Controllerless Networks

Hello!

I have a Aruba Mobility Controller 3400 with version: 6.4.4.9

I have multiples SSID

But one of these SSID is for Public connection the reason any one in the office like a internet connection use this SSID, this have a Captive Portal with only Agreement display without user and password to access, when trying to control the Bandwidth this don't work, but when remove the Captive Portal work fine de BW Contracts.

I tested with Per User, Per Role and Per AP group.

Thanks for any help!

You need to put the bandwidth contract on the user role the user gets AFTER the user clicks on the Acknowledgement.  Do not put it on the logon--xxx role.

Sorry for my ignorance of this, but when you say put in the User Roles you say the firewall policy where I created for that SSID, where have Firewall Policyes tab and Bandwidth Contracts Tab?

Thanks

This I have

No.

Edit the user role.  If you scroll down there is a place to add an upstream and/or downstream bandwidth contract.

Sorry but I don locate that area when enter to the User Roles, when select the User Role and click edit display the page in the jpg previously

Please see here:  https://www.arubanetworks.com/techdocs/ArubaOS_6_5_4_X_Web_Help/Web_Help_Index.htm#ArubaFrameStyles/Firewall_Roles/User_Roles.htm%3FTocPath%3DArubaOS%2520User%2520Guide%2520Topics%7CRoles%2520and%2520Policies%7C_____2 to see how to get to the user role, and then edit the bandwidth contract.

Thanks

Thas exactly what I have in the Bandwidth Contracts tabs have a 

Upstream and Downstream settings,

but what you mean whit this:

"user gets AFTER the user clicks on the Acknowledgement.  Do not put it on the logon--xxx role."

attached my settings

Which user role are you applying the bandwidth contract to?

This Bandwidth Contracts applyed only to this SSID

Bandwidth contracts can only be applied to a role.  What role are they applied to?  That is crucial.

This I have

That is the AAA profile, not the role.  What role do your users get after they click on "accept"?  That is the role that needs the bandwidth contracts.

Thats the Initial role? 

You need to assign bandwidth contract to the post authentication role, i.e. the role guest user gets after they are successfully authenticated or click "I accept the terms". Assigning BW contract to initial role will not help you as it will only will applied for the period user connects to the network and authenticates.

Hello Sorry for the delay.

I dont not have much experience with this kind of Controllers sorry for that, that is the reason for a lot of question for the same topic.

but looking the controller configuration you told me change the authentication role and assign in there, just only saw that page where assig different kind on roles and the other page is the captive portal L3 authentication settings, is one of these pages where need to assig that role?

Thanks!