I'm using a SecureWay Firewall on AIX. This firewall has three interfaces. Interface A is our internet connection. Interface B is to a subnet containing our web servers and mail servers. Interface C is to the rest of our organization (users, etc). The internet access is shared by all our users and the servers. I would like to be able to limit user traffic (coming through Interface C) to about 30% of our internet bandwidth capacity (Interface A).. and thus guaranteeing 70% of the internet bandwidth for the servers (so that our internet customers don't have to wait). I've read some material about Traffic Shaping and Quality of Service, but I think these things go far beyond my desired goal. I'm hoping for just a few simple steps. Would the network gurus out there please point me in the right direction?