Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Dual-limiter (per-user & overall limits)?

    Scheduled Pinned Locked Moved Traffic Shaping
    5 Posts 3 Posters 2.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jasonlitka
      last edited by

      Is it possible to setup limiters for both per-user and combined for a firewall rule?  I've got a public WiFi network for company visitors, employee cell phones, etc. that shares bandwidth with everyone else.  What I want to do is limit individual users on that network to 2M/2M and all the users combined to 8M/8M.  I've had no issue with creating limiters to do one or the other, but not both.

      I can break anything.

      1 Reply Last reply Reply Quote 0
      • D
        dreamslacker
        last edited by

        Would it be better to set a limiter and then traffic shaper upperlimit instead?

        I think it might be possible to do a double limit by using the In/ Out limiter per interface.

        i.e.  In limiter for per user by using a dynamic pipe using the destination/ source mask.  Then the out limiter will be common across all the traffic shaping rules by using a fixed pipe without masking.

        1 Reply Last reply Reply Quote 0
        • E
          eri--
          last edited by

          What dreamslacker said or you put the per user limiters on lan and the global limiters on the WAN.

          1 Reply Last reply Reply Quote 0
          • J
            jasonlitka
            last edited by

            @dreamslacker:

            Would it be better to set a limiter and then traffic shaper upperlimit instead?

            I think it might be possible to do a double limit by using the In/ Out limiter per interface.

            i.e.  In limiter for per user by using a dynamic pipe using the destination/ source mask.  Then the out limiter will be common across all the traffic shaping rules by using a fixed pipe without masking.

            I don't see where I can apply a limiter to an entire interface, just the firewall rules.

            I can break anything.

            1 Reply Last reply Reply Quote 0
            • D
              dreamslacker
              last edited by

              @Jason:

              I don't see where I can apply a limiter to an entire interface, just the firewall rules.

              Under floating rules, you can use the In on the specific interface to match traffic.

              e.g.  In on LAN would imply traffic going from LAN to WAN (or another subnet) -> outbound traffic

              Naturally, this applies to any other shaper rules you may have for specific protocols/ source/ destination masks.  In this case, you can still apply the In (if there are no other limiters applicable) or Out (if there is a per user limit already applied).

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.