This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG 310 rate limit guest wifi?

I'm setting up a new guest wifi SSID on my org's XG310/AP740 system, and I was hoping that the community could point me to the best way to rate limit traffic on a specific SSID while NOT rate limiting others. 

Can y'all point me to config guides that go over this clearly?



This thread was automatically locked due to age.
  • That SSID is on its own VLAN and should be in its own Zone. Then create a firewall rule to allow traffic from that zone to the WAN. Then, under System Services > Traffic Shaping, create a Rule-based, shared limit. Note that the measurement in this is BYTES, not bits, so divide your desired bps rate by 8.

    Then, back in your firewall rule, under Other Security Rules > Shape Traffic, select the limit your created. It should then take effect. You can do a SpeedTest to see.

    Also, there is a System Settings > Traffic Shaping Settings where I think I had to enter reasonable values and enable Enable Guaranteed Bandwidth and set  Limit to the same value as Total available WAN bandwidth, which was the max of my upload/download speeds. I was experimenting with all kinds of traffic shaping (rule, app, user, etc) and can't remember which required this. But also play with Total available WAN bandwidth etc to see what you have to set.

    I documented more in: community.sophos.com/.../traffic-shaping-q-about-total-bandwidth-etc