Network and System Management
320
NETGEAR ProSAFE VPN Firewall FVS318G v2
Performance Management
Performance management consists of controlling the traffic through the VPN firewall so that
the necessary traffic gets through when there is a bottleneck. You can either reduce
unnecessary traffic or reschedule some traffic to low-peak times to prevent bottlenecks from
occurring in the first place. The VPN firewall provides the necessary features and tools to
help the network manager accomplish these goals.
This section contains the following topics:
• Bandwidth Capacity
• Features That Reduce Traffic
• Features That Increase Traffic
• Use QoS and Bandwidth Assignment to Shift the Traffic Mix
• Monitoring Tools for Traffic Management
Bandwidth Capacity
The maximum bandwidth capacity of the VPN firewall in each direction is as follows:
• LAN side. 8000 Mbp
s (eight LAN ports at 1000 Mbps each).
• WAN side. 1000 Mbp
s (one active WAN port at 1000 Mbps).
In practice, the WAN-side bandwidth capacity is much lower when DS
L or cable modems are
used to connect to the Internet: The typical traffic rate is 1.5 Mbps. As a result, and
depending on the traffic that is being carried, the WAN side of the VPN firewall is the limiting
factor for the data rate for most installations.
Features That Reduce Traffic
You can adjust the following features of the VPN firewall in such a way that the traffic load on
the WAN side decreases:
• LAN W
AN outbound rules (also referred to as service blocking)
• DMZ WAN outbound rules (also referred to as service blocking)
• Content filt
ering
• Source MAC filtering
LAN WAN Outbound Rules and DMZ WAN Outbound Rules
You can control specific outbound traffic (from LAN to WAN and from the DMZ to WAN). The
LAN WAN Rules screen and the DMZ WAN Rules screen list all existing rules for outbound
traffic. Any outbound rule that you create restricts outgoing traffic and therefore decreases
the traffic load on the WAN side.
On the LAN WAN screen, if you did not define any rules, only the defau
lt rule is listed. The
default LAN WAN outbound rule allows all outgoing traffic.