Bandwidth Limitations and Access Control

[HiLinks]

Hi
i m using wingate since 15 days for testing, i found it very good n i want to buy a 50 user licence, before that i have two questions that i wish to be answered in details.
1. i have 30 client pc connected to internet through wingate server and i have 512 KBPS DSL internet connection, when 2 or 3 clients start downloading, they sucks all the bandwidth and remaining clients feel difficulties to access to the internet, i wish to restrict that any of client pc cannot have bandwidth more than 64 KBPS, i have created a restriction in bandwidth throtaling but i m not sure wut to put in destination and source address?

2. Right now i m useing assumed users base access control, is it possible to control access by MAC addresses, so the only allowed MAC can have access to the internet

please reply me as soon as possible and in details , step by step configuration, so i can easily do that all.

Best Regards
Ali

[Pascal]

Big(ish) topic this. The source IP should be set to the IP of the client you wish to apply the restriction to. That should be easy enough as it sounds as if you already have your thumb pressed firmly onto the throttling rules.

The MAC policies are a slightly different matter. I'm going to be working from the assumption that you are not using any specific policies setup at the moment (Except for requiring users to be assumed). Ideally this should go into the System Policies, so - if you go to GateKeeper -> Users -> System Policies. For the Everyone user (Assuming only the one there) switch to the "Advanced" page. There, select "Specify which rights this recipient has rights for". Click "Add Filter". Click "Add Criterion". Select "This Criterion is met if". In the first dropdown select "Client MAC address". In the second dropdown select "equals". In the edit box, enter the MAC address. Then click "OK".

For each client you want to restrict repeat from "Add Filter". Each filter is read as "This Filter" OR "This Filter OR etc." while Criterion within the Filter are read as "This Criterion AND This Criterion AND etc.".

If you have policies setup in individual services you can either set the Default Rights to "Must also be granted" or duplicate this in the individual policies.

One important point is to make a backup of your registry (GateKeeper -> Options -> Advanced -> Save Registry Settings) in-case your policies lock you out of GateKeeper. One other, often preferred way, is to setup the GateKeeper (RCS Service) policies to exclude Default Rights and to expressly add a policy that grants access to the people you want to have access.

Hope that helps.

[HiLinks]

Thanks for your kind reply... so i have to put client ip addresses in source address there in bandwidth throtaling?. okay, but wut to put in destination address? should i leave it blank?
and one more thing that is it posibale that except putting each client ip address, i put single ip address with subnet mask that it will apply on all ip range?
i m waiting ur response, thanks a lot again, have a gud time
best regards .... Ali

[Pascal]

I believe so and yes, you can use masks to apply it to a range.