D-Link NetDefend DFL-1660, User Manual

Page: 503 / 595

other words the netmask for the network must be specified for NetDefendOS.
Specifying Group Limits
Once the way the method of grouping is selected, the next step is to specify the Group Limits.
These limits can consist of one or both of the following:
• Group Limit Total
This value specifies a limit for each user within the grouping. For example, if the grouping is by
source IP address and the total specified is 100 Kbps then this is saying that no one IP address
can take more than 100 Kbps of bandwidth.
• Group Precedence Guarantees
In addition to, or as an alternative to the total group limit, individual precedences can have
values specified. These values are, in fact, guarantees (not limits) for each user in a group. For
example, precedence 3 might have the value 50 Kbps and this is saying that an individual user
(in other words, each source IP if that is the selected grouping) with that precedence will be
guaranteed 50 Kbps at the expense of lower precedences.
The precedences for each user must be allocated by different pipe rules that trigger on particular
users. For example, if grouping is by source IP then different pipe rules will trigger on different
IPs and send the traffic into the same pipe with the appropriate precedence.
The potential sum of the precedence values could clearly become greater than the capacity of the
pipe in some circumstances so it is important to specify the total pipe limit when using these
guarantees.
Combining the Group Total and Precedences
Use of group precedences and the group total can be combined. This means that:
• The users in a group are first separated by pipe rules into precedences.
• The users are then subject to the guarantees specified for their precedence.
• The combined traffic is subject to the total group limit.
The illustration below shows this flow where the grouping has been selected to be according to
source IP.
10.1.7. Pipe Groups Chapter 10. Traffic Management
503