Upper Layer VPN Does Not Take Effect On IAM Bandwidth Management

|
  • 213
  • 6

Issue Description

IAM has deployed bridge mode in internal network, the outgoing interface is using third party firewalls which had build VPN with headquarter. Currently we need to ensure that the traffic access to one of the server IP in Headquarter(HQ) has been protected. After the configuration, we can check on [Status] – [Traffic Statistics] – [Flow Control], the real-time rate shows the corresponding channel does not show any flow changes, no instantaneous rate change, etc. It means that the bandwidth policy does not take effect on corresponding channel.

Handling Process

1. Verified the customer request is achievable, IAM is able to limit or guarantee the bandwidth on the user who is accessing the HQ server through a VPN. We can use a channel point to a specific destination IP address which is the HQ server IP address.
2. After the configuration is complete, the specific channel does not occur any changes, explain that the channel does not take effect on the configuration. Modified the IP address to entire Ip segment, then apply the custom policy which match the server IP address to limit the bandwidth, but found that the bandwidth managment policy does not work.
3. Checked the IP address of server in detail, as well as the bypass and global exclusion configuration. Discover the global exclusion has added with the server IP segment, the issue resolve after remove the IP segment in global exclusion.

Root Cause

Server IP segment has been added in exclusion rules.

Solution

Remove the server IP segment from global exclusion.
Faisal Posted 18 Aug 2020 11:31
  
Thank you very much for the information ...
Faisal Posted 25 Oct 2020 06:30
  
Nice article ...
Faisal Posted 14 Dec 2020 08:13
  
Great info ...
Ellechar Lv4Posted 29 Jan 2021 15:21
  
Very nice infoooooooooooooooooooooooooooooo
Faisal Posted 16 Mar 2021 07:19
  
Very informative …
Faisal Posted 01 Jun 2021 12:38
  
Nice guidance ...

I want to write a case
Doc ID: 2601
Author: Sangfor_Brando
Updated: 2019-12-23 15:12
Version: