Bandwidth control on WLC

Hi,
There is some kind of bandwidth control for ssid guest on the WLC?

Hi,
you can use QoS roles:
http://tiny.cc/7zx9jw
This will only affect downstream, not upstream traffic.
HTH
Amjad
You want to say "Thank you"?
Don't. Just rate the useful answers,
that is more useful than "Thank you".

Similar Messages

QoS - Bandwidth Control

Hello Experts,
we are using a couple of 4404 Controllers with software version 6.0.188.0. We would like to introduce the wifi and wired Portal to our custumers. During our testing period we discovered a little problem with the Bandwidth Control via QoS.
These are our settings:
Description...................................... For Portal (Background)
Average Data Rate................................ 512
Burst Data Rate.................................. 512
Average Realtime Data Rate....................... 256
Realtime Burst Data Rate......................... 256
Maximum RF usage per AP (%)...................... 50
Queue Length..................................... 25
protocol......................................... none
If we download a file the bandwidth restriction works fine. We get a downstream about 62 kB/s. If we upload a file the bandwidth restricion seems not working. We get an upstream about 1660 kB/s.
Are we missing something? Is there a setting to control the upstream behavior independent from downstream?
Thanks a lot, best regards,
Mathias, Michael

The settings described are for over-the-air bandwidth. The Ap can only control downstream QoS or data that it sends. Upstream QoS will be handled by the client device and cannot be controlled by the Ap. The Ap cannot enforce QoS settings for upstream traffic.

Bandwidth control druing large file transfer

My user has an application that requires him to transfer hugh files from one location to another location.
our whole company is connected via ipvpn tunnel each office has a 20Mb ethernet WAN link.
when this user starts his file transfer, it will choke up the whole 20Mb in that particular office.
we have checked at the application layer, but there is no option to control the file transfer speed or bandwidth
is that any way, I can control the bandwidth usage of this user?

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Your options for bandwidth control depend much on your platforms. Some devices would allow you to police or shape your traffic, but at Vasilii describes, probably the best solution would be to deprioritize this bulk transfer traffic using QoS. (For 20 Mbps, you might need a hierarchal shaper. Also for this to work well with Internet VPN, you cannot have anything else sharing Internet ingress.)

Bandwidth controlling problem

i have a 3550 catalyst and i configured it for bandwidth controlling
i have used POLICE command
its work fine and i saw it limit the bandwidth
but there is a little problem
when i limit the bandwidth at 1024000 and i useing all the bandwidth and monitor the bandwidth i see it shows the network uses half bandwidth.

mls qos
access-list 150 permit ip any any
class-map bandwidth
match-all access-group 150
policy-map bandwidth
class bandwidth
police 1024000 128000 exceed-action drop
interface fa0/0
service-policy input bandwidth
thats all
when i monitor the bandwidth usage at input
i see its 512k
and if i configure it with the number 2048000 256000
then it uses 1024k
thanks.
Regards Mozaffari

CISCO ASA 5505 bandwidth Controll and split

Dear All,
Below am giving the infrastructure which i like to do please help me.
I Am Using Cisco ASA 5505 VPN Firewall and 6Mbps 1:1 dedicated internet connection.
in Lan Side we have 3 networks one for Internet Users one For VPN Users One for CCTV
i would like to split the 6Mbps bandwidth for these network 3 networks 3x2 each
each network use 2Mbps bandwidth. The VPN and CCTV Users use up to 6:00 pm after that the bandwidth will be free
after the 6:00 pm we need to use the the VPN and CCTV line bandwidth to the internet Users.
Cisco Adaptive Security Appliance Software Version 7.2(4)
Device Manager Version 5.2(4)
Compiled on Sun 06-Apr-08 13:39 by builders
System image file is "disk0:/asa724-k8.bin"
so please help me with suitable configuration for my purpose./please tell me which device will support for this/what is have to do for this.
Thanks
Lalu R.S

There's not much of that sort of functionality built into the ASA 5505 entry level firewall. To do that sort of thing in the firewall, you would have to move up to one of the newer 5500-X series with next generation firewall features and build a policy using Application Visibility and Control (AVC).
You can do some crude controls with QoS - the configuration guide chapter on doing that is here.

Access-Lists, Bandwidth Control

Hi,
I have a cisco 2811 router which is connected to 4 routed vlans. I would like to control the bandwidth for the users on these vlan because these vlans are public hotspots. Some users are choking the whole bandwidth due to which others are unable to get connected. I would like to block P2P applications and control the bandwidth there.
How do I go about doing this? I have attached the configuration of my cisco router.
Thanks and regards
Sarfaraz

Hi,
CHeck out this document for blocking P2P traffic:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00801e419a.shtml
The same ACL/ports you can use on t he edges on your network (so your edge-routers)
If you find this post usefull
please don't forget to rate this
#Iwan Hoogendoorn

Airport Extreme - Guest Network - Bandwidth Control

Hello Everyone,
I'm in need to deploy a solution to someone in a bar and I wanted to know if it's possible to do it with the Airport Extreme of Apple.
I already saw some study cases, and I not sure if it's possible to do what I pretend.
This is the cenario:
The user have in his office an ISP router with wireless that provides him with network connectivity for all his devices, in his office.
But where the clients are the signal doesn't get there, so we passed a cable to the bar, and we want to deploy there network guest access to the clients.
The thing is that we want to make the clients network to don't have access to the internal network devices, and then to controll at what velocity then can connect. Providing sometimes higher speeds, and other times lower speeds. (bandwidth management / limited).
Is it possible for me to use the Airport extreme for that? If not, do I have any other solution?
Thanks in advance.
Regards!

As stated this is not consumer level router functionality.
You either need a router that takes a third party firmware.. eg Gargoyle.. just google for it as I am not allowed to post details.
Or you need a pro wireless hotspot solution. These are expensive..$500-1000 but work without bothering the business owner.. you provide each person who buys a drink a printout ticket with username and password.. which allow both limited time and bandwidth. It is better than just making a free for all. There are also methods where people can login with credit card details.. but I think it is better to use the ticket type system.
For a cheap free for all.. as I said look at gargoyle.

WLC,I Need to ping from LWAPP while its controled via WLC

Hi Folks
in WLC Term, and LWAP, how can i telnet for LWAP,i need to ping from the AP itself?how is that happend?is it impossible via Telnet after i get its ip address when i issued the sh ip dhcp binding?
Rgds
Ibrahim

Q. Can I Telnet/SSH into an LWAPP based access point?
A. In Wireless LAN Controller release 5.0 and later, the controller supports the use of Telnet or Secure Shell (SSH) protocols to troubleshoot lightweight access points. You can use these protocols in order to make debugging easier, especially when the access point is unable to connect to the controller. You can configure Telnet and SSH support only through the controller CLI.
In order to enable Telnet or SSH connectivity on an access point, use the config ap {telnet | ssh} command. The Cisco lightweight access point associates with this Cisco Wireless LAN controller for all network operation and in the event of a hardware reset.
config ap {telnet | ssh} {enable | disable} Cisco_AP
Examples
> config ap telnet enable cisco_ap1
> config ap telnet disable cisco_ap1
> config ap ssh enable cisco_ap2
> config ap ssh disable cisco_ap2
Q. How to configure global credentials for access points. What are the default user name and password in release 5.0?
A. Cisco IOS access points are shipped from the factory with Cisco as the default enable password. This password allows users to log into the non-privileged mode and execute show and debug commands, which poses a security threat. The default enable password must be changed in order to prevent unauthorized access and to enable users to execute configuration commands from the access point's console port.
In the controller software prior to release 5.0, you can set the access point enable password only for access points that are currently connected to the controller. In controller software release 5.0, you can set a global use rname, password, and enable password that all access points inherit as they join the controller. This includes all access points that are currently joined to the controller and any that join in the future. If desired, you can override the global credentials and assign a unique username, password, and enable password for a specific access point.
For information on how to configure the global credentials of the AP, refer to Configuring Global Credentials for Access Points.

RV082 and RV016 bandwidth control of ipsec tunnels

I have a network setup with a hub & spoke configuration using the RV series routers. Due to the fact that bandwidth varies by site and is precious, is there any ports other than UDP 500 that need to be used for allocating the traffic levels?

Hi,
It is not very clear to me what exactly you are trying to configure, maybe you can share more details, but to answer directly to your question - port UDP 500 and UDP 4500 are used by IPSec only to establish the VPN tunnel and renegotiation when the SA lifetime expires. The traffic is transferred by ESP packets.
Regards,
Kremena

Guest Internet Access

Hi
Looking for input on Guest Vlan subject.
How can I avoid routing of Guess VLAN traffic to DATA VLAN, any traffic from Guest VLAN should be routed to Internet directly.
Looking for similar setup as in Hotels, Guest are provided with username/password with time duration to access internet and limit the download speed.
Do I need to create another SSID on the WLC and how the guest users will acquire ip, from WLC DHCP or Windows DHCP.
If its Windows DHCP then Guest traffic reaches my Data VLAN
Any Help

We got WLC 4420 ----- Do you mean a 4402-xx
AP 1200 series ( 5 in quantity )
I am new to WLC, can you help me to understand
How many SSID we can configure on WLC, does each ssid can have different config parameters.
The AP's and the Code you might have will only support 8-16. You don't want to configure too many (best practice is around 4) because of all the beacons that needs to be sent might cause issues with certain devices. You can configure eash ssid the same of different, it is up to you. Follow best practices on this.
can we broadcast specific SSID on AP configured with WLC ( AP#1 can be used for SSID DATA & SSID Guest ) ( AP#2 can be SSID Guest & SSID Partners )
You can create WLAN Override (depends on code - http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807669af.shtml) to specify what AP's will braodcast what SSID's. This can be messy if you have gaps for roaming, unless that is not an issues.
For Guest SSID is it recommended to connect to a seprate port on WLC
You have different options:
You can use a guest anchor controller in you DMZ
You can use one port on the WLC connected to your internal network and the other port to the DMZ
You can trunk vlans and use ACL's to block guest traffic from inside networks.
All this depends on you current infrastructure and if you plan on buying more equipment or use the existing.
Instead of creating Guest Users on WLC with time restriction, can this be done third party with ease of management. ( Office secretary can give access to internet to guest )
You can use a NAC Guest Server... if you want to spend a lot of money. You can configure a Lobby Admin account on the WLC so that the secretary has only read/write to add guest accounts. This would be the same if you have WCS with a lobby admin account.
http://www.cisco.com/en/US/docs/wireless/wcs/4.2/configuration/guide/wcsmanag.html#wp1078208
How to have bandwidth control on WLC, restrict users with bandwidth limit
You would need to use a 3rd party tool for this like ZoneCD or again you can use the NAC Guest Server.
http://www.cisco.com/en/US/solutions/collateral/ns340/ns394/ns348/ns787/data_sheet_c78-456124.html
http://www.google.com/url?q=http://cisco.com/application/pdf/paws/107630/WLC_NGS.pdf&ei=WtSTS9HpN43OM_WnkYoN&sa=X&oi=nshc&resnum=1&ct=result&cd=1&ved=0CAgQzgQoAA&usg=AFQjCNF0eA-Z8nss7WzgpPRnFjtSdZnvWQ
http://www.google.com/url?q=http://www.cisco.com/en/US/solutions/collateral/ns340/ns394/ns348/ns787/DeployingGuestAccess_051308.pdf&ei=WtSTS9HpN43OM_WnkYoN&sa=X&oi=nshc&resnum=1&ct=result&cd=2&ved=0CAkQzgQoAQ&usg=AFQjCNGKgF_wWKQaI8lqHoFfwbg0iztVFg
Any configuration sample link with one Internet connection having DATA and Guest VLAN using ACL to restrict the traffic.
I put some links above... hope this helps. Again, it will come down to your existing environment and how much more you want to spend. You also have to look at the time it might take to setup, will the secertary want to do this, etc? How I see guest access..... well.... they go out a seperate internet pipe, so I don't really care about bandwidth. Its guests so they would have to deal with that anywhere the go, even hotspost or even worse hotels:) Make it simple and make it work... then you can add to that later when you get more familiar to configuration and troubleshooting.

BILLING SETUP WITH NOMADIX AND CISCO WLC

Hai I need to implement cisco wireless controller along with nomadix box for bandwidth control and billing in a hotel . anybody implemented same ?.
how the topology in this case ?.nessary config on wlc

Refer the post: https://supportforums.cisco.com/discussion/11431756/wlc-and-nomadix
https://supportforums.cisco.com/discussion/11601111/guest-ssid-redirect-nomadix-box

Attach WAP4410N as WGB to Cisco 5760 WLC with LWAP 3702

I have 5760 WLC with 3702 wireless infrastructure. Can i connect a WAP4410N AP as WGB to be attached to my current wifi network so i can provide connectivity to some wired devices? Any tips on doing so? And any limitation can be imposed for using this WAP instead of any other AP that are supported by WLC5760? If the wired clients are passive, configuring passive-client on WLC will work normally?

Thanks Eric for the reply, however, this AP is not expected to be controlled by WLC as you mentioned since it is not lightweight and not supported by this WLC for compatibility. But in this scenario, i'm talking about operating it in WGB mode to be attached to the unified wireless infrastructure. In this scenario, it is just attached as a client that pass the traffic of its clients to the other side.
I have noticed the below statement in this guide page (539)
http://hcsdemo.com/c/en/us/td/docs/switches/lan/catalyst3650/software/release/37e/consolidated_guide/b_37e_consolidated_3650_cg.pdf
When non-Cisco WGBs are used, the switch has no information about the IP address of the clients on the wired segment behind the WGB. Without this information, the switch drops the following types of messages:
• ARP REQ from the distribution system for the WGB client.
• ARP RPLY from the WGB client.
• DHCP REQ from the WGB client.
• DHCP RPLY for the WGB client.
Accordingly, if the switch will drop all this traffic, then no traffic will be passed from the WGB clients to the network ! what I’m missing here?!!!

Adding 2nd WLC

I have added a second wlc to my wcs. From the wcs everything looks fine, I can controll the wlc and all wlan are there. When I go into a AP that is registered with my primary wlc, and change the settings to register with my second wlc, the ap never registers with the second wlc, it will always go back to the primary. I have run debugs on the secondary wlc and I never see any lwapp packets. The configs are the same on both wlc except for the ip addressing. What do I need to look for to try and troubleshoot and resolve this issue.
The WCS is running version 4.2.62.11
WLC-1 is running version 4.2.61.0
WLC-2 is running version 4.2.205.0
I have read that the WLC need to be at the same or lower version than the wcs, but I have also seen posts that this is for the major release, so I should be fine with them all being on 4.2 release, is this correct?

Hi,
In order fo AP fallback from one controller to another, we should comply with the following rules:
1. All controllers must be in the same mobility group.
2. Primary, secondary and tertiary controller's name on the AP should match the system name of the WLC (this can be verified under "show sysinfo").
3. All controllers in the same mobility group should be running the same version:
http://www.cisco.com/en/US/docs/wireless/controller/4.2/configuration/guide/c42mobil.html#wp1093659
I'd recommend to first make sure that all controllers are on the same release before continuing with these tests.
Regards,
Fede
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

WLC, WCS

Sorry I am new with WLC. Can we access WLC from WCS? Are they the same functions? how is the differents WCS vs WLC?
Thanks

WLC controls LWAP-imaged WAP.
WCS "controls" the WLC.
WCS can do more than just controlling WLC. They can do this fancy "reporting".
If you are new to WLC/WCS then I'd recommend you look at Cisco Prime Network Control System. It comes in two "flavours": appliance or VMware.

Bandwidth management attributes

please i know which attributes that support it by Cisco,i can use it to limit the bandwidth [bandwidth control or management ] for the users !!

Sounds like you need QoS. AFAIK you have to define the QoS policy on the device and then the AAA server can (per user) assign the desired policy
There's a how to doc here:
http://www.cisco.com/en/US/products/sw/iosswrel/ps1839/products_feature_guide09186a00801541cb.html#wp1027129
In ACS you'd add a Cisco-Av-Pair with the following content
"ip:sub-policy-In="
"ip:sub-policy-Out="

Bandwidth control on WLC

Similar Messages

Maybe you are looking for