Cloud Managed Networks

Hi,

We have developed a Solution in CLOUD for professional WiFi scenarios (External Captive portal, External RADIUS, etc...) and we are starting to integrate our solution with ARUBA equipment.  

I am checking all the RADIUS attributes that the ARUBA APs support ( #show radius-attributes on CLI) and I don´t find any of them related to the Bandwith Speed or with the volume.

For integrations with similar systems such as Purple, the suggested way of proceeding is creating user Profiles in ARUBA CENTRAL and sending the Role via RADIUS, but this is not the most convenient way of proceeding for us as we don´t want to define the profiles in ARUBA CENTRAL; just in our platform, and send them to the users via RADIUS.

The volume could also be controlled with RADIUS CoA, but would be nice if it could be passed to the user too (the accounting packet interval we use is 300s)

With other vendors we use parameters such as WISPR-Bandwidth-Max-Down, WISPR-Bandwidth-Max-Up, Maximum-Data-Rate-Downstream,…. Mikrotik-Rate-Limit, Mikrotik,-Recv-Limit, etc...  There is no equivalent parameters for ARUBA?

I attach the supported attributes in our Laboratory IAP-205H

User roles are the core access enforcement mechanism for Aruba wired and wireless. You can add these enforcements to a user role.

I know.

My question was: can I use RADIUS parameters to control BW and volume using RADIUS parameters instead of User Roles, so if I want to change a User Plan I do not need to edit the User Role in Aruba Central, just change the value passed by the RADIUS?

Hi,

No suggestions about this? Any ideas?

Thanks in advance

Hi Aruba staff,

Could you please answer to this question, any ideas?

There is a big lack of information about RADIUS implementations, which is crucial for integration with third party companies such as External Captive Portals.

Any clue about this issue will be appreciated.

To be clear, if you want to enforce the sustained bandwidth, there is no enforcement mechanism outside a role, so you would need to use a role.  If you want to enforce the total bandwidth, that is outside of the Wireless LAN controller and would have to be done with the radius server with a combination of interim radius accounting and a COA from the radius server to disconnect the user after.

Thanks cJoseph. I don´t like it, but that's exactly the answer I was looking for.