense not support vlan bandwidth limit and IP bandwidth limit on the same interface?

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                Set limiter with a 32-bit mask. That will give you a queue per host of that value.

                You cannot do both the 10M on the interface and the 1.5M per host.

                Generally, if you want to limit on the interface, do the interface limiter and don't worry about the per-host limiter. What do you care if a host is getting more than 1.5 if the overall limit is being policed at 10?

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • K
                  kabrutus
                  last edited by

                  Ok, so i wasn't going crazy. Seems odd that you cant do both. I guess you can only do both if you use the captive portal and interface limit.

                  Sometimes we have clients that order an amount of bandwidth and they request hard limits on clients.

                  do they take feature request?

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate
                    last edited by Derelict

                    redmine.pfsense.org.

                    You could do what you want but not all on one pfSense. And, if you think about it, one of the values has to be controlling. If you limit the whole circuit to 10M and 8 1.5M customers stress their circuits, someone is going to get less than 1.5M.

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    K 1 Reply Last reply Reply Quote 0
                    • K
                      kabrutus @Derelict
                      last edited by

                      @derelict i get it. It's just something that is used often in our world

                      1 Reply Last reply Reply Quote 0
                      • First post
                        Last post
                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.