Traffic Shaping in Watchguard Cloud
Hi,
Newbie question here...we are implementing an M290 with a new WAN connection at a premises. My question is, can I configure Traffic Shaping on the WAN port in Watchguard Cloud for the M290?
Reason is the ISP of the WAN connection has just told us:
"we require you to configure your routers/end devices to match the purchased rate using traffic shaping."..."you need to take into account the Layer 2 Ethernet overheads. When configuring the traffic shaping, we suggest allowing 2% for the Layer 2 Ethernet overhead.E.g. For a 20M service connecting to a Layer 3 CPE router, the shape rate is calculated as 20 x 0.98 = 19.6 Mbps"..."The following configuration is a common CISCO configuration which is provided only for guidance purposes.....You must define a policy-map and then apply that policy-map to the egress interface or sub-interface (VLAN)."
they then provide this example for a Cisco device:
Step 1 Create Policy Map
policy-map
class class-default
shape average
E.g. For a 20Mbps service: router(config)# policy-map
20M_service
class class-default
shape average 19600000 200000 0
If the CPE does not accept ‘0’ for excess-burst, input a
small value. E.g. 1000
Step 2
Apply Policy Map to interface/sub-interface
interface ethernet
service-policy output
E.g. attach our 20M Service policy to the outgoing
Fast Ethernet interface
router(config)# interface FastEthernet4
service-policy output 20M_service
My question is, can I configure settings like this in Watchguard Cloud for the M290? Or do we have to change to have a locally managed Firebox?
Thanks,
Comments
For a locally managed firewall, one sets this as a Traffic Management option on the Advanced section of the external interface settings.
Set Outgoing Interface Bandwidth
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/qos_trafficmanagement/outgoing_interface_bandwidth_config_c.html
Traffic Management is an upcoming feature for cloud managed firewall configs.
WatchGuard Cloud Features for Firebox Configuration
https://techsearch.watchguard.com/KB?type=Article&SFDCID=kA10H000000bqQHSAY&lang=en_US
I would tell the ISP to pound sand....seriously. I can not say that in my over 20 years I have ever had an ISP ask me to limit my use of their services by creating an exception on my device (yes, I consider this an exception).
Thanks for your replies. I know its crazy having to do this...would you believe the ISP that requires this is Telstra, Australia's largest telco!