On 24.1.2013 г. 17:05 ч., Leonardo Lombardo wrote:
Hi all,

my setup is a firewall/router for a network in which I have a lot of VLANs.
WAN connection is only one so bandwith is a concern. WAN connection is
10Mbit/s.

Is there a way to shape N VLANs as a whole while having some other VLAN
with a minimum guarantee ?
I mean:

- N VLANs share the bandwith with no limits nor guarantee (max 10Mbit/s
cumulative)
- a specific VLAN (104) get a minimum of 2Mbit/s (guaranteed)
- another specific VLAN (105) get a minimum of 4Mbit/s (guaranteed)

Every VLAN is permitted to get all the bandwith but 104 and 105 always can
get their minimum.

Please can you give some advice on how to configure hfsc to do this ?

I cannot figure how to tell hfsc about the total bandwith to share between
many interfaces....


Thanks in advanceLeonardo


As far as I know you cannot shape on vlan. Shaping is done on physical interface.
something like that:
#macro:

# To Border Routers
ext300="vlan300"

# client net and vlan
int56="vlan56"
net56="x.x.x.24/29"

#queues on each physical interface (em1 and em2 in my case):

queue net56_out bandwidth 50Mb cbq {net56_gl, net56_bg}
        queue net56_gl bandwidth 10Mb cbq (red)
        queue net56_bg bandwidth 40Mb cbq (red, borrow)

queue net56_in bandwidth 50Mb cbq {net56_gl_in, net56_bg_in}
        queue net56_gl_in bandwidth 10Mb cbq (red)
        queue net56_bg_in bandwidth 40Mb cbq (red, borrow)

#then pass rules:

# Pass rules for client, VLAN56 on em1, NET56

pass in quick on $int56 from $net56 to <bgnets> queue net56_bg_in
pass out quick on $int56 from <bgnets> to $net56 queue net56_bg_in

pass in quick on $int56 from $net56 to any queue net56_gl_in
pass out quick on $int56 from any to $net56 queue net56_gl_in

# Pass rules for Client, VLAN56 on em2, NET56

pass out quick on $ext300 from $net56 to <bgnets> queue net56_bg
pass in quick on $ext300 from <bgnets> to $net56 queue net56_bg

pass out quick on $ext300 from $net56 to any queue net56_gl
pass in quick on $ext300 from any to $net56 queue net56_gl


It works for me in both directions. I also give client higher speed to local exchange, namely <bgnets> table.

Hope it helps,
Ivo

Reply via email to