Simon Hobson wrote:
> Sebastian Mazur wrote:
>
>   
>> my shorewall is version 4.0.15 on Debian Lenny. I have 3 following
>> interfaces:
>>
>> eth0 net (4mbit/512kbit)
>> eth1 loc (100mbit)
>> eth2 loc (100mbit)
>>
>> I want to shape traffic from net on two lan interfaces like:
>> - default is 2000mbit for each local interface
>> - if is no traffic on eth1 is 4mbit for eth2 (and vice versa)
>>     
>
> You can only shape outgoing traffic on an interface, and you can't 
> couple interfaces together. What you'll need to do is use an IFB 
> (Intermediate Functional Block) and arrange for all traffic in bound 
> on eth0 to be routed through it. You can shape traffic out of this 
> virtual interface and then AFTER it's shaped, route it out of the two 
> real interfaces. For the shaping you then follow the same steps as 
> you would for a two interface router (ie shape outbound on eth0 and 
> your IFB).
>
> For outbound traffic to the net, that's simple enough to shape on eth0.
>
> Sorry, it's not something I've ever done (not had a need to), so I 
> can't tell you the steps required to set it up

someting like following should help:

tcclasses:
    eth0    1    256kbit 512kbit    2
    eth1    2    2mbit    4mbit   1
    eth2    3    2mbit    4mbit   1

tcdevices:
    eth0    4mbit    512kbit
    eth1    -           110mbit
    eth2    -           110mbit

tcrules:
    1:P   {ips of eth1 ad eth2}   eth0   all
    1:T   {ips of eth1 ad eth2}   eth0   all
    2      0.0.0.0/0!{ips of eth1 ad eth2}   eth1   all
    3      0.0.0.0/0!{ips of eth1 ad eth2}   eth2   all


cheers


------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to