Set bandwidth limit for LAN extension

You can configure the bandwidth limit in FortiGate for the LAN extension switch, i.e., le-switch, on the FortiExtender side. Just like allowaccess and login password, the bandwidth limit for LAN extension can be configured in a profile, but can also be overridden in a extender entry.

config extender-controller extender-profile
  edit "FX200F-lanext-default"
    set model FX200F
    set extension lan-extension
    set enforce-bandwidth [enable|disable]
    set bandwidth-limit 1000 // only shown when enforce-bandwidth is enable
    config lan-extension
        …
    end
  end
  config extender-controller extender
    edit "FX0015919000027"
        set id "FX201E5919000027"
        set authorized enable
        set extension-type lan-extension
        set override-enforce-bandwidth [enable|disable] // override the profile setting
        set enforce-bandwidth [enable|disable]
        set bandwidth-limit 1003 // only shown when enforce-bandwidth is enable
        set profile "FX201E-lanext-default"
    next
  end

Parameter	Description
enforce-bandwidth [enable|disable]	Enable/disable the enforcement of bandwidth limit on the LAN extension interface.
bandwidth-limit <integer>	Set the FortiExtender LAN extension interface bandwidth limit in Mbps. The range is from 1 to 16776000.

Once it is configured, the FortiExtender will have the "shaper" configuration as shown in the example below and it can have bandwidth limit with the configuration. The terms “le-traffic-shaper” and “le-shaping-policy" are predefined, and will be created in FortiExtender.

config firewall shaper traffic-shaper
    edit le-traffic-shaper
        set max-bandwidth 1024 // set bandwidth-unit mbps
    next
  end
  config firewall shaping-policy
    edit le-shaping-policy
        set status enable
        set dstintf le-agg-link
        set traffic-shaper le-traffic-shaper
    next
  end