Limit internet bandwidth for some users

[taufeeq taufeeq]

Dear friends,

I am new to Wireless.

Here is my query seeking help,

I have a 2504 Controller (os version 7.0)with 7 access poins attached and with 2 vlans. one for regular users and another for gues users.

IT Director asked me to allocate 25% of the internet bandwidth to guest vlan and 75 bw to the regular. how can i do it plz help!!!

Regards,

taufeeq.

[Stephen Rodriguez · Accepted solution]

THere are two ways you can accomplish this.  One would be to use the QoS Profiles and set the max CIR

http://www.cisco.com/en/US/docs/wireless/controller/5.0/configuration/guide/c5ccfg.html#wp1254534

The other way, would be to do rate limiting/policing at L3 based on the subnet

http://www.cisco.com/en/US/docs/ios/12_2/qos/configuration/guide/qcfpoli_ps1835_TSD_Products_Configuration_Guide_Chapter.html#wp1006481

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

[taufeeq taufeeq]

Thank you Mr. Stephen

I will follow ur suggestion and reply with the results.

Thank you again!!!

regards

[taufeeq taufeeq]

Dear Stephen,

As suggested I tried to config QoS in Controlller through GUI. Here is what I did.

Wireless-> Unchecked 802.11a/n or 802.11b/g/n ->QoS ->Profiles(Roles is Unavailable)->Selected Bronze->Entered Description->Applied

Since Roles(under QoS is not available) I could not assign Per-User Bandwidth Contracts.

Assigning QoS Profile to a WLAN:

WLANs->clicked on ID-> QoS->Selected Bronze form the Drop Down.

After all I see that the bandwidth for the seleced WLAN is same as before.

Please help!!!

Thanks,

Taufeeq.

[Abhishek Abhishek · Accepted solution]

Hello Taufeeq,

As per your query i can suggest you the following solution-

To allocate 25% of the internet bandwidth to guest vlan and 75% bandwidth to regular users you can use traffic policing-

Configuring Traffic Policing

To successfully configure the Traffic Policing feature, a traffic class and a traffic policy must be created, and the traffic policy must be attached to a specified interface. These tasks are performed using the Modular QoS Command-Line Interface (CLI)

For more information you can refer to the link -

http://www.cisco.com/en/US/docs/ios/12_2/qos/configuration/guide/qcfpoli_ps1835_TSD_Products_Configuration_Guide_Chapter.html#wp1006389

You can also use Call Admission control to achieve the same.

http://www.cisco.com/en/US/docs/wireless/controller/5.0/configuration/guide/c5ccfg.html#wp1254534

Hope this will help you.

[taufeeq taufeeq]

Hi Abhishek,

I want to do it in WLAN Controller or Core Switch (4503e).

What do u suggest is the better place to configure QoS in order to achieve my aim.

In the image you may also c that under QoS there is no roles option available.

Will I be able to achive my aim if i enable tht hw can i make it available/visible there.

Thanks & Regards,

Taufeeq.

[taufeeq taufeeq]

Hello Abhishek,

Controlling bandwidth at the controller itself is better i think?

We have a 4503e switch does the traffic policing works fine in 4503 switch or is it for routers only?

Please have look at the attachements. I cannot c the per-user bandwidth contract feature and roles under QoS as well.

[Scott Fella]

Well on the 2504 you are limited sort of than if you had a 5508:). Here is a link to look at and see if this is possible for you.

http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080baf502.shtml

Sent from Cisco Technical Support iPhone App

[taufeeq taufeeq]

Dear Scott,

I have a Cat 4503e

running-IPBASEK9-M), Version 15.1(1)SG, RELEASE SOFTWARE (fc3). Is it possible to configure on it?

Thanks in advance,

Regards,

Taufeeq

[Scott Fella]

The 2504 doesn't have that feature yet. Policy maps can be applied in most of the switches so that shouldn't be an issue. Have you tried it?

Sent from Cisco Technical Support iPhone App

[taufeeq taufeeq]

Hi Scott,

I configured traffic policing in the core switch. I wanna ask u about cir which i gave as 1048500. Does it mean that for guest vlan only 1048500 bit of traffic is allowed per second and if this value exceeds the packets are dropped.

OR

For all the guest vlans users only a total of 1048500bit of traffic is allowed.Because when i check conformed bytes its increasing does it mean that when it reaches to the cir value specified the interface will drop the packets???

Here is the config.

DOM-CORE-1#sh policy-map

  Policy Map Guest_VLAN_Policy-Map

    Class Guest_VLAN_Class-Map

     police cir 1048500 bc 32765

       conform-action drop

       exceed-action drop

My n/w is like this Access Sw->core sw->ASA->Router->internet

Because there are many access switches conecting to core sw and each of them has the guest vlan I decided to apply policy map on the interface conecting to asa.

DOM-CORE-1#sh policy-map interface g3/47

GigabitEthernet3/47

  Service-policy input: Guest_VLAN_Policy-Map

    Class-map: Guest_VLAN_Class-Map (match-all)

      22 packets

      Match: access-group 150

      police:

          cir 1048500 bps, bc 32765 bytes

        conformed 3102 bytes; actions:

          drop

        exceeded 0 bytes; actions:

          drop

        conformed 0000 bps, exceed 0000 bps

    Class-map: class-default (match-any)

      2661191 packets

      Match: any

        2661191 packets

ACL 150 is a permit ACL for the Guest Vlan.

looking forward for ur reply.

thanks in advance:)