Multi Interface shaping for a GuestNet

One of the options with OPNsense’s traffic shaper is its ability to add shaping rules based upon two interfaces. This option allows you to shape traffic differently based on the direction the traffic is moving between interfaces.

For this example we will use this functionality to share a symmetric 10 Mbps internet connection between a primary LAN network and a Guest Network.

The LAN network will not be limited, traffic from users on our Guest Network will be limited to a total of 2 Mbps Download and 1 Mbps Upload.

Simple network diagram

Step 1 - Create Upload and Download Pipes

On the Pipes tab click the + button in the lower right corner. An empty Edit Pipe screen will popup.

Create Pipe For Upload (GuestNet - em2)

enabled	Checked	Check to enable the pipe
bandwidth	1	Numeric value of the desired bandwidth
bandwidth Metric	Mbit/s	Metric to use with the numeric value
mask	(Empty)	Leave empty
description	PipeUp-1Mbps	Free field, enter something descriptive

Create Pipe For Download (GuestNet - em2)

enabled	Checked	Check to enable the pipe
bandwidth	2	Numeric value of the desired bandwidth
bandwidth Metric	Mbit/s	Metric to use with the numeric value
mask	(Empty)	Leave empty
description	PipeDown-2Mbps	Free field, enter something descriptive

Step 2 - Create Rules

On the Rules tab click the + button in the lower right corner. An empty Edit rule screen will popup.

Important - Before you continue!

First change the mode to advanced, see the toggle in the left top corner of the popup dialog. One click should shift it from red (disabled) to green (enabled).

Create a rule for the download traffic

sequence	11	Auto generated number, overwrite only when needed
interface	WAN	Select the interface connected to the internet
interface2	GuestNet	Select the interface that matches your GuestNet
proto	ip	Select the protocol, IP in our example
source	any	The source address, leave on any
src-port	any	The source port to shape, leave on any
destination	any	The destination IP to shape, leave on any
dst-port	any	The destination port to shape, leave on any
direction	in	Match incoming packages (download)
target	PipeDown-2Mbps	Select the Download pipe
description	GuestNetDownload	Enter a descriptive name

Create a rule for the upload traffic

sequence	21	Auto generated number, overwrite only when needed
interface	WAN	Select the interface connected to the internet
interface2	GuestNet	Select the interface that matches your GuestNet
proto	ip	Select the protocol, IP in our example
source	any	The source address, leave on any
src-port	any	The source port to shape, leave on any
destination	any	The destination IP to shape, leave on any
dst-port	any	The destination port to shape, leave on any
direction	out	Match outgoing packages (upload)
target	PipeUp-1Mbps	Select the Upload pipe
description	GuestNetUpload	Enter a descriptive name

Now press to activate the traffic shaping rules.