Hi,
for a potential customer I'm looking for a way to limit a single user with multiple devices to a max amount of download bandwidth (say 200MB)
Authentication needs to be WPA Enterprise so I cannot use the guest user repository. Max download bandwidth needs to be cumulative for al devices and be reset at midnight (easy part :) ) and a user is not allowed to go past his daily quota so I cannot use the endpoint repository and accounting is reset with every new session.
So I was thinking about adding an attribute called usage to the local user but I cannot figure out how I can use this in an enforcement profile so I can update this attribute in en post authentication enforcement (usage = %{localuser:usage}+accounting usage) but I cannot find a enforcement profile type to do this (or even create the attribute first time the user logs on.
PoC will be configured 30/5/2018 (I know it's short day) and the Aruba SE's involved are all saying it's theoretically possible but I cannot find any input here or on Arubapedia on how to do this. There's a thread from mpgioia: http://community.arubanetworks.com/t5/Security/CPPM-Local-User-DB-Attribute-Designation-Enforcement-Profile/m-p/267109#M26021 Unfortunately there's no explenation on how to do the SQL filter query on new attributes and he got around using the attribute in the enforcement policy, not the enforcement profile.
I will start setting up the PoC with regular Guest User and Regular onboarding because the requested functionality more or less exists by default. Hopefully I can get some usefull info during the day to add.
Thanks, Erik