Fortinet black logo

Admin Guide (FGT-Managed)

Set bandwidth limit for LAN extension

Set bandwidth limit for LAN extension

Just like allowaccess and login password, the bandwidth limit for the LAN extension can be configured in a profile, and can also be overridden in an extender entry.

config extender-controller extender-profile
  edit "FX200F-lanext-default"
    set model FX200F
    set extension lan-extension
    set enforce-bandwidth [enable|disable]
    set bandwidth-limit 1000 // only shown when enforce-bandwidth is enable
    config lan-extension
        …
    end
  end
  config extender-controller extender
    edit "FX0015919000027"
        set id "FX201E5919000027"
        set authorized enable
        set extension-type lan-extension
        set override-enforce-bandwidth [enable|disable] // override the profile setting
        set enforce-bandwidth [enable|disable]
        set bandwidth-limit 1003 // only shown when enforce-bandwidth is enable
        set profile "FX201E-lanext-default"
    next
  end
Parameter Description
enforce-bandwidth [enable|disable] Enable/Disable the enforcement of bandwidth limit on the LAN extension interface.
bandwidth-limit <integer>

Set the FortiExtender LAN extension interface bandwidth limit in Mbps. The range is from 1 to 16776000.

Once it is configured, the FortiExtender will have the "shaper" configuration as shown in the example below, and it can have bandwidth limit with the configuration. The terms “le-traffic-shaper” and “le-shaping-policy" are predefined, and will be created in the FortiExtender.

config firewall shaper traffic-shaper
    edit le-traffic-shaper
        set max-bandwidth 1024 // set bandwidth-unit mbps
    next
  end
  config firewall shaping-policy
    edit le-shaping-policy
        set status enable
        set dstintf le-agg-link
        set traffic-shaper le-traffic-shaper
    next
  end

Set bandwidth limit for LAN extension

Just like allowaccess and login password, the bandwidth limit for the LAN extension can be configured in a profile, and can also be overridden in an extender entry.

config extender-controller extender-profile
  edit "FX200F-lanext-default"
    set model FX200F
    set extension lan-extension
    set enforce-bandwidth [enable|disable]
    set bandwidth-limit 1000 // only shown when enforce-bandwidth is enable
    config lan-extension
        …
    end
  end
  config extender-controller extender
    edit "FX0015919000027"
        set id "FX201E5919000027"
        set authorized enable
        set extension-type lan-extension
        set override-enforce-bandwidth [enable|disable] // override the profile setting
        set enforce-bandwidth [enable|disable]
        set bandwidth-limit 1003 // only shown when enforce-bandwidth is enable
        set profile "FX201E-lanext-default"
    next
  end
Parameter Description
enforce-bandwidth [enable|disable] Enable/Disable the enforcement of bandwidth limit on the LAN extension interface.
bandwidth-limit <integer>

Set the FortiExtender LAN extension interface bandwidth limit in Mbps. The range is from 1 to 16776000.

Once it is configured, the FortiExtender will have the "shaper" configuration as shown in the example below, and it can have bandwidth limit with the configuration. The terms “le-traffic-shaper” and “le-shaping-policy" are predefined, and will be created in the FortiExtender.

config firewall shaper traffic-shaper
    edit le-traffic-shaper
        set max-bandwidth 1024 // set bandwidth-unit mbps
    next
  end
  config firewall shaping-policy
    edit le-shaping-policy
        set status enable
        set dstintf le-agg-link
        set traffic-shaper le-traffic-shaper
    next
  end