Maximum volume of data per wireless client

[Jaro]

Hi All, 

Devices: Cisco Prime, ISE, WLC 5520.

I have one business case, where I need to restrict amount of data per wireless client, because of limited amount of data and because it will be open wifi for customer. Do you have any idea how to do it with devices mentioned above ? 

Maybe there are any different restriction for wifi users, which can help me to keep amount of data under control...

Thank you

[balaji.bandi]

Not sure you can do only 1 user (not that i am ware, but you can do per SSID for all the users)

example :

https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/113682-bdr-limit-guide-00.html

May be with ISE can be possible, not that i have tested.

Some notes confirms not support (may have changed recently with Cat 9800 - not have hands on, but understand testing myself)

https://community.cisco.com/t5/wireless-mobility-documents/can-i-control-the-bandwidth-per-client-or-configure-bandwidth/ta-p/3132932

[JPavonM]

For this to be done you need to set it up on the RADIUS servers, as far it support quotas.

There you add the ammount of MB you allow the user to use, and then the RADIUS server trigger a CoA packet to disconnect such user and not allow any new incomming Access Request from that device. But be sure to setup the quota per username and not in the old style MAC address, as private MACs could bypass this feature.

HTH
-Jesus
*** Please Rate Helpful Responses ***

[Arshad Safrulla]

Interesting, Any idea how the usage statistics shared with Radius server? 

[JPavonM]

Usage stats are shared from WLC to RADIUS server through RADIUS Accounting messages using port 1813.

[Rich R]

This is a fairly standard feature with guest WiFi providers - eg check out https://www.g2.com/categories/guest-wi-fi-providers

We have experience working with Purple and ElevenOS.

[Arshad Safrulla]

With an open network it is little bit difficult to control the volume of data per client as MAC randomization will have an impact, best way is to us a third party tool where the user is uniquely identified and the bandwidth caps are implemented accordingly. 

Recently we deployed a small scale solution with fortigate firewall which hosted the splash page locally in the firewall and implemented data usage caps based on the username.