Fortinet FortiGate Series Administration Guide

Traffic shaping enhancements What’s new in FortiOS Version 4.0 MR1
FortiGate Version 4.0 MR1 Administration Guide
78 01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
To configure a per-IP traffic shaper - CLI
config firewall shaper per-ip-shaper
edit <shaper_name>
set bps <bandwidth>
config iplist
edit <entry_id>
set start <ip4>
set end <ip4>
end
end
The accounting and quota options are described in the following section.
Accounting and quota enforcement
Both the shared and per-IP traffic shapers provide traffic accounting with enforceable
quotas.
To configure traffic quotas and accounting - web-based manager
1 Go to Firewall > Traffic Shaper > Shared or Firewall > Traffic Shaper > Per-IP.
2 Select Create New or select the Edit icon for an existing traffic shaper.
3 In the Quotas and Accounting section, enter the following information:
Figure 7: Traffic shaper quotas and accounting configuration
4 Configure other traffic shaping options as needed.
5 Select OK.
Delete icon Delete the IP address/range entry.
Add Add an entry to the table.
Variable Description Default
bps <bandwidth> Enter the maximum allowed bandwidth in Kbps. This limit
applies to each IP address.
Set to 0 to disable bandwidth limit.
0
start <ip4>
end <ip4>
Enter the starting and ending IP addresses for an
address range that this shaper controls. To enter a single
IP address, enter the address as both start and end.
No
default.
None Select to disable accounting and quotas.
Enforce Traffic Quota n MB per Select to enforce a traffic quota. Enter the maximum
amount of data in Mbytes and select the time period:
Hour, Day, Week, or Month. Traffic beyond the quota is
blocked.
Generate Accounting Log every Enable to log the volume of traffic through the traffic
shaper. Select the log period: Hour, Day, Week, or
Month.

Fortinet FortiGate Series Specifications

General

Model	FortiGate Series
Category	Firewall
Throughput	Varies by model
Interfaces	Varies by model
Concurrent Sessions	Varies by model
VPN Support	Yes
High Availability	Yes
Firewall Throughput	Varies by model
VPN Throughput	Varies by model
IPS Throughput	Varies by model
NGFW Throughput	Varies by model
Threat Protection Throughput	Varies by model
New Sessions per Second	Varies by model
Power Supply	Varies by model
Security Features	Firewall, IPS, Application Control, Web Filtering, Antivirus, VPN
Virtual Domains	Yes
Form Factor	Desktop, Rackmount