-Newbie- How do I SPLIT one WAN connection i two LAN's with fixed Bandwidth?



  • Ok, I'm fairly new to pfSense, and I have just gotten my new internetconnection from my ISP - a brand new fiberoptic full duplex 60/60 line. I'm going to share this connection with my next door neigbour, and he want's to pay me a certain amout of my connection fee to get a small part of the connection.

    The connection is run through pfSense, with one WAN connection and dual LAN.

    I understand that regulating bandwitdh is done with limiters, and what I would like is to create one 50IN_LIMIT and one 50OUT_LIMIT (for LAN1), and then also create a 10INLIMIT and one 10OUTLIMIT (for LAN2)

    Then I have also understood that theese limiters need to be applied in rules in order to work. But this is where I don't exactly know how to proceed. Do I have to apply theese limiters to all rules for i.e LAN1, or do I just make one general rule for LAN1 that will make this work? - a small easy to follow tutorial on this would be nice, as I'm a newbie to the Linux/FreeBSD/pfSense syntax and inner workings (My personal experience is just with aplliances like ZyXel and SonciWall etc)

    Is this the correct procedure in order to do this, or can it be achieved in other and maybe simpler ways, as were just talking a fixed split here?

    I have no need's to dynamically adjust bandwidht based on contents, time of day, traffic etc…. my Neigbour pays me for a 10mbit full duplex share of my 60mbit full duplex WAN connection, and I just want to make sure that he doesn't get more than he pays for, and hogs up all the resources on my side with his activity (atleast not without asking for more, and pay upfront) :-)


  • Rebel Alliance Developer Netgate

    Only traffic put into the limiter in firewall rules will be in the limiter. So you have to use it on every pass rule on an interface that you want to be subjected to that limit.

    Also if there are any inbound rules, such as for port forwards, the limiters need applied there also.



  • Thanks - I will try this :-)


Log in to reply