Potentially resurrecting a dead thread here, but just popping in to say I figured out what the deal was. Your minimum bandwidth guarantees for all controlling rules cannot total more than your total...