APconnections NETEQUALIZER NE 4000 User manual

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 1 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
NetEqualizer
User Guide
© Copyright 2014-2017 APconnections, Inc. All Rights Reserved.
No part of this publication including text, examples, diagrams or illustrations may be reproduced,
transmitted, or translated in any form or by any means, electronic, mechanical, manual, optical
or otherwise, for any purpose, without prior written permission of APconnections, Inc.

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 2 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
Table of Contents
Where to Install NetEqualizer.................................................................................. 6!
Setting up the NetEqualizer .................................................................................... 7!
Factory Default IP Settings ............................................................................................. 7!
Cabling the NetEqualizer into your Network ......................................................................... 7!
Configuring the NetEqualizer........................................................................................... 9!
The NetEqualizer Dashboard .................................................................................. 10!
Navigation – How to Move Around the System..............................................................11!
Setting Preferences.............................................................................................12!
Configure Equalizing............................................................................................13!
Equalizing Defined ......................................................................................................13!
Configuring Equalizing Parameters ...................................................................................14!
Set Key Equalizing Parameters ............................................................................ 15!
Using the RATIO Parameter to Influence Equalizing ......................................................................... 15!
Setting your Trunk Size........................................................................................................... 16!
Key Parameter to Adjust Equalizing Sensitivity .............................................................................. 17!
Set Additional Equalizing Parameters ...................................................................18!
Additional Parameters to Adjust Equalizing Sensitivity..................................................................... 18!
Parameters to Size Internal Tables............................................................................................. 20!
Viewing your Equalizing Parameter Settings ........................................................................21!
Equalizing in Action .....................................................................................................21!
Setting Bandwidth Limits ......................................................................................22!
Configure Hard Limits by IP ...............................................................................23!
Hard Limit Rules ................................................................................................................... 24!
Creating a Hard Limit............................................................................................................. 25!
Modifying a Hard Limit ........................................................................................................... 25!
Deleting a Hard Limit ............................................................................................................. 26!
Adding Bursting to Hard Limits.................................................................................................. 27!
Viewing your Hard Limits ........................................................................................................ 29!
Setting up Bandwidth Pools ...............................................................................30!
Bandwidth Pool Rules ............................................................................................................. 31!
Creating a Pool..................................................................................................................... 32!
Adding Pool Members ............................................................................................................. 33!
Modifying a Pool or Pool Member ............................................................................................... 34!
Deleting a Pool or Pool Member................................................................................................. 34!
Viewing Pools and Pool Members ............................................................................................... 35!
Setting VLAN Limits ........................................................................................37!
VLAN Limits Rules ................................................................................................................. 38!
Creating a VLAN Limit ............................................................................................................ 38!
Modifying a VLAN Limit........................................................................................................... 39!
Deleting a VLAN Limit ............................................................................................................ 39!
Viewing VLAN Limits .............................................................................................................. 40!
View All Traffic Limits..................................................................................................41

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 3 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
Limit P2P Traffic ................................................................................................42!
Connection Limits Defined .............................................................................................42!
Viewing Connection Counts ............................................................................................43!
Setting Connection Limits..............................................................................................43!
Connection Limit Rules ........................................................................................................... 44!
Creating a Connection Limit ..................................................................................................... 45!
Modifying a Connection Limit ................................................................................................... 46!
Deleting a Connection Limit ..................................................................................................... 47!
Viewing your Connection Limits.......................................................................................48!
Consider Setting Bandwidth Priority .........................................................................49!
Defining Priority Traffic ................................................................................................49!
Creating a Priority Limit ......................................................................................................... 50!
Modifying a Priority Limit........................................................................................................ 51!
Deleting a Priority Limit ......................................................................................................... 51!
Masking Off Traffic......................................................................................................52!
Creating a Masked Host........................................................................................................... 53!
Modifying a Masked Host ......................................................................................................... 53!
Deleting a Masked Host........................................................................................................... 54!
Viewing your Priority Limits and Masked Traffic ...................................................................55!
Restricting Bandwidth Usage ..................................................................................56!
Establishing User Quotas ...............................................................................................56!
User Quota Rules .................................................................................................................. 57!
Creating User Quota Rules ....................................................................................................... 58!
Resetting User Quota Rules ...................................................................................................... 59!
Modifying User Quota Rules...................................................................................................... 61!
Deleting User Quota Rules ....................................................................................................... 61!
Starting the Quota System ....................................................................................................... 62!
Viewing User Quotas .............................................................................................................. 63!
MAC Redirection .........................................................................................................65!
Perform Quick Edits ............................................................................................ 67!
Quick Edit - Deleting a Rule ..................................................................................................... 68!
Quick Edit - Adding a Rule ....................................................................................................... 68!
Distributed Denial of Service Attack (DDoS) Tools.........................................................69!
DDoS Monitor.............................................................................................................69!
DDoS Firewall ............................................................................................................70!
Monitoring and Reporting ......................................................................................71!
Dynamic Real-Time Reporting (RTR) .................................................................................73!
RTR Dashboard...........................................................................................................73!
Real-time General Traffic........................................................................................................ 74!
Real-time Pool Data ............................................................................................................... 74!
RTR Active Connections Reports ......................................................................................75!
View Active Connections ......................................................................................................... 75!
IP Lookups........................................................................................................................... 76!
View Active IPv6 Connections.................................................................................................... 79!
View Connection Counts .......................................................................................................... 80!
View Active Penalties ............................................................................................................. 81!
RTR Traffic History Reports............................................................................................82!
Start RTR............................................................................................................................ 83!
Manage Tracked IPs ............................................................................................................... 83!
General Traffic History ........................................................................................................... 84!
Traffic History by IP/Pool/VLAN ................................................................................................ 84!
Top Talkers ......................................................................................................................... 86!
General Penalty Reports ......................................................................................................... 86!
Clear Reporting Data.............................................................................................................. 87!

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 4 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
Export Data to a Reporting Data Warehouse.................................................................................. 88!
View NetEqualizer Log..................................................................................................88!
Configuration ............................................................................................................90!
Running Processes ................................................................................................................. 91!
Start/Stop RTR...........................................................................................................92!
Autostart RTR ............................................................................................................92!
Email Notifications ......................................................................................................93!
Configure Email.................................................................................................................... 93!
Configure Alerts ................................................................................................................... 94!
Redundancy and Failover ......................................................................................95!
Setting up Full Redundancy............................................................................................95!
Failover ...................................................................................................................96!
Maintenance Tasks..............................................................................................97!
Powering Off the NetEqualizer........................................................................................97!
Backing Up Your Configuration Settings .............................................................................97!
Getting Software Updates for the NetEqualizer....................................................................97!
Troubleshooting ............................................................................................... 100!
Frequently Asked Questions (FAQs) ........................................................................ 103!
Appendix 1 - Equalizing Parameters, Units, & Defaults................................................. 107!
Appendix 2 - Setting/Forcing LAN Speeds and Duplex .................................................. 108!
Appendix 3 - Packet Capturing for taps such as CALEA ................................................. 110!
Appendix 4 - NetEqualizer Caching Option (NCO)........................................................ 112!
Appendix 5 - Tuning Parameters for a Large Number of subnet-ranged Limits, Pools, & Masks.. 113!
Appendix 6 - Syncing NetEqualizer Date/Time ........................................................... 114!
Appendix 7 - Firewalling the NetEqualizer................................................................ 116!
Appendix 8 – NetEqualizer Directory Integration (NDI).................................................. 117!

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 5 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
Thank you for purchasing a NetEqualizer. You are now on your way to achieving "Faster
Networks, with Zero Maintenance, at the Best Prices". Using NetEqualizer in default factory
mode will take care of almost all network congestion and priority traffic flow requirements,
and is the recommended operational mode for most customers. However, NetEqualizer also
offers a wide range of bandwidth control options, while at the same time allowing you to
keep it simple.
NetEqualizer Quick Start Guide
To perform your initial installation, you should reference the NetEqualizer Quick Start Guide.
This contains the complete system settings configuration and minimal settings required to
get you up and running. A hard copy is included in your shipping box. We also email a PDF
copy with your shipping confirmation email. You can also find our demo version (without
passwords) online.
Note: The NetEqualizer Quick Start Guide is a step-by-step instruction manual.
NetEqualizer User Guide
The NetEqualizer User Guide is intended to walk through NetEqualizer features in more
detail than our NetEqualizer Quick Start Guide. It contains detailed descriptions of
equalizing, limiting, reporting, DDoS, and our add-on modules. Once up and running, it is a
good idea to review this entire NetEqualizer User Guide, to become familiar with all of the
advanced features available to you.
Note: The NetEqualizer User Guide is not a step-by-step instruction manual. Select the feature you
are interested in from the Table of Contents and go directly to that section.
For Additional Help
Should you need further assistance setting up your NetEqualizer, please call our Support
Team at 303.997.1300 x102 or email [email protected]. If you purchased
through an authorized distributor or reseller, check with them first to determine if they
support you directly.
Key to Reading the User Guide
Entity
Format
Example
GUI Parameter
Name
Shown in bolded blue. Sometimes
followed by SYSTEM PARAMETER
NAME.
Bandwidth Up
(TRUNK_UP)
SYSTEM PARAMETER
NAME
System parameter names may follow
the GUI Parameter Name. They are in
CAPITAL LETTERS.
TRUNK_UP
Notes
Notes are shown in blue italics
preceded by "Note:".
Note: For a detailed list of the steps
necessary to get up and running, please
see the NetEqualizer Quick Start Guide.
Type in: values to be
entered
Values that you need to type in are
shown in orange italics preceded by
"Type in:".
Type in: /bridge/bridge-utils/brctl/brctl
rembrain my 99999
Click on ->Menu
Name or Tab Name
Menus are shown in orange italics
preceded by "Click on->" or "->".
Click on -> Manage Equalizing ->
Configure Parameters.
Click on ->
[button_name]
Buttons are shown in orange italics
surrounded by [square brackets]
preceded by "Click on ->" or "->".
Click on -> [Equalizing Status Indicator]
-> [Start Equalizing].

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 6 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
Where to Install NetEqualizer
NetEqualizer can be installed on any link whose traffic you would like to shape. For
maximum effectiveness, most users should install NetEqualizer between the network users
and the Internet trunk. Traffic running between your network and the Internet is generally
a constriction point in traffic flow where many users compete for this limited resource. By
placing your NetEqualizer at this junction you will automatically optimize your Internet
speed.
The NetEqualizer operates as a Transparent Bridge on your network. There is typically no
need to change anything in your network configuration to install the appliance. Simply
install the NetEqualizer between your Router and Network Switch, or anywhere you can see
the individual IP addresses you wish to shape. Set-up using the Quick Start Guide to
modify any factory default settings, and then access it via a Web Graphical User Interface.

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 7 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
Setting up the NetEqualizer
For a detailed list of the steps necessary to get up and running, please see the Quick Start
Guide. If you do not have a copy of the Quick Start Guide, please request one by calling our
Support Team at 303.997.1300 x102 or emailing [e-mail].
We mention some of the key functions performed during set-up here. However, you will
need to reference the Quick Start Guide to complete your set-up.
Factory Default IP Settings
The IP settings to access the NetEqualizer web Graphical User Interface (web GUI) have
been set to:
IP Setting
Parameter Name
Factory Default
Web GUI IP
BRIDGEIP
192.168.1.143
Web GUI Netmask
BRIDGENETMASK
255.255.255.0
Web GUI Gateway
BRIDGEROUTE
192.168.1.1
Note: The IP address for the NetEqualizer is used to access the web GUI (for management purposes
only). All factory default settings can be changed from the web GUI, the command line, or the API.
Cabling the NetEqualizer into your Network
First, make sure that you power on the
NetEqualizer. Do this by pressing the red power
button to the right of the LED panel.
Note: We recommend that you install your NetEqualizer
on a UPS, to protect from power surges and outages.
All of the NetEqualizer models (series 3000/4000/5000) have two Ethernet interfaces and a
Management Port.We are now using port plugs to help distinguish the various interface
ports on the NetEqualizer. We use four colors: 1) blue (WAN), 2) orange (LAN), 3) clear
(Management Port) and 4) black (unused).
The easiest way to figure out the ports is to look at the port plug color. The LAN
port is orange, the WAN port is blue, and the Management Port is clear.If you have
upgraded to fiber interfaces, the LAN and WAN ports will be white. For further clarification,
please see the "Where to Install the NetEqualizer" diagram below.
Management Port (CLEAR)
First, find the Management Port (Eth2). As you face the back of the machine, Eth2 is on
your top row LEFT (NE3000) or bottom row LEFT (NE4000/NE5000). Remove the clear port
plug and then plug a straight cable into the Management Port (Eth2) and connect it to your
Network Switch. If whatever you are plugging into does not have a built-in switch, then use
a crossover cable. Once you have the Management Port connected, you can now configure
your NetEqualizer.
Notes:
Once you have the NetEqualizer configured, you can change the Default Web GUI IP address. See
Appendix #2C.
To secure the management port, you can also make it accessible via https (SSH). See Appendix #2D.
If you are on a VLAN, you will need to set-up a Management Port.

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 8 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
WAN Port (BLUE or WHITE)
Remove the blue port plug (white if fiber) and then plug a crossover cable into the WAN Port
(Eth0) and connect it to the Firewall/Router. As you face the back of the machine, Eth0 is
on your bottom row LEFT (NE3000), or top row RIGHT (NE4000/ NE5000). If you have an
auto-sensing Firewall or Router, you can use a straight cable or a crossover cable.
LAN Port (ORANGE or WHITE)
Remove the orange port plug (white if fiber) and then plug a straight cable into the LAN Port
(Eth1) and connect it to your Network Switch. As you face the back of the machine, Eth1 is
on your bottom row RIGHT (NE3000) or top row LEFT (NE4000/5000). If whatever you are
plugging into does not have a built-in switch, then use a crossover cable.
Once your machine is on & connected, you should see green lights in the Power LED, Eth0,
and Eth1 LEDs, as shown in the display panel picture on the previous page.
(optional): Access Point Configuration in a Wireless Network
Put your radios in bridging mode and set your Firewall/Router at your headend to do DHCP
and NAT, instead of doing DHCP and NAT at your Access Points.
(optional): Setting LAN Port Speed and Duplex
Occasionally, customers need to manually set LAN Port Speed and Duplex as some
Firewall/Routers do not auto-negotiate correctly with the NetEqualizer. If this is happening
in your environment, you will see a large number of collisions and dropped packets as well
as reduced network throughput. Although dropped packets are not a good thing, if you are
seeing less than 1/10 of a percent (< 0.1%) of the total packets transmitted it will have no
adverse effect on your network. If it starts to approach 1 percent (1%), you should follow
Appendix #2 to set this in your environment.
(optional): Firewalling off the NetEqualizer
If you do not install the NetEqualizer behind a firewall, you should use Maintenance->
Manage Firewall to firewall off the NetEqualizer. See Appendix #7 for detailed instructions.

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 9 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
Configuring the NetEqualizer
Once the NetEqualizer is powered on and plugged in to your network, you need to access
the web GUI to configure it. The web GUI is accessible out-of-the-box via the factory default
IP address: http://192.168.1.143.If you have set up the Management Port as described
above in “Cabling the NetEqualizer into your Network”, you should now be able to access
the web GUI. The NetEqualizer Dashboard is displayed (shown below). The NetEqualizer
Dahsboard is described in detail in the next section of the User Guide.
Once you login to the NetEqualizer, your next steps to configure the NetEqualizer will be to
change the default passwords, install your license key, change your IP addresses, and set
the date/time and time zone. All of these functions are found under the [Setup]button,
circled in orange above on the NetEqualizer Dashboard.
When you Click on -> [Setup],
the Setup window at right
come up. Note that all
Setup functions are
available by clicking on the
links (orange text).
The Side Menu also can be
used to navigate to functions.
As Manage NetEqualizer
(circled in orange) is followed
by a “+”, it is an expandable
menu. Clicking on Manage
NetEqualizer + expands to
contain the same functions as listed in orange under Manage NetEqualizer on the Setup
window. All Manage NetEqualizer functions are described in detail in the Quick Start Guide.
Note that clicking on a Side Menu Item or a Link (orange text) will bring up a new
configuration window. This paradigm is repeated throughout the GUI.
Please see the Quick Start Guide, starting with Step #2: "Configuring
the NetEqualizer" to complete NetEqualizer set-up & configuration.
Notes:
Once you have the NetEqualizer configured, you can change the Default Web GUI IP address. See
Appendix #2C.
To secure the management port, you can also make it accessible via https (SSH). See Appendix #2D.
If you are on a VLAN, you will need to set-up a Management Port.

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 10 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
The NetEqualizer Dashboard
At the heart of the NetEqualizer system is the NetEqualizer Dashboard. The NetEqualizer Dashboard
provides an intuitive visual display of the status on critical data and settings within NetEqualizer.
Think of the Dashboard as your command and control center for managing your NetEqualizer. On the
picture below, the key elements that make up the Dashboard are labeled: Key Functions, Information
Buttons, Common Tasks, Status Indicators, and the Current Activity Graph. The NetEqualizer
Dashboard described below is the new redesign, available as of Software Update 8.4.
Key Functions buttons are your main access point into configuring, monitoring, reporting,
and maintaining your NetEqualizer. They include: 1) Setup, 2) Real-Time Reporting (RTR),
3) DDoS, and 4) Maintenance.
Common Tasks are shortcuts to areas within the system that you use frequently. From
here you can Start/Stop Equalizing, Show your current NetEqualizer Configuration, View
Active Connections (all traffic running through the NetEqualizer), or Run Diagnostics.
Information Buttons provide a quick overview of key settings. To help keep you up-to-
date on if you need to upgrade, we display the current software version that you are
running. You can also see the system date & time and time zone, as well as your license
key setting and any key violations. Click on any of the green buttons to go the Install
License Key screens, or on the blue Date & Time button to set your date, time or time zone.
The Dashboard contains Status Indicators, visually displaying on/off status on key
functions: Equalizing, Real-Time Reporting (RTR), Quotas, and Packet Capture. Clicking on
the Equalizing, RTR, or Quota indicators opens up the related start/stop screen. Clicking on
Packet Capture brings up the associated set-up screen.
The Current Activity Graph is a view into Real-Time General Traffic, showing the total
amount of upload and download data flowing through your NetEqualizer. Click on the graph
to open up the graph in the full RTR Dashboard.
In this User Guide, we will discuss the features available via Key Functions in detail.

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 11 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
Navigation – How to Move Around the System
Each of the Key Function screens work in the same way. Here we will review one screen, so
that you know how to navigate the NetEqualizer system.
We will use the Setup Function as our example. From the NetEqualizer Dashboard, Click on
-> [Setup]. The following screen opens.
The Setup Side Menu (circled above), can be used to navigate to each Setup Function. If a
Setup Function is followed by a “+”, it is an expandable menu. On the Setup Side Menu,
both Manage NetEqualizer+ and Manage Traffic Limits+ are expandable. Clicking on either
one opens up a sub-menu that contains the same functions as listed in orange on the Setup
window. For example, if you click on “Manage Traffic Limits +”, you will see Configure Hard
Limits, Configure Pools and VLANS, etc.
On the Setup screen, all Setup Functions are available by clicking on the links (orange
text). For example, the Manage Traffic Limits functions are circled in blue above.
Note that clicking on a Side Menu Item or a Function (orange text) will bring up a new
configuration window. This paradigm is repeated throughout the GUI.
The Navigation Menu, circled in orange above, contains shortcuts available from all
windows. These help you quickly and easily get back to the NetEqualizer Dashboard
(Home) or Key Functions (Setup, RTR, DDoS, and Maintenance) from anywhere in the
system.
The Minimize Button can be used to shrink the Side Menu, so that the main screen is
maximized. You can also use it to expand the Side Menu.
This paradigm is used throughout the screens in the NetEqualizer 8.4 GUI.
Side
Menu
Navigation
Menu
Minimize Button
Functions

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 12 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
Setting Preferences
Before you start configuring the NetEqualizer, we recommend that you select the
settings to be used for display in the GUI.
As of Software Update 8.4, we give you the opportunity to select the units you would like to
see in the NetEqualizer GUI for both configuring and reporting on your traffic.We now offer
a variety of settings to meet your needs. To get started, Click on ->[Setup] -> Preferences.
The Preferences window appears, as shown below.
Configuration Units
These units are used throughout the Setup function, specifically for configuring Equalizing
and all Traffic Limits. We strongly recommend that you set this to megabits per second
(Mbps), which best matches most customer’s environments.
General Traffic/Real-Time Graph Units
These units are used anywhere the General Traffic Graph is displayed. This includes the
NetEqualizer Dashboard, the RTR Dashboard, and in General Traffic History. We also
recommend that you set this to megabits per second (Mbps).
Traffic by IP/Pool/VLAN Graph Units
These units are used anywhere Traffic is graphed by IP, Pool, or VLAN. This includes the
RTR Dashboard, and in RTR Traffic History. We recommend that you set this to units that
give you visibility to the granularity that is most useful in your environment.
Once you have selected your settings, Click on -> [Save Changes] to keep your settings, or
click back to any other function or menu to ignore your changes.

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 13 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
Configure Equalizing
At the core of our traffic shaping capabilities is Equalizing. In this section we first
define Equalizing, and then walk you through the concepts behind the Equalizing
Parameters, and how you can tune them for your environment.
Equalizing Defined
Equalizing is a simple concept. It is the art form of looking at the usage patterns on the
network, also known as traffic “behaviors”. When things get congested on your network,
equalizing applies fairness algorithms, based on the observed traffic behavior, to ensure
that everyone gets a share of the available bandwidth.
This behavior-based approach usually mirrors what you would end up doing if you could
see and identify all of the traffic on your network, but does not require the labor and cost of
classifying everything. During congested periods on your network, applications such as
VoIP, web browsing, web-based applications (SaaS, cloud applications, etc.), short
downloads, and instant messaging (IM) all naturally receive higher priority, while large
downloads, large videos, and live video streams receive lower priority. As priority is applied
only during congested periods, traffic can flow freely when the network is not congested.
Once equalizing is in place, it automatically shapes your network when it is congested, using
algorithms to implement "fairness". The concept of “fairness” enables your network to
continue providing quick response times to the majority of your users while restricting the
network hogs. Low bandwidth users do not have to share the pain of a slow, congested
network with the network-hogging applications.
Equalizing does this by using our proprietary algorithms to implement fairness. First,
equalizing tracks how much bandwidth is being used. If bandwidth used is over a
predefined level, the network is considered congested. Once the network is considered
congested, equalizing looks at every connection (IP address pair) and puts a PENALTY on
those that are over a predefined level. Penalties are applied and removed as needed while
traffic is congested. This process continues until network congestion eases.
Equalizing bases its decision to issue penalties based on built-in fairness rules:
•The persistence of the user's connections. We look at the length of time the
connections have been live. The longer the time, the more likely a penalty.
•The amount of bandwidth used relative to the total size of the trunk.
•The number of users on the trunk. The more users active on the trunk, the less
bandwidth NetEqualizer will allow per user before issuing a penalty.
•Is the overall trunk saturated? A trunk is saturated when it reaches the percentage
defined by the RATIO parameter (default RATIO = 85%).
Equalizing is tunable, so that you can set the level of traffic that you wish to be given higher
priority, based on your network environment. By setting equalizing parameters, we offer
you the flexibility to control your level of equalizing as your network environment changes.
Rather than writing hundreds of rules to specify allocations to specific traffic as in traditional
application shaping, equalizing gets out of the game of prioritizing applications altogether.
We believe this to be a superior method to shape network traffic, particularly when the
traffic types and amounts change frequently. You will find under our Equalizing approach

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 14 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
that behavior-based shaping does not need frequent maintenance & changes address new
applications being introduced to your network.
Configuring Equalizing Parameters
Each Equalizing Parameter is discussed in detail below. For a summary of all Equalizing
parameters, please see Appendix 1, which contains a one-page cheat sheet with the default
settings and recommendations.
It is important to ensure that Equalizing is "on" before you adjust Equalizing Parameters.
NetEqualizer comes pre-configured to automatically start up with Equalizing turned on
(Equalizing Rules = On and Equalizing Process started).
Equalizing Process Started
Click on -> [Setup] -> Configure Equalizing. The Configure Equalizing window appears,
defaulted to the Key Equalizing Parameters tab, as shown below. As of Software Update 8.4,
once you are in the Configure Equalizing screen, if Equalizing is OFF, you will see a warning
message, seen here, that prompts you to start Equalizing. Click on -> [Start Equalizing] to
start the Equalizing process.
You can also verify that the Equalizing process is started by going to the NetEqualizer
Dashboard. Click on -> Home to return to the NetEqualizer Dashboard. The Equalizing
Process is running if the Equalizing Status Indicator button is ON (GREEN).
Equalizing Rules On
Once the Equalizing Process is ON, you can easily determine if Equalizing Rules are ON.
From the Configure Equaling screen, scroll down until you see Equalizing Rules. Make sure
that Equalizing Rules = On, as shown circled in blue below. This means that Equalizing
Parameters are being applied to your network traffic.

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 15 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
Set Key Equalizing Parameters
Now you can configure Equalizing Parameters. There are two tabs: Key Equalizing
Parameters, and Additional Equalizing Parameters. We will discuss both. After you change
settings on each tab, scroll to the bottom of the window, and then Click on -> [Save
Changes]to save or Click on -> [Reset] to discard.
As of Software Update 8.4, we offer configuration in Mbps, Kbps, or Bps. If you have not
already set your Preferences, Click on -> [Setup] -> Preferences and set your Configuration
Units. Then Click on -> [Setup] -> Configure Equalizing to return.
Using the RATIO Parameter to Influence Equalizing
Ratio (RATIO) (Percentage, Default = 85%)
NetEqualizer's Ratio parameter enables you to
influence when equalizing is applied. The RATIO
parameter refers to the network utilization on a
percentage basis. RATIO can be set from 1 to 100.
Our default value of 85 has the rules kick in when
your network is at 85% utilization.
RATIO determines when Equalizing kicks in on your
network trunk. This supplements any custom rules
that you have set-up. When you lower RATIO,
Equalizing will kick-in sooner, making equalizing more
sensitive. When you raise RATIO, Equalizing kicks in
later, making equalizing less sensitive.
To change the Ratio (RATIO) Parameter:
If you are not already on the Setup screen, from the
NetEqualizer Dashboard, Click on -> [Setup] ->
Configure Equalizing.The Configure Equalizing
window appears, defaulted to Key Equalizing
Parameters Tab, as shown above.RATIO (circled in
blue) defaults to 85. Type in: your RATIO value to
change from the default.In our example above, we
changed RATIO to 88%. For most cases, we
recommend that you do not exceed 95% for RATIO.
Note: Throughout the GUI, as a visual reminder that you have unsaved changes, once you change a
field it will be highlighted in yellow until you either Save Changes or Reset to cancel. You can either
Save Changes now, or continue and save when you have finished all entries on this tab.
Why RATIO is Helpful
Sometimes the sheer volume of users on the network cannot be controlled by custom rules
you have implemented. For example, setting a per-user hard limit of 2Mbps will prevent a
user from going over the 2Mbps prescribed level. However, if 20 of your users get on at
one time with large downloads, a DS3 trunk, for example, is quickly overwhelmed. To set
custom rules, such as per-user hard limits, please see Setting Bandwidth Limits).

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 16 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
When Equalizing rules kick in at RATIO percent trunk utilization, they provide a unique
safety valve for busy hours when your trunk gets full.
Note: The RATIO parameter is applied to Equalizing your entire network trunk, and also to any
Bandwidth Pools or VLAN Limits that you have established.
Setting your Trunk Size
Bandwidth Up (TRUNK_UP) (Configuration Units set in Preferences, Default = 15,360Mbps)
& Bandwidth Down (TRUNK_DOWN)
Set these parameters to the size of your network pipe for outbound traffic (Bandwidth Up)
and inbound traffic (Bandwidth Down). NetEqualizer allows for different speeds for
outbound and inbound links, as equalizing shapes bi-directionally. These parameters are set
in whatever Configuration Units you selected in Preferences.
Bandwidth Up and Bandwidth Down typically match your network capacity. These
parameters are used by the NetEqualizer so it can react and take action when your trunk is
nearing capacity, by starting Equalizing to shape your network traffic. Making either of
these parameters larger than your actual trunk size will
make the shaping rules less restrictive. Making them
smaller than your actual trunk size will make them
more restrictive. Alternatively, you can reduce RATIO
to make shaping rules more restrictive.
The NetEqualizer defaults Bandwidth Up and Bandwidth
Down to a 15,360 Mbps.However, you will see what
bandwidth level you are licensed in the notes to the
right of the parameter, as shown below. In our
example, our license is for 750Mbps.
“Put in your uplink trunk size, in Mbps, here. A T1 is 1.5
Mbps. The system is authorized to pass 750 Mbps.
Changes to this parameter will require equalizing to be
stopped and restarted to take effect.”
Click on -> [Setup] -> Configure Equalizing to bring up
the Configure Equalizing window. Type in: your
Bandwidth Up & Down values to set your trunk size,
which should be less than or equal to (<=) your
license. In our example, we set both to 750Mbps.
Note: Bandwidth Up & Down do not enforce the link speed
from your provider. We assume your provider has already
enforced your contracted speed.
Whenever you change your Trunk Size, you will need to restart the Equalizing process for
changes to take effect. You can either Save Changes now, or continue and save when you
have finished all entries on this tab.
To Save Changes and restart now: Click on -> [Save Changes]. This message appears:

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 17 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
Now Click on -> [Restart Equalizing]to restart the Equalizing process. Once complete, you
will see the following message at the top of the screen. You can click on the “x” at the right
of the message to dismiss it.
Note: We display messages at the top of the screen throughout the GUI. Error messages are red,
warnings are yellow, and success messages are green.
Key Parameter to Adjust Equalizing Sensitivity
The last Key Equalizing Parameter that needs to be set is Hog Minimum. From the Setup
menu, Click on -> [Setup] -> Configure Equalizing.
Hog Minimum (HOGMIN) (Configuration Units set in Preferences, Default = 1Mbps)
HOGMIN defines the minimum traffic level for which
connections will not be penalized. In other words, a
connection using less bandwidth in megabits per
second than this number will never get penalized.
The default value of 1 megabit per second will
ensure that most business-critical traffic, such as
VoIP, web browsing, and web applications, are
never accidentally throttled back when NetEqualizer
reaches a congestion threshold, as they will be
below Hog Minimum.
With larger network pipes, you should raise Hog
Minimum to allow more traffic types to pass without
being penalized. Here are our recommended
settings for HOGMIN, based on network size:
Network Size
HOGMIN
< 50Mbps
.5 Mbps
>= 50Mbps to < 200Mbps
.75 Mbps
>= 200Mbps to < 1Gbps
1 Mbps
>= 1Gbps
2 Mbps
Type in: your preferred Hog Minimum value to set
Hog Minimum. In our example, we kept Hog
Minimum at 1Mbps, which is the recommended
value for our 750Mbps pipe.
As we have now completed all entries on the Key Parameters Tab, Click on -> [Save
Changes] to save or Click on -> [Reset] to discard.

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 18 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
Set Additional Equalizing Parameters
You may wish to set Additional Equalizing
Parameters, which are shown at right.
From the NetEqualizer Dashboard, Click on ->
[Setup] -> Configure Equalizing to bring up the
Configure Equalizing window. Click on ->
Additional Equalizing Parameters (circled in
blue at right) to open the Additional Equalizing
Parameters tab.
There are four (4) Additional Equalizing
Parameters that you can configure. You may
need to tune your Penalty Unit and Connection
Tracking Table Size to optimize for your
network pipe. Maximum Penalty and Inactive
Tics are rarely changed. We will review each
below, and offer tips and recommendations on
what you should set these parameters to,
based on your network size.
After you change settings on this tab, scroll to
the bottom of the window, and then Click on ->
[Save Changes] to save or Click on -> [Reset]
to discard.
Additional Parameters to Adjust Equalizing Sensitivity
In some instances, Equalizing defaults may need to be custom tuned for sensitivity. For
example, if streaming music feeds break midstream at times when the total usage on the
trunk is light, it might be because Equalizing is tuned to be too sensitive.
Penalty Unit (PENALTY_UNIT) (100ths of seconds, Default = 5)
PENALTY_UNIT is the minimum penalty that will be inflicted on a packet when a penalty is
set up on an IP address. Values for this variable are integers in the range 1 -100, with 1
being the least restrictive.
PENALTY_UNIT is the unit of time that NetEqualizer will start with when delaying a packet of
Internet data. It iteratively increases penalties by this value should a “hog” not respond to
the initial penalty. By increasing the size of this parameter, the NetEqualizer will scale back
hogs more quickly. Note that the higher your network speed, the more sensitive it is to
PENALTY_UNIT. The default value of 5 will work fine on any network, but if you see the
NetEqualizer slowing streams too severely, you may want to reduce this value.
Here are the recommended settings for PENALTY_UNIT, based on network size:
Network Size
PENALTY_UNIT
>= 10Mbps to < 50Mbps
2 or 3
* >= 50Mbps
1

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 19 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
* Networks much larger than 50Mbps may require a PENALTY UNIT resolution smaller than
100ths of seconds. In the NetEqualizer Web GUI, the smallest penalty that can be applied to
an IP Packet is 1/100 of a second. If you are finding that a default PENALTY of 1 is putting
too much latency on your connections, then you can adjust the PENALTY unit to 1/1000 of
second with the following command:
From the NetEqualizer Dashboard, Click on ->[Maintenance] -> Troubleshooting
Tools -> Run a Command.
Type in: /bridge/bridge-utils/brctl/brctl rembrain my 99999
Maximum Penalty (MAX_PENALTY) (100ths of seconds, Default = 140)
This parameter is rarely changed from the Default. If it is changed, it needs to be set to a
value that is greater than Penalty Unit.
This is the maximum delay that NetEqualizer will allow. NetEqualizer increments a delay by
the value of PENALTY_UNIT every few seconds in the event a connection continues to use
excessive bandwidth, until MAX_PENALTY is reached. A MAX_PENALTY of 200 (2 seconds)
usually kills the connection altogether, as most servers on the Internet give up
communicating when communications lag for more than two seconds.
Moving Average (MOVING_AVG) (no longer on Web GUI)
No longer visible on the NetEqualizer web GUI, as this is rarely changed. MOVING_AVG
keeps NetEqualizer from penalizing short bursts of activity. For example, if this variable is
set to 8 and the network is hit with a burst of 8000 bytes over a second from an IP address,
the moving average for the second would be 8000/8 or 1000 bytes. If the burst persisted
for four seconds, the average would be 32000/8 or 4000 bytes.
The larger this number, the longer a burst can be before it gets penalized. Note that if this
parameter is set too high, nothing will ever get penalized. The preset value for
MOVING_AVG from our factory-delivered NetEqualizer is designed to handle any size
network and need not be changed.
Note: If you manually edit the NetEqualizer configuration file, you will see MOVING_AVG in the
configuration. Please keep it set to its default value.
ANCIENT (no longer on Web GUI)
Ancient is no longer visible on the NetEqualizer GUI. The Ancient parameter is how long to
keep a penalty in effect, in seconds. The preset value for ANCIENT from our factory-
delivered NetEqualizer is designed to handle any size network and need not be changed.
Note: If you manually edit the NetEqualizer configuration file, you will see ANCIENT in the
configuration. Please keep it set to its default value of 20.
HOGMAX (no longer on Web GUI)
Legacy variable, no longer visible on the NetEqualizer Web GUI, and no longer used.
Note: If you manually edit the NetEqualizer configuration file, you will see HOGMAX in the
configuration. Please keep it set to its default value.

User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com Page 20 of 120 rev. 20170131
© 2014-2017 APconnections, Inc. All Rights Reserved version 8.4
Parameters to Size Internal Tables
If you are not already on the Configure Equalizing screen, from the NetEqualizer Dashboard,
Click on -> [Setup] -> Configure Equalizing -> Additional Equalizing Parameters.You
should now be on the Additional Equalizing Parameters Tab. Type in a new value to modify
the following parameters to size internal tables:
Connection Tracking Table Size (# of connections to track in 1 second, Default=10,000)
(BRAIN_SIZE)
Connection Tracking Table Size determines how many connections (IP pairs) the
NetEqualizer watches at one time during any given second.NetEqualizer keeps a mini-
history of the activity of all users on a trunk. It uses this database to make decisions on
who is using too much bandwidth.
Here are recommended settings for Connection Tracking Table Size, based on network size:
Network Size
Connection Tracking Table Size
(BRAIN_SIZE)
< 100Mbps
20,000
>= 100Mbps to < 1Gbps
30,000
>= 1Gbps
40,000
Type in: a new value for BRAIN_SIZE to change this parameter.
Note: NetEqualizer can handle up to 5 million or more connections every minute. We point this out as
many customers compare our connection ability with that of their Router, which uses a timeframe of
minutes.
Inactive Tics (INACTIVE_TICS) (units are hundredths of seconds, Default = 200)
This parameter is rarely changed from the Default. This is how long an entry in the
Connection Tracking Table (BRAIN_SIZE from above) will live before being removed if no
activity is detected. Generally, we are not interested in connections that are idle. For
example, a value of 200 for this parameter instructs the NetEqualizer to “cancel” tracking a
connection after 2 seconds.
A recommended maximum value of 800 is 8 seconds. The minimum is 100 (or 1 second).
Type in: value for INACTIVE_TICS to change this value.
BUFFERS (no longer on Web GUI)
No longer visible on the latest NetEqualizer Web GUI, as it is rarely changed.BUFFERS
control the number of connections that can simultaneously be penalized (slowed down).
When NetEqualizer sets a penalty on a connection, it assigns a “delay” buffer to this
connection to slow it down. NetEqualizer reserves a finite number of “delay” buffers when it
powers up. The preset value for BUFFERS from our factory-delivered NetEqualizer is
designed to handle any size network and need not be changed.
Note: If you manually edit the NetEqualizer configuration file, you will see BUFFERS in the
configuration.Do not change this value; changes will be ignored.
As we have now completed all entries on the Additional Equalizing Parameters Tab, Click on
-> [Save Changes] to save or Click on -> [Reset] to discard.