Re: [Shorewall-users] Limit Bandwitch based on a Vlan with Shorewall ?

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 454-5900

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Simon Hobson a &eacute;crit&nbsp;:
<blockquote cite="mid:a06...@si..."
 type="cite">
  <pre wrap="">Network Operation Center wrote:
  </pre>
  <blockquote type="cite">
    <pre wrap="">Hi

I have a linux router with 3 interfaces :

eth0   =&gt; Internet
eth1   =&gt; Lan N&deg;1
eth2   =&gt; Lan N&deg;2

on eth2, i use vlan and i have a small lot of
eth2.10 =&gt; VlanID 10
eth2.20 =&gt; VlanID 20
eth2.30 =&gt; VlanID 30

That's work very good actually.
But now, i want "limit" the bandwitch by interface:

eth0 has 10 Mbits of bandwitch, i want limite:

eth1 =&gt; 4 Mbits
eth2.10 =&gt; 2Mbits
eth2.20 =&gt; 2Mbits
eth2.30 =&gt; 2Mbits

i run on Shorewall 3.2.1, i have a solution ?
i have see a limit for a eth2 interface, but not in eth2.XX
    </pre>
  </blockquote>
  <pre wrap=""><!---->
I assume all the VLANs have different (RFC1918 ?) 
addresses - in which case you can set up traffic 
management on egress via eth0 and use address 
based rules to classify traffic.
  </pre>
</blockquote>
Hi<br>
<br>
thanks for your asnwer, yes all vlan use a RFC1918 ...<br>
<br>
eth1: 172.16.1.0/24<br>
eth2.10: 172.16.2.0/24<br>
eth2.20: 172.16.3.0/24<br>
eth2.30: 172.16.4.0/24<br>
<br>
if i understand you say that i can limit on the eth0 based<br>
on the 172.16.X.0/24 .. i use too masquerading, it's not<br>
a problemes ?<br>
<br>
anyone have a small samples ?<br>
<br>
thanks bye<br>
<br>
<br>
<br>
<br>
</body>
</html>