Limit IP address range bandwidth during recurring time period

[ThomasMikelson]

Need to limit residence hall users bandwidth to Internet monday-friday 8:00 a.m. to 5:00 p.m.

The following is how it was done previously on Cisco ASA. Need to translate to PA5430.

object-group network MV_NETWORK
network-object 192.168.0.0 255.255.0.0

access-list MV_TRAFFIC extended permit ip object-group MV_NETWORK any time-range RegularHours

class-map MV_BANDWIDTH
match access-list MV_TRAFFIC

policy-map throttlepolicy_MV
class MV_BANDWIDTH
police output 30000000
police input 30000000

service-policy throttlepolicy_MV interface PRIMARY_CORE
service-policy throttlepolicy_MV interface OUTSIDE

[RomainSalmon]

Hello,

You should read documentation about QoS first (profile applied on egress interface): https://docs.paloaltonetworks.com/network-security/quality-of-service/administration/configure-qos

Be careful if the firewall is a datacenter firewall because when you activate the QoS on the 54xx FW : your max bandwidth is limited...(by exemple if you have an aggregate interface made of 2 10GB int ==>20GB : the QoS will limit the max bandwidth to 10GB.). As well  i strongly recommend to activate lockless QoS ( https://docs.paloaltonetworks.com/network-security/quality-of-service/administration/configure-lockl...)

To answer your need, you have to configure a QoS profile first, to configure a dedicated class with max bandwidth et min,  to activate this profile on the egress interface and to create a schedule profile (Weekly). Then you have to create a QoS policy rule matching your need : Users to Internet with the schedule profile and with the class of QoS configured before.

Have a good day,