This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Cannot get UPLINK throttling to work

Hi guys, I'm new to UTM 9 and I am trying to limit the upstream bandwidth for a single ip to 1Mb. I noticed that in the QoS section there is a Download Throttling but no Upload Throttling tab. [:S]

I still tried and did the following

1. Created a traffic selector
    a. Set source to a new network definition which I set to HOST and put in the
        ipv4 address of the machine I am trying to limit
     b. Set the service to ANY
     c. Set the destination to ANY
I also tried reversing the Source and Destination but that did not help. The upload speed never changes.

2. Created a new download throttling rule using the traffic selector above and bound it to the WAN (UP)
- Why is there no WAN (DOWN) btw???

I enabled the WAN QoS in the Status tab and did a speed test on the target box.

The download speed was the only thing affected at any time.
The only way I could limit the upload speed was to change "Uplink mbit/sec:" on the Status page for the WAN interface but that limited everyones upload speed.

Is there any solution to do what I want to do? Thanks

B

This thread was automatically locked due to age.

0 Kanwal Jeet Singh over 10 years ago

As per the knowledge base :

https://www.sophos.com/en-us/support/knowledgebase/115607.aspx

https://www.sophos.com/en-us/support/knowledgebase/119111.aspx

ASG only can restric the downstream but not upstream traffic.

I also tried but in Vain.

Thanks.
Cancel
Vote Up 0 Vote Down

Cancel
0 brimur over 10 years ago in reply to Kanwal Jeet Singh

Thanks. That is a shame. Why limit it to only download [:S]
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 10 years ago in reply to Kanwal Jeet Singh

As per the knowledge base :

https://www.sophos.com/en-us/support/knowledgebase/115607.aspx

https://www.sophos.com/en-us/support/knowledgebase/119111.aspx

ASG only can restric the downstream but not upstream traffic.

I also tried but in Vain.

Thanks.

keep in mind that WAN interfaces uplink is up to the wan and downlink is down to the protected network.  All other nics this thinking is REVRSED.
so if you want to limit the amount of wan traffic your dmz interface can use the uplink is not up to the wan but up to the dmz network.  downlink is to the wan interface.

i'll use my utm here as an example:
My wan speed is 105/10 provisioned
for my wan QOS settings i have the uplink set to 10 megabits and the downlink set to 105 megabits.
I have another interface for my sick computer area.  I only want it to use at most 3 megabits o my wan upload and 50 megabits of bandwidth.  for this nic i have the uplink set to 50 megabits and the downlink set to 3 megabits.  here is the neat part.  with auto QOS enabaled on all interfaces the sick computer is hard limited to 3 megabits of the wan upload and stays within 50-55 megabits of wan download..pretty nice.  Just have to reverse your thinking on all interfaces except the wan interface.
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 10 years ago

Here is how my qos is setup..[:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 brimur over 10 years ago in reply to William Warren

Here is how my qos is setup..[:)]

What is your setup behind that? Do you have 4 physical interfaces or two physical and two vlan interfaces or something else?
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 10 years ago in reply to brimur

What is your setup behind that? Do you have 4 physical interfaces or two physical and two vlan interfaces or something else?

When it comes to qos it does not matter the thinking is as i described fir all interfaces types.
Cancel
Vote Up 0 Vote Down

Cancel
0 brimur over 10 years ago in reply to William Warren

I don't understand. I only have two interfaces listed in QoS because I only have two physical ports. Does your firewall have 4 physical port and does your Sick computer have its own physical port on the firewall? That is the only way I can see to have it listed in the Status area of QoS
Cancel
Vote Up 0 Vote Down

Cancel