Single WAN Multiple LAN
-
First, I must say that the Traffic Mapping is black magic to me … However, I love figuring stuff out and researching things. So, feel free to say, go here and read XYZ. Here is my situation.
I have a single WAN (UVERSE 20mbps down and 1 mbps up (supposed to be 3 but never has been. I am having fun with AT&T support, they send an outside guy and he sends an inside guy who sends an inside guy etc). I have 2 interfaces that use that WAN a public interface 10.255.0.1/23 and a private interface 10.2.0.1/24. I used the 2.1 traffic shaping wizard to setup HFSC queues. I really didn't fool with the output and probably should. Our requirement is to ensure, as best as we can given our setup, not to allow the public network to bog down the private network activity. E.g. ip starts uploading a huge file.
I was attracted to the captive portal for this sole purpose, bandwidth limiting features. However, I keep hitting a reproducible bug that causes my public network to get in this non-responsive state. So, I've turned it off and never have to think about pfsense, it is rock solid. All that to say this:
1. I believe I want to setup a limiter for our public interface. Any recommendations on how to create based on my requirement of not allowing clients on the public interface to hog the WAN from the private network?
2. Given the specs of my WAN connection and the priority given to the private network, what should I consider altering on the Traffic Shaper Wizard output (see pic of queues created). Again, pointing me to another resource to explore and educate myself with would be just fine.
Thanks for your patience and input!
Rob
![Public Firewall Rules.png_thumb](/public/imported_attachments/1/Public Firewall Rules.png_thumb)
![Public Firewall Rules.png](/public/imported_attachments/1/Public Firewall Rules.png)
![2.1 Traffic Wizard Output.png_thumb](/public/imported_attachments/1/2.1 Traffic Wizard Output.png_thumb)
![2.1 Traffic Wizard Output.png](/public/imported_attachments/1/2.1 Traffic Wizard Output.png)