CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have sign-ups from twelve different countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 7/14, 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > QoS (Quality of Service) (Formerly FloodGate-1)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-08-25
cciesec2006 cciesec2006 is offline
Senior Member
 
Join Date: 2006-09-26
Posts: 596
Rep Power: 2
cciesec2006 has an average reputation (10+)
Default Limit bandwidth per IP address with QoS in NGx R65

I have a network of 192.168.1.0/24 and I have a bandwidth
per rule and per connection of 1000kbps and 100kbps, respectively
for http and https connections

The problem is that there are 200 hosts residing on network
192.168.1.0/24 and let say host 192.168.1.10 have 20 connections.
Well host 192.168.1.10 will use up all the bandwidth rule and
everyone else will get drop.

Basically I want to limit ALL hosts on network 192.168.1.0/24
is limited to 100kbps no matter how many connections a particular
host makes. In other words, I want to lock down 100kbps for
each IP address without having to specify each individual hosts
in the source.

This is not currently available in NG with AI R55. Is this possible
to do this in NGx R65?

Thanks.
Reply With Quote
  #2 (permalink)  
Old 2007-08-29
pointcheck pointcheck is offline
Junior Member
 
Join Date: 2007-04-29
Posts: 17
Rep Power: 0
pointcheck has an average reputation (10+)
Default Re: Limit bandwidth per IP address with QoS in NGx R65

It sounds like you need to make one rule per IP address. Not very easy, but I don't see any other way.
Reply With Quote
  #3 (permalink)  
Old 2007-08-30
cciesec2006 cciesec2006 is offline
Senior Member
 
Join Date: 2006-09-26
Posts: 596
Rep Power: 2
cciesec2006 has an average reputation (10+)
Default Re: Limit bandwidth per IP address with QoS in NGx R65

The problem is that I have 1000+ IP to configure. Not a very
efficient to do things.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 19:16.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0