I'm strugling a bit with enabling quotas for my guest users.
I need to enanble a daily limit of lets say 100MB for accounts that need to remain valid for a month. So basically a users that has used up 100MB should idealy be presented with a captive portal explaining he has used up his qouta.
For this I've configured a service with a Bandwidth Limit enforcement profile.
This diconnects the user and changes him back to the logon role but nothing is stopping the user from just logging back on again and continuing the downloads. After some time (related to the User Interim stats frequency on the controller?) he wil get kicked off again but he can just repeat this indefinitly.
Idealy I would also be able to configure mac authentication in there but that seems to mess up the disconnect completely. Using MAC auth, even with the same bandwidht limit enforcement profile, when authenticated using MAC-auth users do not get disconnected at all. Even after downloading over 5 times the allowed quota over twice the 5 mins I set as User Interim stats frequency.
If I then manualy disconnect the user I do see a reauthentication using MAC-auth so it does appear my RFC 3576 does appear to be configured correctly. Offcourse using the disconnect the user is reconnecting immediatly.
So, can anybody explain me..
1) how to actualy disable a user account / device untill the daily limit resets
2) why using MAC-auth this seems to fail completely?