QoS Configuration

[Sanjay_Ramaiah]

Hi All,

I am new to QoS config on Palo. We need to limit BW for the users passing the particular interface. Users from internal network to internet facing interface they should be limit to 2Meg. Is this config possible? Any KB article that suggests this kind of config please.

Regards,

Sanjay S

[BPry]

@Sanjay_Ramaiah,

To the best of my knowledge, per-user QoS limits are still not implemented at this time. You can limit/reserve bandwidth across the interface, but you can't do it on a per-user basis, just as an aggregate across the entire interface. 

[Sanjay_Ramaiah]

Thank you Bpry,

Aggregate here means that any user passing the interface should only get 2MB not more than that, is my understanding correct? 

Regards,

Sanjay S

[Raido_Rattameister]

Aggregate means that all user traffic combined can be limited to 2Mbit but you can't permit 2Mbit per user.

[Sanjay_Ramaiah]

Thank you Raido.

Is it possible to limit the bandwidth for the users connecting from particular subnet? I mean limit the bandwidth for the entire subnet?

[OtakarKlier]

Hello,

This is possible:

Source Subnet—Select a subnet to restrict the settings to traffic coming from that source, or keep the default any to apply the settings to any traffic from the specified interface.

However its probably best to have a company policy to block the sites via URL filtering.

Just a thought.