Bandwidth limitation per VLAN not per User

[MichelRueger]

Hi, all I am looking for a solution to limit bandwidth on the MX for a specific VLAN (Guest) I want to limit bandwidth to 100MB/S for the VLAN so all client together do not get more than this. 

Has somebody an idea how to make this. As in the Traffic Shaping Page it is always per client.

Regards Michel Rueger

[dstewart]

Group policies will help you..

Creating and Applying Group Policies - Cisco Meraki

[MichelRueger]

It is written that this policy will be applied to all client in this VLAN. SO if I add a bandwidth of 100MB in this Policy each client will get 100MB but I want 100MB for all client in this Network (VLAN)

[Brash]

There's no way to achieve this across the board.

You can limit the subnet to a specific amount of WAN uplink bandwidth using the WAN priority shaping settings.

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Using_Packet_Prioritization_on_a_Tr...

For LAN, you can use CoS/QoS tagging for prioritization, however there's no direct mapping to an amount of bandwidth.

[RaphaelL]

Not ideal , but let's say you only have 1 uplink at the moment. Getting a second uplink and route your guess trafic to WAN2 and set the shaping to WAN2 to 100Mbps would be one lazy way to do it.

[GIdenJoe]

Traffic shaping in this way is more intended to be done on a Cisco router instead of an MX.
The only way you can "some" control is use the 3 configurable queues (high medium low) and assign traffic from each source subnet to a specific queue.  But a true limit will only be done per flow.

[Dunky]

I achieve this via the Traffic shaping rules where I limit the total bandwidth available to all clients on specific subnets added together, as per below:

[mlefebvre]

That is not working the way you think it is working, shaping is applied per-flow, not as a total to the subnets you've included.

@MichelRueger fyi that unfortunately what you are asking for is not possible on Meraki at this time.

[Dunky]

Really?, wow that is not good then.  It doesn't matter too much for me as we send traffic from guest subnets over WAN2, it was more to limit the bandwidth from guests on WAN1 when WAN2 failed.

Yet again, another reasonable feature that's not available on the MX, it does make me question whether the MX is really fit for purpose as a firewall.