ZyXEL ZYWALL USG 100 User Guide - Page 97

FTP WAN-to-DMZ Bandwidth Management Example

Page 97 highlights

Chapter 5 Managing Traffic 5.1.6 FTP WAN-to-DMZ Bandwidth Management Example Suppose the office has an FTP server on the DMZ. Here is how to limit WAN1 to DMZ FTP traffic so it does not interfere with SIP and HTTP traffic. • Allow remote users only 2048 kbps inbound for downloading from the DMZ FTP server but up to 10240 kbps outbound for uploading to the DMZ FTP server. • Set the fifth highest priority (5) for the FTP traffic. Figure 37 FTP WAN-to-DMZ Bandwidth Management Example Outbound: 5120 kbps guaranteed 10240 kbps maximum BWM BWM Inbound: 792 kbps guaranteed 2048 kbps maximum 1 In the Configuration > BWM screen, click Add. 2 In the Add Policy screen, select Enable and type FTP WAN-to-DMZ as the policy's name. Select wan1 as the incoming interface and dmz as the outgoing interface. Select App Patrol Service and ftp as the service type. Set inbound guaranteed bandwidth to 792 kbps, priority 5, and maximum 2048 kbps. Set outbound guaranteed bandwidth to 5120 kbps, priority 5, and maximum 10240 kbps. Click OK. ZyWALL USG100-PLUS User's Guide 97

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140

Chapter 5 Managing Traffic
ZyWALL USG100-PLUS User’s Guide
97
5.1.6
FTP WAN-to-DMZ Bandwidth Management Example
Suppose the office has an FTP server on the DMZ. Here is how to limit WAN1 to DMZ FTP traffic so
it does not interfere with SIP and HTTP traffic.
Allow remote users only 2048 kbps inbound for downloading from the DMZ FTP server but up to
10240 kbps outbound for uploading to the DMZ FTP server.
Set the fifth highest priority (5) for the FTP traffic.
Figure 37
FTP WAN-to-DMZ Bandwidth Management Example
1
In the
Configuration
>
BWM
screen, click
Add
.
2
In the
Add Policy
screen, select
Enable
and type
FTP WAN-to-DMZ
as the policy’s name.
Select
wan1
as the incoming interface and
dmz
as the outgoing interface.
Select
App Patrol Service
and
ftp
as the service type.
Set inbound guaranteed bandwidth to
792
kbps, priority
5
, and maximum
2048
kbps.
Set outbound guaranteed bandwidth to
5120
kbps, priority
5
, and maximum
10240
kbps. Click
OK
.
Inbound: 792 kbps guaranteed
Outbound: 5120 kbps guaranteed
BWM
BWM
10240 kbps maximum
2048 kbps maximum