- Updated to Redesign of the webinterface
Introduction
The automatic or user-defined bandwidth management can be edited under .
Depending on the application, it makes sense to select one of the two modes.
Mode: Automatic
In the "Automatic" mode, the prioritization information of the data packets is evaluated.
In addition, a bandwidth management can be done in this mode, where the maximum outgoing or incoming bandwidth can be set.
The note Recommended is located on the interface where the zone external is located. By clicking Edit the interface can be edited.
| Caption | Value | Description | UTMuser@firewall.name.fqdnNetworkQoS  Automatic
|
|---|---|---|---|
| Name: | LAN1 | Name of the interface | |
| Mode: | Automatic | The previously selected mode | |
| Downstream: |  |
Set bandwidth for downloading notempty The limitation of the total traffic to 95% of the line capacity has proven itself. This leaves the queues of the provider and the local modem free.
| |
| Upstream: | |
Set bandwidth for uploading | |
| Maximum host number: | |
Maximum number of hosts among which the available bandwidth is to be divided. In any case, it is important to ensure that the number of hosts corresponds to the actual number. In case of doubt, more hosts should be specified than actually exist.
| |
| Save and close | Saves the settings and closes the dialog | ||
Once the settings have been saved, the data packets are now automatically classified on the basis of the ToS (Type of Service) or DSCP (Differentiated Services Code Point) information. The priority of the individual data packets is therefore determined by the applications.
The traffic is split into three queues:
- High Priority
- Normal Priority
- Low Priority
The queues are then processed with different priority.
The allocation is based on the following criteria:
| Priorität: | ToS-Feld: |
|---|---|
| High (Minimum delay) | 0xb8, 0x10 |
| Low (Maximum data throughput) | 0x08 |
| Normal | Everything else |
Mode: User-defined
In " User-defined" mode, the bandwidth can be managed with the help of parent and child profiles. It is also possible to limit the bandwidth in the portfilter rules for specific services.
It is important that this is the actual bandwidth and not the data specified by the provider with the addition "up to". After all, the actual available bandwidth can be subject to strong fluctuations depending on the time of day, so the values that the provider specifies as the minimum available bandwidth must be entered here.
Profiles
| At this point it is important to be aware of from where to where the data load takes place. The queue for bandwidth limiting is always attached to the interface on which the host that is to receive the data is located. The queue is defined in the parent profile. |  |
Profiles can be created under Area Profiles Button :
|
UTMuser@firewall.name.fqdnNetworkQoS  Parent-Profil
|
|
UTMuser@firewall.name.fqdnNetworkQoS  Child-Profile
|
|
UTMuser@firewall.name.fqdnNetwork  Profile overview
|
|
UTMuser@firewall.name.fqdnNetworkQoS  Select network interface
|
|
UTMuser@firewall.name.fqdnNetwork  Network interfaces overview
|
Regulate upload or download | |
If the upload or download is to be regulated, a parent and a child profile are required:
There are no options to regulate upload and download at the same time in manual mode.
|
UTMuser@firewall.name.fqdnNetwork  Profiles for up- and download
|
Packetfilter rules
Finally, click Button to create a suitable packetfilter rule.
A packet filter rule is required, which for QOS always has "internal-network" as the source and "internet" as the destination.
General
|
UTMuser@firewall.name.fqdnFirewallPacket filter  Upload-child packetfilter rule
| ||
| Source: |  internal-network |
Select source of data packets | |
| Destination: |  internet |
Select destination of data packets | |
| Service: |  voip |
Select desired service | |
| Action: | Allows to specify a "Quality of Service" profile that limits the bandwidth for data packets to which this rule applies. | ||
Extras
| |||
| QoS: | Select the previously created profile | ||
| Save and close | Saves the settings and closes the dialog | ||
| to apply the rules. | |||
The packet filter rules for download and upload, if available, then look as follows:
| # | Source | Destination | Service | QoS | Action | Active | |||
 |
internal-network |
internet |
voip |
On | |||||
|
internal-network |
internet |
voip |
On | |||||
In any case, additional packetfilter rules must be created or exist to allow traffic between source and destination with the required ports.
Help for this can be found under Packetfilter.