The below configuration is set to manage bandwidth for an entire subnet, but can be modified to work per-IP
traffic-control { advanced-queue { filters { match 100 { attach-to 1 description "Direct to Download Limiter" ip { destination { address 192.168.10.0/23 } } target 101 } match 200 { attach-to 1 description "Direct to Upload Limiter" ip { source { address 192.168.10.0/23 } } target 201 } } leaf { queue 101 { bandwidth 45mbit description "Download Limiter" parent 1 priority 4 queue-type LanDown } queue 201 { bandwidth 21mbit description "Upload Limiter" parent 1 priority 4 queue-type LanUp } } queue-type { hfq LanDown { description "Limit Download" host-identifier dip max-rate 30mbit subnet 192.168.10.0/23 } hfq LanUp { description "Limit Upload" host-identifier sip max-rate 15mbit subnet 192.168.10.0/23 } } root { queue 1 { attach-to global bandwidth 1000mbit description "LAN Traffic" } } }}