Got it
Huawei Enterprise Support Community
Community Forums Security
Modify Bandwidth in IPSe...

Modify Bandwidth in IPSec

Latest reply: Oct 7, 2018 09:19:09 525 4 0 0 0
View the author 1#
What Happened ?

when i modify BW in IPSEC






I want to know

example         Is this Message in wireshark ?



http://support.huawei.com/hedex/pages/EDOC100013249530002967/14/EDOC100013249530002967/14/resources/cfg_vpn/sec_vsp_cfg_ipsec_0159.html

Like (0) Dislike (0) Favorite(0) Share Report
Previous: USG6300 -
Next: Zones on Firewall
(0) (0)
2#
Sergio93
Created Oct 5, 2018 18:29:27

Hi,

What message are you refering ? that's just an example..
View more
  • x
  • convention：
(0) (0)
3#
Sergio93
Created Oct 5, 2018 18:29:59

Hi,

What message are you refering ? that's just an example..
View more
  • x
  • convention：
(0) (0)
4#
nap
Created Oct 6, 2018 09:40:13

Posted by Sergio93 at 2018-10-05 18:29 Hi,What message are you refering ? that's just an example..
hi

I want measure Bandwidth performance .... between IKE v1 and IKE v2

Can I config b.w. in ensp ?
View more
  • x
  • convention：
(0) (0)
5#
Sergio93
Created Oct 7, 2018 09:19:09

Yes, I think it's possible but you need to use traffic-policy instead of qos policy. I tried to configure this command but it's not supported, so you can try to use traffic policy.

[USG_A] acl 3051
[USG_A-acl-adv-3051] rule 5 permit ip source 192.168.0.0 0.0.255.255 destination 10.100.0.0 0.0.255.255
[USG_A-acl-adv-3051] quit

Configure traffic classifications to match ACL 3051
[USG_A] traffic classifier outipsec
[USG_A-classifier-outipsec] if-match acl 3051
[USG_A-classifier-outipsec] quit

Configure traffic behaviors to forward IPSec traffic to the AF queue, which uses the 5M bandwidth assigned for the IPSec traffic in priority.
[USG_A] traffic behavior outipsec
[USG_A-behavior-outipsec] queue af bandwidth 5000
[USG_A-behavior-outipsec] quit

Configure a traffic policy to match traffic classifications and traffic behaviors.
[Huawei]traffic policy p1
[Huawei-trafficpolicy-p1]classifier outipsec behavior outipsec
[USG_A-qospolicy-flow_outbound] quit

Apply traffic policies outipsec to interfaces, and set the interface rate smaller than the bandwidth provided by the carrier. In this example, the interface rate is set to 9M to make configured congestion management take effect.
[USG_A] interface GigabitEthernet 0/0/1
[USG_A-GigabitEthernet0/0/1] traffic-policy p1
[USG_A-GigabitEthernet0/0/1] qos lr cir 9000 cbs 4500
[USG_A-GigabitEthernet0/0/1] quit
View more
  • x
  • convention：
Back to list

Comment

Advanced
B Color Image Link Quote Code Smilies
You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login
Huawei Website Support About Huawei Privacy User Agreement Terms of Use Cookies Cookie Settings
Huawei Enterprise Huawei Carrier Forum Training & Certification

Contact Us: e_online@huawei.com Copyright © 2022 Huawei Technologies Co., Ltd. All rights reserved.

APP

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.