Network Traffic limits

Network Traffic limits

U Case Requirements

How do I use TMG firewall to limit network traffic?

U Knowledge Tips

A third-party plug-in that is called "Bandwidth Splitter" needs to be installed in the TMG firewall to enable network traffic control, the latest version of the plug-in is 1.37 and only TMG 2010 is supported. This is explained by installing the Bandwidth Splitter1.37 in the TMG2010.

Bandwidth Splitter installation process is simple, follow the installation wizard prompts to complete the installation, after the installation has become a component in TMG, you can directly use the various elements defined in TMG, such as network objects, plans, etc., 5.1.

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; margin:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image002 "border=" 0 "alt=" clip_image002 "src=" http://s3.51cto.com/wyfs02/M00/77/8A/ Wkiol1zpf37wskzgaaakf8bmrcc412.jpg "" 244 "height=" 167 "/>

Figure 5.1 Installing Bandwidth Splitter

Case: Limit the maximum download bandwidth per user to 20KB.

The specific steps are described below.

(1) Right-click "sharping rules" in the 5.1 window, select "new" → "rule" in the pop-up menu, open the 5.2 window, enter the rule name, and click the "Next" button.

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; margin:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image004 "border=" 0 "alt=" clip_image004 "src=" http://s3.51cto.com/wyfs02/M02/77/8B/ Wkiom1zpf3-qjrunaaa79khb1mm864.jpg "" 244 "height=" 215 "/>

Figure 5.2 Entering the rule name

(3) In the "Applies to" page to add users who need to limit, can be based on IP address or user identity restrictions. In this case, based on the IP address restrictions, select the "IP address sets specified below" option, click the "Add" button, select the "Internal" network, click the "Next" button, 5.3.

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; margin:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image006 "border=" 0 "alt=" clip_image006 "src=" http://s3.51cto.com/wyfs02/M00/77/8B/ Wkiom1zpf4dskntraaa8d_-8yl8693.jpg "" 244 "height=" 217 "/>

Figure 5.3 Setting Database options

(4) on the "destinations" page, set the destination address for the Internet, which is the "external" network, click the "Next" button, 5.4.

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; margin:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image008 "border=" 0 "alt=" clip_image008 "src=" http://s3.51cto.com/wyfs02/M01/77/8B/ Wkiom1zpf4grfkbuaaa2dcz-fnm858.jpg "" 244 "height=" 217 "/>

Figure 5.4 Setting the destination address

(6) Set the time schedule in the "Schedule" page, where you can choose to limit the user bandwidth during the "working hours" period, and then click the "Next" button, as shown in 5.5.

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; margin:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image010 "border=" 0 "alt=" clip_image010 "src=" http://s3.51cto.com/wyfs02/M00/77/8B/ Wkiom1zpf4lgsfauaaav6maxgzu415.jpg "" 244 "height=" 218 "/>

Figure 5.5 Setting up a time plan

(7) in the "sharping" page to limit user bandwidth, you can limit the user upload or download bandwidth, select the "Shape Incoming traffic only" option, that is, limit the user's download bandwidth, and then enter a maximum bandwidth of 160kbits/ S (note: 1b=8bit), click the "Next" button, shown in 5.6.

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; margin:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image012 "border=" 0 "alt=" clip_image012 "src=" http://s3.51cto.com/wyfs02/M02/77/8A/ Wkiol1zpf4oc3b5aaaa3rwqsuoa585.jpg "" 244 "height=" 217 "/>

Figure 5.6 Limiting user Download bandwidth

(8) on the "Connection Settings" page, limit the number of user connections, set the maximum value to 100, and then click the Next button, as shown in 5.7.

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; margin:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image014 "border=" 0 "alt=" clip_image014 "src=" http://s3.51cto.com/wyfs02/M01/77/8B/ Wkiom1zpf4ox8mmwaaanrsibe3y399.jpg "" 244 "height=" 216 "/>

Figure 5.7 Limiting the number of user connections

(9) Set the bandwidth limit mode on the "sharping type" page, as shown in 5.8. The "Assign bandwidth individually to every applicable user/address" option means that each user has the specified bandwidth; "Distribute bandwidth between all Applicable users/address "option means that all users share the specified bandwidth, and because each user's bandwidth is individually limited, select Assign bandwidth individually to each applicable User/address ", click the" Next "button.

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; margin:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image016 "border=" 0 "alt=" clip_image016 "src=" http://s3.51cto.com/wyfs02/M02/77/8B/ Wkiom1zpf4sr094iaaaxguuot60934.jpg "" 244 "height=" 217 "/>

Figure 5.8 How to set bandwidth throttling

(10) on the "Extra Parameters" page, set other parameters for the rule, as shown in 5.9. "Apply This rule only if traffic quota is exceeded. Internet access is a not blocked. The option is to apply the rule when the total traffic limit is exceeded, and the "Don ' t count traffic on accout of traffic quota" option means that the user's traffic usage is not calculated, and it is recommended that none of the two options be selected.

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; margin:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image018 "border=" 0 "alt=" clip_image018 "src=" http://s3.51cto.com/wyfs02/M00/77/8B/ Wkiom1zpf4wwpja6aaaxobgaun0097.jpg "" 244 "height=" 215 "/>

Figure 5.9 Setting additional parameters

(11) Click the "Finish" button on page 5.10 to complete the creation of the rule.

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; margin:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image020 "border=" 0 "alt=" clip_image020 "src=" http://s3.51cto.com/wyfs02/M00/77/8B/ Wkiom1zpf4bj0q3faabb3vpth3c176.jpg "" 244 "height=" 217 "/>

Figure 5.11 Creating rule completion

(12) After you create the rule, you need to click 650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; margin:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image022 "border=" 0 "alt=" clip_image022 "src=" http://s3.51cto.com/wyfs02/M01/77/8B/ Wkiom1zpf4azuvd_aaaddkil4li533.jpg "" "height="/> button to apply the rule to make it effective.

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; margin:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image024 "border=" 0 "alt=" clip_image024 "src=" http://s3.51cto.com/wyfs02/M01/77/8B/ Wkiom1zpf4ecf2ecaaakmkr4imw453.jpg "" 244 "height=" 173 "/>

Figure 5.12 Applying the rule

When the client uses Thunderbolt to download data, you can see that the user's download speed is limited to the 25kb,5.13 shown. Click Monitoring to monitor the client's real-time network traffic, and you can see that the maximum download bandwidth for the client "192.168.2.10" is limited to 160kbit/s,5.14.

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; margin:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image026 "border=" 0 "alt=" clip_image026 "src=" http://s3.51cto.com/wyfs02/M02/77/8B/ Wkiom1zpf4jaw-tnaabc-nmhqm0734.jpg "" 244 "height=" 166 "/>

Figure 5.13 Viewing the client download speed

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; margin:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image028 "border=" 0 "alt=" clip_image028 "src=" http://s3.51cto.com/wyfs02/M02/77/8A/ Wkiol1zpf4njmnalaaap_j1mdmq241.jpg "" 244 "height=" 164 "/>

Figure 5.14 Monitoring client real-time traffic

In the Quota rules option, you can set a rule to limit the total traffic for users, such as limiting the total amount of traffic that is available per user per day to 200MB, and you can view the user's traffic usage in the Quota Counters option. In 5.15, you can see that the total daily traffic of the user "192.168.2.10" is limited to 100MB, and currently the remaining 84.873MB of available traffic.

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image030 "border=" 0 "alt=" clip_image030 "src=" http://s3.51cto.com/wyfs02/M00/77/8C/ Wkiom1zpf4qwthifaaangmwqaxw575.jpg "" 244 "height=" 156 "/>

Figure 5.15 Monitoring Total client traffic

Network Traffic limits