Global Bandwidth Limit Considerations Traffic shaping rules can be useful in limiting the amount of bandwidth that various applications and traffic types consume. Global limits can also be used to enforce bandwidth limits on a per device basis. A global bandwidth limit applies not only to outbound traffic, but all routed traffic on an MX security appliance or MR access point unless overridden by other configuration settings. This knowledge base article will describe certain considerations that should be taken into account when configuring the global bandwidth limit and how to use traffic shaping rules to override the global bandwidth limit when necessary. Configuration This knowledge base article describes the configuration steps required to assign a global bandwidth limit to all clients in a network. In the example that is provided each client is assigned a global bandwidth limit of 1024 kbps download and 512 kbps upload. This configuration change would apply to all traffic out of the MX to the internet, and it would also be applied to traffic between VLANs on the MX. For example, if you have file servers in VLAN 2 and clients in VLAN 3, the global bandwidth limit would apply to traffic destined to the internet in addition to traffic between devices in VLAN 2 and 3. The global bandwidth limit applies to all clients in a network unless overridden by a group or billing policy. Considerations In many cases the global bandwidth limit will be utilized to limit a client’s traffic to the internet, but clients will still need to access internal LAN resources without a bandwidth limit. Traffic shaping rules can be configured to ignore the global bandwidth limit for routed traffic. In this example, we will assume a global bandwidth limit of 1024 Kbps down and 512 Kbps up. There are two VLANs configured on the MX, but we do not want to limit the bandwidth between clients on VLAN 2 (192.168.2.0/24) and VLAN 3 (192.168.3.0/24). We will create a new traffic shaping rule using Custom expressions to exclude traffic that has a destination IP address in VLAN 2 or 3. Browse to Security & SD-WAN > Configure > SD-WAN &Traffic shaping > Traffic shaping rules (or, for MR access points, Wireless > Configure > Firewall & Traffic Shaping > Traffic shaping rules😞 Full doc here: https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Global_Bandwidth_Limit_Considerations
... View more
