We have implemented the Juniper SRX550 in our company.

Now we have one issue that how to restrict the internal user download speed from internet.

Take one example that i want to restrict the end user with IP:192.168.1.20/32 downloading

speed up to 1M via my external port ge-0/0/6.0.

Below is my setting:

[edit firewall policer p1M]

root@SRX550# show

if-exceeding {

bandwidth-limit 1m;

burst-size-limit 15k;

}

then discard;

[edit firewall family inet]

root@SRX550# show filter limit-user

term 10 {

from {

    destination-address {

        192.168.1.20/32;

    }

}

then policer p1M;

}

term else {

then accept;

}

[edit interfaces ge-0/0/6]

root@SRX550# show

per-unit-scheduler;

unit 0 {

family inet {

    filter {

        input limit-user;

    }

    address Hidden Here;

}

}

As per the setting, the end user downloading speed should not exceed the 1m (125KB in

windows), but the result is the downloading speed for this end users still can up to 400KB

via HTTP/HTTPS.

Please advise. Thanks.