Discussion:
[pfSense] Captive Portal: Per-client speed
Ryan Coleman
2014-03-05 18:31:01 UTC
Permalink
It appears I can throttle individual users on the Captive Portal, but how can I limit the speed of that entire network? Is that through Traffic Shaping? And how would I do that?

The bar, I’m afraid, only has a 12x1 DSL connection. I might be able to convince them to upgrade the speed but that’s a shot in the dark. And from the looks of the options at their provider it’s slim pickings.

TIA,
Ryan
Brian Caouette
2014-03-07 15:21:44 UTC
Permalink
That connection should be more then sufficient for most people. If it
were me I would throttle at 1x512 or even 512 x 512. Web surfing and
email by nature are burst traffic so everyone should be happy. Smart
phone and tablets are a good match. I serious doubt people are going to
be streaming video in a bar so I don't foresee any issues.
Post by Ryan Coleman
It appears I can throttle individual users on the Captive Portal, but how can I limit the speed of that entire network? Is that through Traffic Shaping? And how would I do that?
The bar, I’m afraid, only has a 12x1 DSL connection. I might be able to convince them to upgrade the speed but that’s a shot in the dark. And from the looks of the options at their provider it’s slim pickings.
TIA,
Ryan
_______________________________________________
List mailing list
http://lists.pfsense.org/mailman/listinfo/list
David QuayCendre
2014-03-10 15:10:09 UTC
Permalink
Hello,
You can limit speed by client. I do it by mac address, you can do it by ip
address in captive portal by Pass-through MAC or Allowed IP addresses.
Personally I use Pass-through MAC with limitation and it work very well.
Visibly you can Enable per-user bandwidth restriction in the first tab
(Captive portal)

For the total limitation I use Traffic Shaper by interfaces the WANx are
for upload and LAN if for download. You can put rules for QoS. the first
time you can use the Wizard, and modify queues after.

The limitations are :
- for download you can only limit for total of all connections (I have
multi-Wan : 5Wan with 10Mbits (5*10Mbps=50Mbps) so my limit for the LAN
queue is 48Mbits), it is recommended to put less than the real bandwidth to
never saturate you DSL connexion.
- I think it can be interesting to limit to a number of packets by second.
Because in DSL (I have test with ADSL in France) a big number of packets
increase ping almost if only half of the bandwidth is use.

If you have solution for this points don't hesitate ! Thanks


David
That connection should be more then sufficient for most people. If it were
me I would throttle at 1x512 or even 512 x 512. Web surfing and email by
nature are burst traffic so everyone should be happy. Smart phone and
tablets are a good match. I serious doubt people are going to be streaming
video in a bar so I don't foresee any issues.
Post by Ryan Coleman
It appears I can throttle individual users on the Captive Portal, but how
can I limit the speed of that entire network? Is that through Traffic
Shaping? And how would I do that?
The bar, I'm afraid, only has a 12x1 DSL connection. I might be able to
convince them to upgrade the speed but that's a shot in the dark. And from
the looks of the options at their provider it's slim pickings.
TIA,
Ryan
_______________________________________________
List mailing list
http://lists.pfsense.org/mailman/listinfo/list
_______________________________________________
List mailing list
http://lists.pfsense.org/mailman/listinfo/list
Ryan Coleman
2014-03-10 15:38:42 UTC
Permalink
I think I'll have to write a white paper for it when I'm done. The first test with shaper killed the house network and we had to roll it back.

--
Ryan Coleman
***@me.com
m. 651.373.5015
o. 612.568.2749
Post by David QuayCendre
Hello,
You can limit speed by client. I do it by mac address, you can do it by ip address in captive portal by Pass-through MAC or Allowed IP addresses. Personally I use Pass-through MAC with limitation and it work very well.
Visibly you can Enable per-user bandwidth restriction in the first tab (Captive portal)
For the total limitation I use Traffic Shaper by interfaces the WANx are for upload and LAN if for download. You can put rules for QoS. the first time you can use the Wizard, and modify queues after.
- for download you can only limit for total of all connections (I have multi-Wan : 5Wan with 10Mbits (5*10Mbps=50Mbps) so my limit for the LAN queue is 48Mbits), it is recommended to put less than the real bandwidth to never saturate you DSL connexion.
- I think it can be interesting to limit to a number of packets by second. Because in DSL (I have test with ADSL in France) a big number of packets increase ping almost if only half of the bandwidth is use.
If you have solution for this points don't hesitate ! Thanks
David
That connection should be more then sufficient for most people. If it were me I would throttle at 1x512 or even 512 x 512. Web surfing and email by nature are burst traffic so everyone should be happy. Smart phone and tablets are a good match. I serious doubt people are going to be streaming video in a bar so I don't foresee any issues.
Post by Ryan Coleman
It appears I can throttle individual users on the Captive Portal, but how can I limit the speed of that entire network? Is that through Traffic Shaping? And how would I do that?
The bar, I’m afraid, only has a 12x1 DSL connection. I might be able to convince them to upgrade the speed but that’s a shot in the dark. And from the looks of the options at their provider it’s slim pickings.
TIA,
Ryan
_______________________________________________
List mailing list
http://lists.pfsense.org/mailman/listinfo/list
_______________________________________________
List mailing list
http://lists.pfsense.org/mailman/listinfo/list
_______________________________________________
List mailing list
http://lists.pfsense.org/mailman/listinfo/list
David Burgess
2014-03-10 16:05:24 UTC
Permalink
Post by Ryan Coleman
It appears I can throttle individual users on the Captive Portal, but how can I limit the speed of that entire network? Is that through Traffic Shaping? And how would I do that?
Create a limiter (up and down, if desired) without a mask. To your
firewall rule that passes traffic for that network, choose your
limiter(s) in the "In/Out" section.

db

Continue reading on narkive:
Loading...