Limiting IPSec traffic

28

You can use a traffic policy to limit IPSec traffic.
In a traffic policy, esp or ah is used as the matching condition. The service corresponds to IPSec traffic.

Other related questions:
How to configure an AR to limit the rate of IPSec data flows
To configure an AR to limit the rate of IPSec data flows, configure the QoS function for IPSec packets first, and then configure rate limiting for IPSec data flows through MQC. system-view [Huawei]ipsec policy huawei 1 manual //Create an IPSec policy, set the SA creation mode to manual, and enter the IPSec policy view. Alternatively, you can complete the following configurations in the ISAKMP policy view, IPSec policy template view, IPSec profile view, Efficient VPN policy view, or GDOI policy view. [Huawei-ipsec-policy-manual-huawei-1]qos group 10 //Configure the QoS group to which IPSec packets belong. [Huawei-ipsec-policy-manual-huawei-1]quit [Huawei]traffic classifier c1 //Create a traffic classifier and enter the traffic classifier view. [Huawei-classifier-c1]if-match qos-group 10 //Configure a matching rule based on QoS group 10. [Huawei-classifier-c1]quit [Huawei]traffic behavior b1 //Create a traffic behavior and enter the traffic behavior view. [Huawei-behavior-b1]car cir 3000 //Limit the rate of traffic. [Huawei-behavior-b1]quit [Huawei]traffic policy p1 //Create a traffic policy and enter the traffic policy view. [Huawei-trafficpolicy-p1]classifier c1 behavior b1 //Bind the traffic classifier to the traffic behavior. [Huawei-trafficpolicy-p1]quit [Huawei]interface GigabitEthernet 0/0/0 [Huawei-GigabitEthernet0/0/0]traffic-policy p1 outbound //Apply the traffic policy on the interface

Method used to limit IPSec VPN traffic on the USG6000
You can run the speed-limit command to limit the IPSec traffic. When multiple tunnels are established on the NGFW, traffic conflict occurs in case of heavy traffic. By configuring the speed-limit command, you can limit the traffic on each IPSec tunnel. The traffic beyond the limit is discarded. In this manner, traffic on each tunnel can be transmitted.

how to limit the flow of IPSec VPN with the USG6000
Speed-limit command can be executed for IPSec current limiting.When building the multi tunnel in NGFW, when large data traffic will generate traffic conflict, by configuring the speed-limit command, can limit the packets flow of each IPSec tunnel, exceeds the limit of the traffic will be discarded, ensure the traffic on each of the tunnel have been transferred.

Limiting the P2P session and video streaming on the firewall
A quota control policy controls the Internet access traffic and Internet access time of a user. It can effectively prevent bandwidth abuse and prevent long network access time from affecting work efficiency. For the detailed configuration method for V1, see Administrator Guide > Quota Control Policy in the product documentation. For the detailed configuration method for V5, see Administrator Guide > Traffic Management > Quota Control Policy in the product documentation. To limit the bandwidth of such applications on the network, configure a traffic policy based on the traffic application or protocol type. For the detailed configuration method for V1, see Administrator Guide > Traffic Management in the product documentation. For the detailed configuration method for V5, see Administrator Guide > Traffic Management > Bandwidth Management in the product documentation.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top