Especially when you want to adapt and have them assigned dynamically user roles are great in most cases. If you have 3 or 4 bandwidth profiles, you just create 3 or 4 roles and can put the bandwidth contracts in there but also per-application access/QoS/bandwidth. Just return the role name as RADIUS attribute during the authentication, or use CoA/RFC3799 afterwards to change the role. In most cases using roles as an 'abstraction' makes things easier and better maintainable. With the information you shared, it is hard to tell how to make roles work to your benefit.
Maybe best to speak to your Aruba partner or Aruba SE to get yourself educated in user roles.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
------------------------------
Original Message:
Sent: Jan 08, 2021 12:04 PM
From: Alexander Shulgin
Subject: How to control bandwith using WISPr-Bandwidth-Max-Up/Down
Thanks.
Unfortunately we cannot use static roles and need to dynamically change the bandwidth enforcement.
Is anything else could be done here to control the bandwidth by just sending plain Radius response? Any idea why Aruba decided to implement it in such complicated way?
------------------------------
Alexander Shulgin
Original Message:
Sent: Jan 08, 2021 07:49 AM
From: Herman Robers
Subject: How to control bandwith using WISPr-Bandwidth-Max-Up/Down
Don't think those attributes are supported, and if they are it is probably only when WISPr authentication is configured. Captive Portal is not the same as WISPr.
Bandwidth management is done on the role level. Add a rule of type Bandwidth Contract to your role:
Then by returning different roles in the Aruba-User-Role RADIUS return attribute you can assign that role.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
Original Message:
Sent: Jan 07, 2021 03:15 PM
From: Alexander Shulgin
Subject: How to control bandwith using WISPr-Bandwidth-Max-Up/Down
Hello,
In my setup I have AP-303H managed by Aruba Central
One SSID is configured to use external portal and FreeRadius.
When AP authenticate user the Radius Server sends two attributes in response:
- WISPr-Bandwidth-Max-Up and WISPr-Bandwidth-Max-Down
but seems like the AP is completely ignoring these values.
So my question is how can I control the bandwidth dynamically per user?
Thanks
------------------------------
Alexander Shulgin
------------------------------