cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
dreth
Level 7
Report Inappropriate Content
Message 1 of 5

bandwidth control (7.6.2.13.0 version)

Jump to solution

Hi all
I've created class to limit traffic and also created rule in policy, but it seems like its not working. After checking in CLI i clearly see that somehow these classes dont work.
Please note that even if i created rule criteria "always", it still didnt work.
I've even restarted MWG process as one of comments suggested, but it didnt help.
I followed instructions from https://community.mcafee.com/docs/DOC-8742#comment-32002

 

1) classes

classes.png2) rule in policy

policy.png
3) output of CLI

Every 2.0s: tc -s -d class show dev eth0                         Fri Aug 18 08:46:53 2017

class htb 1:1 root rate 1Gbit ceil 1Gbit linklayer ethernet burst 1375b/1 mpu 0b overhead

0b cburst 1375b/1 mpu 0b overhead 0b level 7

Sent 4844 bytes 56 pkt (dropped 0, overlimits 0 requeues 0)

rate 0bit 0pps backlog 0b 0p requeues 0

lended: 56 borrowed: 0 giants: 0

tokens: 175 ctokens: 175

class htb 1:2 parent 1:1 rate 1Kbit ceil 30Mbit linklayer ethernet burst 1600b/1 mpu 0b o

verhead 0b cburst 1593b/1 mpu 0b overhead 0b level 6

Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)

rate 0bit 0pps backlog 0b 0p requeues 0

lended: 0 borrowed: 0 giants: 0

tokens: 200000000 ctokens: 6656

class htb 1:3 parent 1:2 prio 1 quantum 1000 rate 1Kbit ceil 1500Kbit linklayer ethernet

burst 1600b/1 mpu 0b overhead 0b cburst 1599b/1 mpu 0b overhead 0b level 0

Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)

rate 0bit 0pps backlog 0b 0p requeues 0

lended: 0 borrowed: 0 giants: 0

tokens: 200000000 ctokens: 133328

--------

---------

Every 2.0s: tc -s -d class show dev eth1                         Fri Aug 18 08:47:01 2017

class htb 1:1 root rate 1Gbit ceil 1Gbit linklayer ethernet burst 1375b/1 mpu 0b overhead

0b cburst 1375b/1 mpu 0b overhead 0b level 7

Sent 11828 bytes 15 pkt (dropped 0, overlimits 0 requeues 0)

rate 0bit 0pps backlog 0b 0p requeues 0

lended: 15 borrowed: 0 giants: 0

tokens: -145 ctokens: -145

class htb 1:2 parent 1:1 rate 1Kbit ceil 30Mbit linklayer ethernet burst 1600b/1 mpu 0b o

verhead 0b cburst 1593b/1 mpu 0b overhead 0b level 6

Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)

rate 0bit 0pps backlog 0b 0p requeues 0

lended: 0 borrowed: 0 giants: 0

tokens: 200000000 ctokens: 6656

class htb 1:3 parent 1:2 prio 1 quantum 1000 rate 1Kbit ceil 1500Kbit linklayer ethernet

burst 1600b/1 mpu 0b overhead 0b cburst 1599b/1 mpu 0b overhead 0b level 0

Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)

rate 0bit 0pps backlog 0b 0p requeues 0

lended: 0 borrowed: 0 giants: 0

tokens: 200000000 ctokens: 133328

-----------------------------------

Every 2.0s: tc -s -d class show dev eth1                         Fri Aug 18 08:47:01 2017

class htb 1:1 root rate 1Gbit ceil 1Gbit linklayer ethernet burst 1375b/1 mpu 0b overhead

0b cburst 1375b/1 mpu 0b overhead 0b level 7

Sent 11828 bytes 15 pkt (dropped 0, overlimits 0 requeues 0)

rate 0bit 0pps backlog 0b 0p requeues 0

lended: 15 borrowed: 0 giants: 0

tokens: -145 ctokens: -145

class htb 1:2 parent 1:1 rate 1Kbit ceil 30Mbit linklayer ethernet burst 1600b/1 mpu 0b o

verhead 0b cburst 1593b/1 mpu 0b overhead 0b level 6

Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)

rate 0bit 0pps backlog 0b 0p requeues 0

lended: 0 borrowed: 0 giants: 0

tokens: 200000000 ctokens: 6656

class htb 1:3 parent 1:2 prio 1 quantum 1000 rate 1Kbit ceil 1500Kbit linklayer ethernet

burst 1600b/1 mpu 0b overhead 0b cburst 1599b/1 mpu 0b overhead 0b level 0

Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)

rate 0bit 0pps backlog 0b 0p requeues 0

lended: 0 borrowed: 0 giants: 0

tokens: 200000000 ctokens: 133328
---------------

very 2.0s: tc -s -d class show dev ifb0                         Fri Aug 18 09:39:32 2017

class htb 1:1 root rate 1Gbit ceil 1Gbit linklayer ethernet burst 1375b/1 mpu 0b overhead

0b cburst 1375b/1 mpu 0b overhead 0b level 7

Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)

rate 0bit 0pps backlog 0b 0p requeues 0

lended: 0 borrowed: 0 giants: 0

tokens: 187 ctokens: 187

class htb 1:2 parent 1:1 rate 1Kbit ceil 30Mbit linklayer ethernet burst 1600b/1 mpu 0b o

verhead 0b cburst 1593b/1 mpu 0b overhead 0b level 6

Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)

rate 0bit 0pps backlog 0b 0p requeues 0

lended: 0 borrowed: 0 giants: 0

tokens: 200000000 ctokens: 6656

class htb 1:3 parent 1:2 prio 7 quantum 1000 rate 1Kbit ceil 1500Kbit linklayer ethernet

burst 1600b/1 mpu 0b overhead 0b cburst 1599b/1 mpu 0b overhead 0b level 0

Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)

rate 0bit 0pps backlog 0b 0p requeues 0

lended: 0 borrowed: 0 giants: 0

tokens: 200000000 ctokens: 133328

1 Solution

Accepted Solutions
McAfee Employee mkutrieba
McAfee Employee
Report Inappropriate Content
Message 4 of 5

Re: bandwidth control (7.6.2.13.0 version)

Jump to solution

Hi,

I think the reason is your current version 7.6.2.13.

Due to our best practices article the bandwidth control support for proxy HA and transparent modes was added in 7.7.0:

Under Introduction:

"..7.7.0 adds support for transparent and proxy HA modes (See: Defining applicable Network Interfaces)."

Current main release: 7.7.2.3.0

Regards,

Marcel

4 Replies
McAfee Employee mkutrieba
McAfee Employee
Report Inappropriate Content
Message 2 of 5

Re: bandwidth control (7.6.2.13.0 version)

Jump to solution

Hi,

Can you please tell us which network setup you have configured (Proxy (WCCP), Proxy HA or Transparent modes)?

Regards,

Marcel

dreth
Level 7
Report Inappropriate Content
Message 3 of 5

Re: bandwidth control (7.6.2.13.0 version)

Jump to solution

I guess its WCCP. For sure its not HA and not transparent

McAfee Employee mkutrieba
McAfee Employee
Report Inappropriate Content
Message 4 of 5

Re: bandwidth control (7.6.2.13.0 version)

Jump to solution

Hi,

I think the reason is your current version 7.6.2.13.

Due to our best practices article the bandwidth control support for proxy HA and transparent modes was added in 7.7.0:

Under Introduction:

"..7.7.0 adds support for transparent and proxy HA modes (See: Defining applicable Network Interfaces)."

Current main release: 7.7.2.3.0

Regards,

Marcel

dreth
Level 7
Report Inappropriate Content
Message 5 of 5

Re: bandwidth control (7.6.2.13.0 version)

Jump to solution

I did double check.

Ints in transparent router mode.

Thanks Marcel !

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community