Technical Tip: Source interface in the traffic shaping policy

[akamath]

Description
This article describes how to add source interfaces as criteria for classifying traffic in a firewall shaping policy.

Solution
This CLI command is added.

# config firewall shaping-policy
    edit 1
        set srcintf <interface_name>
        ......
    next
end

Example.

In this example, there are two shaping policies.

- Policy 1 is for traffic from the Office to the Server, with the speed limited to 5MB/s.
- Policy 2 is for traffic from the Lab to the Server, with the speed limited to 1MB/s.

CLI commands to configure the FortiGate.

# config firewall shaping-policy
    edit 1
        set name "Office_Speed_5MB"
        set service "ALL"
        set srcintf "port13"
        set dstintf "port9"
        set traffic-shaper "5MB/s"
        set traffic-shaper-reverse "5MB/s"
        set srcaddr "all"
        set dstaddr "all"
    next
        edit 2
            set name "Lab_Speed_1MB"
            set service "ALL"
            set srcintf "port10"
            set dstintf "port9"
            set traffic-shaper "1MB/s"
            set traffic-shaper-reverse "1MB/s"
            set srcaddr "all"
            set dstaddr "all"
        next
    end