Per Wlan - Rate-Limit

[mplaksin0]

Hello, anyone know if its possible to set a maximum bandwidth for the entire wlan or for entire Vlan in the WLC 5508 ?

Thanks

[Nicolas Darchis]

No. An external device would be required for that.

The problem is that limiting over the air is kind of hard. You can't really prevent to send on a shared medium.

There are QoS bandwitdth limitations on the WLC but it's one side only

[mplaksin0]

Thanks for answer

I dont want to limit in the air, maybe limit the interface vlan associated to the Access-Point

[ericgarnel · Accepted solution]

This is a big desire for us too.

You can do this multiple ways on the infrastructure:

if using 6500s, you can use user-based rate limiting

you can do this on various firewall products such as pfsense.

You can use ingress & egress queuing on the switch, but it may not work as desired.

We settled on using ip-nbar & policy routing for now to clamp down on file sharing protocols and also download urls with various extensions such as .iso, .dmg, .zip.....

The challenge we found with per user limiting was that few solutions support the client count/demand that we see.

If your environment is more spread out, you may have better luck with traffic policing and/or shaping at the switch level.

As per wlan rate limiting, it will really depend on your infrastructure hardware & IOS supported functions.

I agree about not shaping over the air, keep as much extraneous traffic off the air as possible.