Regarding traffic shaping on juniper SRX550
- by peilin
We have implemented the Juniper SRX550 in our company.
Now we have one issue that how to restrict the internal user download speed from internet.
Take one example that i want to restrict the end user with IP:192.168.1.20/32 downloading
speed up to 1M via my external port ge-0/0/6.0.
Below is my setting:
[edit firewall policer p1M]
root@SRX550# show
if-exceeding {
bandwidth-limit 1m;
burst-size-limit 15k;
}
then discard;
[edit firewall family inet]
root@SRX550# show filter limit-user
term 10 {
from {
destination-address {
192.168.1.20/32;
}
}
then policer p1M;
}
term else {
then accept;
}
[edit interfaces ge-0/0/6]
root@SRX550# show
per-unit-scheduler;
unit 0 {
family inet {
filter {
input limit-user;
}
address Hidden Here;
}
}
As per the setting, the end user downloading speed should not exceed the 1m (125KB in
windows), but the result is the downloading speed for this end users still can up to 400KB
via HTTP/HTTPS.
Please advise. Thanks.
