ZyXEL Communications 4.04 User Manual

Chapter 6 Bandwidth Management Commands

ZyWALL (ZyNOS) CLI Reference Guide

Figure 2   Managing the Bandwidth of VPN traffic between hosts

How you configure this command affects how you can implement bandwidth management as 
follows. 

• Leave this command set to 

off

 to be able to create bandwidth management groups for 

individual unencrypted VPN traffic that are connecting through the same remote IPSec 
router. With this setting you can also specify the type of traffic either using the service list 
(like SIP or FTP) or by specifying port numbers in BWM filter settings.

• Use off with this command to set the ZyWALL uses the source and destination IP 

addresses of unencrypted VPN packets in managing the bandwidth of the VPN traffic. 
This means that it looks at the IP address of the computer that sent the packets and the IP 
address of the computer to which it is sending the packets. The following figure shows an 
example of this. The ZyWALL uses the IP addresses of computers A and B to manage the 
bandwidth of the VPN traffic.

This example displays the LAN interface’s BWM settings and then configures the LAN 
interface using bandwidth 10,000 bps and the priority-based queuing method.

This example adds one LAN class using following settings.

• Class number: 1

• Bandwidth: 5,000,000 bps

• Class Name: LAN-class1

ras> bm show interface lan

===============================================================================

Interface : LAN         [ Enabled ]

        bandwidth =    100M (bps)

        allocated bandwidth =      0 (bps)

        MTU = 1500 (byte)

===============================================================================

ras> bm interface iface lan enable bandwidth 10000 prr

ras> bm config load

ras> bm class lan add 1 bandwidth 5M name LAN-class1

ras> bm config save