Bandwidth limits on the FortiExtender Thin Edge

The FortiGate LAN extension controller can push a bandwidth limit to the FortiExtender Thin Edge. The limit is enforced on the FortiExtender using traffic shaping.

To configure a bandwidth limit:

1. On the FortiGate, create a LAN extension profile with bandwidth control enabled and a bandwidth limit configured (in Mbps):

   config extender-controller extender-profile
       edit "FX200F-lanext-default"
           set model FX200F
           set extension lan-extension
           set enforce-bandwidth enable
           set bandwidth-limit 20
       next
   end

2. Add a FortiExtender in LAN extension mode and apply the profile to it:

   config extender-controller extender
       edit "FX0035919000000"
           set id "FX200F5919000000"
           set authorized enable
           set extension-type lan-extension

           set profile "FX200F-lanext-default"
       next
   end

3. On the FortiExtender, confirm that the bandwidth configuration has been pushed to it:

   config firewall shaper
       config traffic-shaper
           edit le-traffic-shaper
               set max-bandwidth 20
               set bandwidth-unit mbps
           next
       end
   end
   config firewall shaping-policy
       edit le-shaping-policy
           set status enable
           set dstintf le-agg-link
           set traffic-shaper le-traffic-shaper
       next
   end

   If bandwidth enforcement is disabled on the FortiGate, the configuration that was pushed to the FortiExtender will be removed.