Rate Limit WiFi SSIDs

[spetrillo]

Hello all,

I have 3 SSIDs behind my OPNsense firewall and I would like to be able to rate limit 2 of the 3. Has the shaper gotten any better than a few years ago or is there a better product to do this?

Thanks,
Steve

[Patrick M. Hausen]

Can your APs map SSIDs to VLANs? Or do you have separate APs for each SSID?

[spetrillo]

My SSIDs are mapped to vlans. At this time I have 3 APs covering but I need to run the 3 SSIDs on each AP.

[Patrick M. Hausen]

So, trunk from OPNsense to switch carrying all three VLANs tagged, shaper per interface - sounds like a viable plan.

If the shaper is "good enough" as always depends. Given that OPNsense is free and you can possibly repurpose existing hardware for a test installation, I would give it a go. If it works to your satisfaction, buy a nice firewall appliance or don't  ;)

[spetrillo]

So right now I have a 2 port LAGG from OPNsense to my switch. It is carrying the SSID traffic only. So I could shape based on vlan interface and away I go?

[Patrick M. Hausen]

Yep. Don't mix tagged and untagged - run all three SSIDs/VLANs tagged from OPNsense to switch. On top of the lagg, of course.

[spetrillo]

Seems to work fine. I created and upload and download pipe, and applied a 50 meg up/down rule to it. Tested with speed test and did not go over 50 meg. Nice!

[spetrillo]

Ok one more question...

I have 6 devices that I would like to apply a 50 meg download cap and a 25 meg upload cap. Do I need to define 6 pipes for each device or one pipe for upload/download and then 6 rules for the devices?

[Patrick M. Hausen]

Sorry, someone who knows more details about the shaper should step in, here.