jerome_itable Lv2Posted 31 Oct 2023 16:39
  
The Sangfor NGAF is a next-generation firewall that can be used to limit the bandwidth available to an IPsec VPN. This can be useful for a variety of reasons, such as preventing a particular user or group of users from using too much bandwidth, or to prevent the VPN from saturating the available bandwidth.

To limit the bandwidth available to an IPsec VPN on the Sangfor NGAF, you will need to create a bandwidth channel. A bandwidth channel is a group of objects that share the same bandwidth limit. To create a bandwidth channel, go to Policies > Bandwidth Management > Line Definition. In Lines, configure the WAN interface as egress interface and fill in the actual bandwidth of the ISP in both outbound and inbound bandwidth. After done settings, click “OK”.

Next, go to Line Policy and select the line that you created in the previous step. Click on “Add” to add a new bandwidth channel. A new window will pop up. Name the channel and select the line created in the previous step as target line. In the Channel type, you can configure guaranteed channel, limited channel. You can also configure per-user max bandwidth.

Once you have created the bandwidth channel, you need to apply it to the IPsec VPN. To do this, go to Policies > VPN > IPsec VPN. Select the IPsec VPN that you want to limit the bandwidth of and click on “Edit”. In the Bandwidth Management section, select the bandwidth channel that you created in the previous step. Click on “Save” to save your changes.

After you have applied the bandwidth channel to the IPsec VPN, the bandwidth available to the VPN will be limited to the amount that you specified. This will help to prevent the VPN from saturating the available bandwidth and will also help to ensure that all users have access to a fair amount of bandwidth.

Here are some additional tips for limiting bandwidth on an IPsec VPN:

    Consider using a QoS (quality of service) policy to prioritize traffic over the VPN. This will help to ensure that critical traffic, such as voice and video, is not impacted by the bandwidth limitation.
    Monitor the bandwidth usage of the VPN and adjust the bandwidth limit as needed. This will help to ensure that the VPN is not saturated and that all users have access to a fair amount of bandwidth.
    Consider using a different type of VPN, such as a SSL VPN, if bandwidth is a major concern. SSL VPNs typically use less bandwidth than IPsec VPNs.

I Can Help:

Change

Moderator on This Board

0
2
4

Started Topics

Followers

Follow

67
14
3

Started Topics

Followers

Follow

3
0
2

Started Topics

Followers

Follow

1
131
3

Started Topics

Followers

Follow

Board Leaders