Bandwidth VSAs for layer 3 authentication

MVP
MVP
Q:

Bandwidth VSAs attribute is added for layer authenticated users. 



A:

Starting from ArubaOS 8.2, the managed device can assign per-user or per-group bandwidth rate on Layer 3 authenticated clients. To direct the managed device to enforce bandwidth rates for specific clients after successful Captive-Portal authentication, three RADIUS Vendor-Specific Attributes named Bandwidth-VSAs are added in the RADIUS Access-Accept packet

 

It is supported only tunnel-forwarding mode, decrypted-tunnel- forwarding modes and wired-connected clients are supported .

 

Radius servers are required to response with the specific Radius Attribute to authenticate 

 

Which can be verified as below,

 

(LC7240) #show aaa radius-attributes  | include Nomadix-Group-Bw

Nomadix-Group-Bw-Policy-ID        19     Integer      Nomadix    3309

(LC7240) #show aaa radius-attributes  | include WISPr-Bandwidth-Max

WISPr-Bandwidth-Max-Down          8      Integer      WISPr      14122

WISPr-Bandwidth-Max-Up            7      Integer      WISPr      14122

(LC7240) #

 

In the controller side we don't need any configuration but in the server we have to do the configuration. 

Version history
Revision #:
2 of 2
Last update:
‎02-28-2018 01:27 AM
Updated by:
 
Labels (1)
Contributors
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: