Limit Public IP

falbertopl

hello friends I give up, I'm trying something that seems simple but I found it somewhat complex, I limit the bandwidth of a public IP in both directions, explain my topology:

CISCO –-----WAN - PFSENSE - LAN with public IP routed ------- PC with public IP x.x.x.x

I need to limit the bandwidth in both directions, so far only get it down, but up is completely free

Any Help?

kejianshi

People will need abit more. They will need to see your configuration.

falbertopl

Ok, here are the images. In that rule'm limiting entire subnet

publicas.png_thumb

HONDUTEL.png_thumb
![PUBLICAS FIREWALL RULE.png](/public/imported_attachments/1/PUBLICAS FIREWALL RULE.png)
![PUBLICAS FIREWALL RULE.png_thumb](/public/imported_attachments/1/PUBLICAS FIREWALL RULE.png_thumb)
![PUBLICAS FIREWALL RULE1.png](/public/imported_attachments/1/PUBLICAS FIREWALL RULE1.png)
![PUBLICAS FIREWALL RULE1.png_thumb](/public/imported_attachments/1/PUBLICAS FIREWALL RULE1.png_thumb)

falbertopl

Ok i made it with a floating rule, i'll post an image soon

falbertopl

Ok i'm here again, i made 2 rules, one to permit the traffic from the public ip to external network and another rule to permit the traffic from external network to public ip, but i can't inderstand why y have to select the WAN and the internal interface to make it work and the direction must be in always. If anyboddy want to explain.

![floating rules.jpg](/public/imported_attachments/1/floating rules.jpg)
![floating rules.jpg_thumb](/public/imported_attachments/1/floating rules.jpg_thumb)

kejianshi

Is it working for you now?

falbertopl

It is working but i have these problem now, may be you could help me, http://forum.pfsense.org/index.php/topic,64573.0.html

falbertopl

Ok this is my scenario:

A WAN and a LAN with public IP routed accross PFSENSE, the routing work fine, but when i tried to limit bandwith with a limiter on WAN interface, the limiter does not work

rule.jpg_thumb

rule1.jpg_thumb

limiter.jpg_thumb

falbertopl

I have tried to download a file from that server and the fastest speed I got is the one shown in the picture, does not increase, there is no congestion on the link, the link has 4 Mbit free, why the limiter does not work on the WAN?

I'm doing the download from another network that does not have congestion, I tried without the speed limiter and immediately increases to 400 KB / s

download.jpg_thumb

falbertopl

The limit only works with this floating rule, but happens I wrote in this post:
http://forum.pfsense.org/index.php/topic,64573.0.html

floating.jpg_thumb

floating1.jpg_thumb

falbertopl

I found that if I set HONDUTEL as default gateway the limiter works on the WAN, what can it be?

falbertopl

What is described here is a known bug in pfsense, provide more detail here: https://redmine.pfsense.org/issues/3096