Bandwith shaping on complete subnet

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Bandwith shaping on complete subnet

L4 Transporter

Hey!

is it possible with a PA-3020 and OS 7.1.7 to set a bandwith limit for a complete subnet / Sub-Interface?

 

No matter which application etc.

 

Thanks!

15 REPLIES 15

Community Team Member

Hi @MPI-AE,

 

It is possible yes.  Please check the product info here :

https://www.paloaltonetworks.com/products/product-comparison.html?chosen=pa-3020

 

The QoS section more specifically :

 

QoS
Number of QoS policies 1,000
Physical interfaces supporting QoS 6
Clear text nodes per physical interface 31
DSCP marking by policy Yes
Subinterfaces supported System limit

 

System limit means that there is no defined hard limit.  It is driven by system capacity.

 

Compared to a 5020 where it is NOT supported :

https://www.paloaltonetworks.com/products/product-comparison.html?chosen=pa-5020

 

QoS
Number of QoS policies 1,000
Physical interfaces supporting QoS 12
Clear text nodes per physical interface 63
DSCP marking by policy Yes
Subinterfaces supported NA

 

Hope it helps !

-Kiwi

LIVEcommunity team member, CISSP
Cheers,
Kiwi
Don't forget to hit that Like button if a post is helpful to you!

@kiwi

 

But when I want to add an interface under Network -> QoS, it only shows me my physical interfaces.

 

But that doesn't matter. I can switch the subinterfaces to physical interfaces.

 

The more important question is: Can I apply a maximum bandwith to all hosts in a subnet for all traffic?

 

For example guest users.

Community Team Member

Hi @MPI-AE,

 

QoS needs to be enabled per physical interface but you can define subinterfaces in the configuration :

 

sub-interfacesub-interface

Cheers,

-Kiwi.

LIVEcommunity team member, CISSP
Cheers,
Kiwi
Don't forget to hit that Like button if a post is helpful to you!

Hi @kiwi

 

will be very nice if you guide me through the configuration. That's very complex imo.

 

- Do I need a QOS profile with classes?

- Do I need a QOS Policy Rule where I define ssl and web-browsing and refer it to a class?

 

Questions over questions..

 

My subinterface is ae1.140  . That's the interface where all guest hosts are connected and I want to set a bandwith limit of 50Mbps to this subinterface for the complete internet download traffic.

 

Could you please help me with that?

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!