Can bandwidth management be implemented on IPsec VPN?

Can bandwidth management be implemented on IPsec VPN?

Hi, Sangfor NGAF supports bandwidth management on IPsec VPN .

Here the steps:

1) Initialize the IPSec Peer and Local IP Address Objects:

Begin by establishing the objects for both the IPSec Peer IP address and the Local IP address.

2) Create a link object that identifies your wan and the uplod/download limit to use within Bandwidth Management:

Navigate to Policies -> Bandwidth Management -> Lines.

Here, create a new line and ensure to select the interface where the IPsec is active.

3) Bandwidth Channel Policy Configuration:

Move to the bandwidth channel section.

Use the ‘Add’ button to create a new policy.

This policy allows you to set limits on the bandwidth channel and designate bandwidth per user.

4) Applying the Object:

Finally, go to Applicable Object.

Select the object that was initially created.

Currently the NGAF is support to restrict VPN traffic that established from the NGAF itself. If the VPN is build from other device, logically should able to achieve but depend on the database identification.
Bandwidth Management is work for traffic from non WAN-attribute interface to WAN-attribute interface, also need to make there is bidirectional traffic passthrough the NGAF.