a QoS profile to define the
bandwidth limits and priority for up to eight classes of service.
You can set both guaranteed and maximum bandwidth limits for individual
classes and for the collective classes. Priorities determine how
traffic is treated in the presence of contention.
To fully enable the firewall to provide QoS, also:
Define the traffic that you
want to receive QoS treatment (select Policies > QoS to add or modify
a QoS policy).
Enable QoS on an interface (select Network > QoS).
characters). The name is case-sensitive and must be
unique. Use only letters, numbers, spaces, hyphens, and underscores.
Enter the maximum throughput (in Mbps) for
traffic leaving the firewall through this interface. The value is
0 by default, which specifies the firewall limit (60,000 Mbps in
PAN-OS 7.1.16 and later releases; 16,000 in PAN-OS 7.1.15 and earlier
for a QoS
profile must be less than or equal to the
Though this is not a required field, it
is recommended to always define the
a QoS profile.
Enter the bandwidth that is guaranteed for
this profile (Mbps). When the egress guaranteed bandwidth is exceeded,
the firewall passes traffic on a best-effort basis.
and specify how
to treat individual QoS classes. You can select one or more classes
do not configure a class, you can still include it in a QoS policy.
In this case, the traffic is subject to overall QoS limits. Traffic
that does not match a QoS policy will be assigned to class 4.
—Click and select a priority
to assign it to a class:
occurs, traffic that is assigned a lower priority is dropped. Real-time
priority uses its own separate queue.
—Click and enter the maximum throughput (in Mbps)
for this class. The value is 0 by default, which specifies the firewall
limit (60,000 Mbps in PAN-OS 7.1.16 and later releases; 16,000 in
PAN-OS 7.1.15 and earlier releases). The
a QoS class must be less than or equal to the
for the QoS profile.
Though this is not a required field, we
recommend you always define the
for a QoS profile.
and enter the guaranteed bandwidth (Mbps) for this class. Guaranteed
bandwidth assigned to a class is not reserved for that class—bandwidth
that is unused continues to remain available to all traffic. However,
when the egress guaranteed bandwidth for a traffic class is exceeded,
the firewall passes that traffic on a best-effort basis.