Dual-limiter (per-user & overall limits)?

[jasonlitka]

Is it possible to setup limiters for both per-user and combined for a firewall rule?  I've got a public WiFi network for company visitors, employee cell phones, etc. that shares bandwidth with everyone else.  What I want to do is limit individual users on that network to 2M/2M and all the users combined to 8M/8M.  I've had no issue with creating limiters to do one or the other, but not both.

[dreamslacker]

Would it be better to set a limiter and then traffic shaper upperlimit instead?

I think it might be possible to do a double limit by using the In/ Out limiter per interface.

i.e.  In limiter for per user by using a dynamic pipe using the destination/ source mask.  Then the out limiter will be common across all the traffic shaping rules by using a fixed pipe without masking.

[eri--]

What dreamslacker said or you put the per user limiters on lan and the global limiters on the WAN.

[jasonlitka]

@dreamslacker:

Would it be better to set a limiter and then traffic shaper upperlimit instead?

I think it might be possible to do a double limit by using the In/ Out limiter per interface.

i.e.  In limiter for per user by using a dynamic pipe using the destination/ source mask.  Then the out limiter will be common across all the traffic shaping rules by using a fixed pipe without masking.

I don't see where I can apply a limiter to an entire interface, just the firewall rules.

[dreamslacker]

@Jason:

I don't see where I can apply a limiter to an entire interface, just the firewall rules.

Under floating rules, you can use the In on the specific interface to match traffic.

e.g.  In on LAN would imply traffic going from LAN to WAN (or another subnet) -> outbound traffic

Naturally, this applies to any other shaper rules you may have for specific protocols/ source/ destination masks.  In this case, you can still apply the In (if there are no other limiters applicable) or Out (if there is a per user limit already applied).