Chapter 5 Managing Traffic
ZyWALL USG 20-2000 User’s Guide
99
5.1.6 FTP WAN-to-DMZ Bandwidth Management Example
Suppose the office has an FTP server on the DMZ. Here is how to limit WAN1 to DMZ FTP traffic so
it does not interfere with SIP and HTTP traffic.
• Allow remote users only 2048 kbps inbound for downloading from the DMZ FTP server but up to
10240 kbps outbound for uploading to the DMZ FTP server.
• Set the fifth highest priority (5) for the FTP traffic.
Figure 39
FTP WAN-to-DMZ Bandwidth Management Example
1
In the
Configuration
>
BWM
screen, click
Add
.
2
In the
Add Policy
screen, select
Enable
and type
FTP WAN-to-DMZ
as the policy’s name.
Select
wan1
as the incoming interface and
dmz
as the outgoing interface.
Select
App Patrol Service
and
ftp
as the service type.
Set inbound guaranteed bandwidth to
792
kbps, priority
5
, and maximum
2048
kbps.
Set outbound guaranteed bandwidth to
5120
kbps, priority
5
, and maximum
10240
kbps. Click
OK
.
Inbound: 792 kbps guaranteed
Outbound: 5120 kbps guaranteed
BWM
BWM
10240 kbps maximum
2048 kbps maximum
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
