Looking for way to use certificate attributes in Authorization policy

does any one know how to use certificate attributes in authorization policy when I authenticate with PEAP ??
is it only working when I authenticate with EAP-TLS ??
is there any way to use these attributes with peap ??
Also, what are ways to distinguish corp asset as priavate asset without using certificate ??
Thank you.
P/S I'm using wired network !

Hi,
Peap authentication is a password based authentication protocol, eap-tls is when a client uses a certificate for authentication. So there is not a way to validate cert attributes since the client doesnt send one for PEAP.
You can use machine authentication to validate the corporate asset and rely on the microsoft login process to validate the user account. You can also consider NAM supplicant to perform eap chaining (sends both machine and user authentication and is only supported by ISE as your radius server at this point).
Thanks,
Tarik Admani
*Please rate helpful posts*

Similar Messages

Looking for sample code using "first_tab" and "next_tab"

Looking for sample code using "first_tab" and "next_tab". How is it used with ItemID within a dialog box? I've read the reference books - don't understand it.

Hi Ray,
There are several ways to do this, and in the example I created, I actually did not end up using shift registers. I've attached some example code that basically multiplies the period by the duty cycle percentage to achieve the number of milliseconds to be high and low.
You would just need to insert your DIO code in each frame of the sequence structure.
Hope that helps. Kind regards,
-Sam F, DAQ Marketing Manager
Learn about measuring temperature
Learn how to take voltage measurements
Learn how to measure current
Attachments:
70_PWM_Example.vi ‏23 KB

Looking for a cheap used Mac

Greetings,
I'm looking for a cheap, used Mac to play around with iPhone app developement. How far back can I go hardware wise and still be able to install
Snow Leopard?
Thanks,
Patrick

You can install Snow Leopard on any Intel model as long as it has at least 1 GB of installed RAM.
Snow Leopard General requirements
Mac computer with an Intel processor
1GB of memory
5GB of available disk space
DVD drive for installation
Some features require a compatible Internet service provider; fees may apply.
Some features require Apple’s MobileMe service; fees and terms apply.

Looking for pages designd using iWeb

hi and greetings from germany,
i'm looking for pages designd using iWeb to get an impression how it is working. I would like to build pages with text and i would like to know if it is possible to change or delete the placeholders for photos in the templates.
sorry - i can only use that english i learnd at school long ago ... ;-))

http://www.happyadam.com
The URL above points to my iWeb - spent a couple of hours with this over the weekend. It's quite flexible - takes a little getting used to (if you've used Pages then it's similar). There's not many templates but it's a good starting point.
The worst thing is the .Mac servers - they're very slow for hosting these iWebs as many others have found.
12 Powerbook G4 1.33GHz Mac OS X (10.4.4)

I am looking for somebody whoo uses the deploytool of Sun.

Hello my name is Jurgen,
I am looking for somebody who uses the deploytool of the J2EE SDK 1.4 full installation. I am having some trouble with the deploytool.
Does somebody know an alternative for the deploytool of Sun ?
Thanks a lot !
Jurgen

Correction:
In the current version of the tutorial we use deploy.
However, we will be updating the tutorial next week
with instructions for using asant to package and
deploy.We use deploytool to package and deploy in the current version.
We will add instructions to package and deploy using asant in a version scheduled for release on June 15.

How to look for my ipod using the serial number

Looking for my stolen ipod using my serial number. Where do I go to do this?

You do not. The SN will only help identify the iPod as yours if it is recovered.
- If you previously turned on FIndMyiPod on the iPod in Settings>iCloud and wifi is on and connected go to iCloud: Find My iPhone, sign in and go to FIndMyiPhone. If the iPod has been restored it will never show up.
- You can also wipe/erase the iPod and have to iPod play a sound via iCloud.
- Change the passwords for all accounts used on the iPod and report to police
- There is no way to prevent someone from restoring the iPod (it erases it) using it.
- Apple will do nothing
Reporting a lost or stolen Apple product

Looking for books published using iBooks Author

I'm looking for books published with iBooks Author and there's no way to search for this in the store as far as I know. If you've published a book using IBA, please post the link in the comments. Thank you

I´m thinking about what size of the text I should use.
Right now I have size 16 Palatino and small blocks of text so it should be easy to read
My experience is this: 16 point text looks (and is experienced as) standard print text in books.
Here's a trick for iPad vermisilitude I use on my iMac with 1920 x1080 resolution: In iBooks Author I set the screen to "Fit Page" and then resize the screen manually to 92%. This very closely matches an iPad screen. In my case, it helps with selecting fonts.
All the best.
- Fabe
P.S. This would be better in a new forum.
edited: P.S. added.

Looking for app to use for reminder of customers service days

I am a Chimney Sweep and I'm looking for an app i can have on my iPad & iMac that i can set reminders for customers service days, they could be a year ahead but its reminder for me to then tell the customer its time to have your chimney cleaned.
Thanks for any help.
Lee

Lee,
Have you looked through the Mac App store yet? If you have and haven't found anything then I'd suggest using a database such as FileMaker Pro to manage that. You may even find a template where someone has created a FileMaker Pro program that you can download and/or buy that does what you want.

Looking for an App, use like a library record

I am looking for an app, that the users that can check-in and out of the inventory.
meanwhile, it can generate a record of the trasactions.
thanks a lot for your help!!

Try the App store:
1. In search type R followed by E followed by S followed by T followed by A followed by U followed by R followed by A followed by N followed by T.
2. Click SEARCH.
3. Browse through results.
4. Select the app that you want.
5.Click download on the app you want.
6.After that App is downloaded use the app.

What to look for in a used iBook G3?

Hi, I'm in the process of looking at a used iBook G3 with 640 MB SDRAM and 40 GB HD. Anything I should look for that could make or break a deal?
(I'm new to Apple and have never owned or used one)!
thanks in advance

I believe that only the 900 MHz G3 iBook came with a 40 GB hard drive standard.
http://everymac.com/systems/apple/ibook/stats/ibook_900.html
Don't pay much attention to the price listed there. It's usually too high. A better check on price is eBay's list of Completed listings. (You will have to sign in to eBay to see the search results.)
If you are looking at that model, a Combo drive (so you can burn CD's) will be standard. It's a nice feature.
If you want to have wireless internet access, make sure that it already has the AirPort card installed because the original AirPort card that any G3 iBook requires is becoming scarce and expensive since Apple stopped selling them a couple of years ago. Plan on spending $130 (or more) for a used AirPort card if it doesn't have one.
Good luck. If you get one, you're gonna love it.

WebLogic looking for class file using the wrong case

During my ant build, I precompile my JSPs using weblogic.jspc. All of the jars and wars are packaged into an ear and deployed to WebLogic 8.1 on Linux. When I access one of our normal screens, everything is good. Things go wrong when I try to access one of our help screens. We have a base help file that includes another file based on the screen code passed to it. The screen code is used in combination with a HashMap to look up the correct JSP to include. This part goes fine. But when the JSP is included, I get the following error. The best I can figure is that the class file is in mixed case (i.e., SampleHelp00.jsp and SampleHelp00.class), but Weblogic is looking for samplehelp00.class.
I'm not even where I should begin looking to solve this. Anyone have any ideas?
----- BEGIN STACKTRACE -----
javax.servlet.jsp.JspException:
[HTTP:101249][ServletContext(id=70634941,name=grp,context-path=/grp)]:
Servlet class jsp_servlet._help.__samplehelp00 for servlet
/help/SampleHelp00.jsp could not be loaded because the requested class was not found in the classpath
/usr/share/weblogic/weblogic81/config/wftesttest/webSysServer02/.wlnotdelete/extract/webSysServer02_wf-web-sys.wftesttest_grp/wf-web-sys.wftesttest.war:
/weblogic81sp5/weblogic81sp5/config/wftesttest/webSysServer02/.wlnotdelete/extract/webSysServer02_wf-web-sys.wftesttest_grp/jarfiles/WEB-INF/lib/Struts_Validator-20010702.jar:
/weblogic81sp5/weblogic81sp5/config/wftesttest/webSysServer02/.wlnotdelete/extract/webSysServer02_wf-web-sys.wftesttest_grp/jarfiles/WEB-INF/lib/struts.jar:
/weblogic81sp5/weblogic81sp5/config/wftesttest/webSysServer02/.wlnotdelete/extract/webSysServer02_wf-web-sys.wftesttest_grp/jarfiles/WEB-INF/lib/taglibs-session.jar:
/weblogic81sp5/weblogic81sp5/config/wftesttest/webSysServer02/.wlnotdelete/extract/webSysServer02_wf-web-sys.wftesttest_grp/jarfiles/WEB-INF/lib/wf.wftesttest.jar:
/weblogic81sp5/weblogic81sp5/config/wftesttest/webSysServer02/.wlnotdelete/extract/webSysServer02_wf-web-sys.wftesttest_grp/jarfiles/_wl_cls_gen.jar:
/weblogic81sp5/weblogic81sp5/config/wftesttest/webSysServer02/.wlnotdelete/extract/webSysServer02_wf-web-sys.wftesttest_grp.
java.lang.ClassNotFoundException:
jsp_servlet._help.__samplehelp00.
at org.apache.struts.taglib.template.InsertTag.doEndTag()I(InsertTag.java:149)
at jsp_servlet.__su_hl0._jspService(Ljavax/servlet/http/HttpServletRequest;Ljavax/servlet/http/HttpServletResponse; )V(__su_hl0.java:289)
at weblogic.servlet.jsp.JspBase.service(Ljavax/servlet/ServletRequest;Ljavax/servlet/ServletResponse; )V(JspBase.java:33)
at weblogic.servlet.internal.ServletStubImpl$ServletInvocationAction.run()Ljava/lang/Object;(ServletStubImpl.java:1072)
at weblogic.servlet.internal.ServletStubImpl.invokeServlet(Ljavax/servlet/ServletRequest;Ljavax/servlet/ServletResponse;Lweblogic/servlet/internal/FilterChainImpl; )V(ServletStubImpl.java:465)
at weblogic.servlet.internal.ServletStubImpl.invokeServlet(Ljavax/servlet/ServletRequest;Ljavax/servlet/ServletResponse; )V(ServletStubImpl.java:348)
at weblogic.servlet.internal.RequestDispatcherImpl.forward(Ljavax/servlet/ServletRequest;Ljavax/servlet/ServletResponse; )V(RequestDispatcherImpl.java:328)
at org.apache.struts.action.ActionServlet.processForward(Lorg/apache/struts/action/ActionMapping;Ljavax/servlet/http/HttpServletRequest;Ljavax/servlet/http/HttpServletResponse; )Z(ActionServlet.java:1847)
at org.apache.struts.action.ActionServlet.process(Ljavax/servlet/http/HttpServletRequest;Ljavax/servlet/http/HttpServletResponse; )V(ActionServlet.java:1568)
at org.apache.struts.action.ActionServlet.doGet(Ljavax/servlet/http/HttpServletRequest;Ljavax/servlet/http/HttpServletResponse; )V(ActionServlet.java:491)
at javax.servlet.http.HttpServlet.service(Ljavax/servlet/http/HttpServletRequest;Ljavax/servlet/http/HttpServletResponse; )V(HttpServlet.java:740)
at com.clear2pay.ppp.util.ui.struts.ActionServlet.service(Ljavax/servlet/http/HttpServletRequest;Ljavax/servlet/http/HttpServletResponse; )V(ActionServlet.java:138)
at javax.servlet.http.HttpServlet.service(Ljavax/servlet/ServletRequest;Ljavax/servlet/ServletResponse; )V(HttpServlet.java:853)
at weblogic.servlet.internal.ServletStubImpl$ServletInvocationAction.run()Ljava/lang/Object;(ServletStubImpl.java:1072)
at weblogic.servlet.internal.ServletStubImpl.invokeServlet(Ljavax/servlet/ServletRequest;Ljavax/servlet/ServletResponse;Lweblogic/servlet/internal/FilterChainImpl; )V(ServletStubImpl.java:465)
at weblogic.servlet.internal.TailFilter.doFilter(Ljavax/servlet/ServletRequest;Ljavax/servlet/ServletResponse;Ljavax/servlet/FilterChain; )V(TailFilter.java:28)
at weblogic.servlet.internal.FilterChainImpl.doFilter(Ljavax/servlet/ServletRequest;Ljavax/servlet/ServletResponse; )V(FilterChainImpl.java:27)
at com.clear2pay.ppp.util.ui.SetCharacterEncodingFilter.doFilter(Ljavax/servlet/ServletRequest;Ljavax/servlet/ServletResponse;Ljavax/servlet/FilterChain; )V(SetCharacterEncodingFilter.java:150)
at weblogic.servlet.internal.FilterChainImpl.doFilter(Ljavax/servlet/ServletRequest;Ljavax/servlet/ServletResponse; )V(FilterChainImpl.java:27)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run()Ljava/lang/Object;(WebAppServletContext.java:6987)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(Lweblogic/security/subject/AbstractSubject;Ljava/security/PrivilegedAction; )Ljava/lang/Object;(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(Lweblogic/security/acl/internal/AuthenticatedSubject;Lweblogic/security/acl/internal/AuthenticatedSubject;Ljava/security/PrivilegedAction; )Ljava/lang/Object;(SecurityManager.java:121)
at weblogic.servlet.internal.WebAppServletContext.invokeServlet(Lweblogic/servlet/internal/ServletRequestImpl;Lweblogic/servlet/internal/ServletResponseImpl; )V(WebAppServletContext.java:3892)
at weblogic.servlet.internal.ServletRequestImpl.execute(Lweblogic/kernel/ExecuteThread; )V(ServletRequestImpl.java:2766)
at weblogic.kernel.ExecuteThread.execute(Lweblogic/kernel/ExecuteRequest; )V(ExecuteThread.java:224)
at weblogic.kernel.ExecuteThread.run()V(ExecuteThread.java:183)
at java.lang.Thread.startThreadFromVM(Ljava/lang/Thread; )V(Unknown Source)
----- END STACKTRACE -----
Message was edited by:
cabuki

Ignore the part about precompiled JSPs being ignored on my development server. Turns out I had a stale cache. I cleared that out and now it recognizes the files.
The problem with that, is now I'm getting an Error 500 when I try to access the page.
----- BEGIN STACKTRACE -----
javax.servlet.jsp.JspException
     at org.apache.struts.taglib.template.InsertTag.doEndTag()I(InsertTag.java:149)
     at jsp_servlet.__su_h0._jspService(Ljavax.servlet.http.HttpServletRequest;Ljavax.servlet.http.HttpServletResponse; )V(__su_h0.java:316)
     at weblogic.servlet.jsp.JspBase.service(Ljavax.servlet.ServletRequest;Ljavax.servlet.ServletResponse; )V(JspBase.java:33)
     at weblogic.servlet.internal.ServletStubImpl$ServletInvocationAction.run()Ljava.lang.Object; (ServletStubImpl.java:996)
     at weblogic.servlet.internal.ServletStubImpl.invokeServlet(Ljavax.servlet.ServletRequest;Ljavax.servlet.ServletResponse;Lweblogic.servlet.internal.FilterChainImpl; )V(ServletStubImpl.java:419)
     at weblogic.servlet.internal.ServletStubImpl.invokeServlet(Ljavax.servlet.ServletRequest;Ljavax.servlet.ServletResponse; )V(ServletStubImpl.java:315)
     at weblogic.servlet.internal.RequestDispatcherImpl.forward(Ljavax.servlet.ServletRequest;Ljavax.servlet.ServletResponse; )V(RequestDispatcherImpl.java:318 )
     at org.apache.struts.action.ActionServlet.processForward(Lorg.apache.struts.action.ActionMapping;Ljavax.servlet.http.HttpServletRequest;Ljavax.servlet.http.HttpServletResponse; )Z(ActionServlet.java:1847)
     at org.apache.struts.action.ActionServlet.process(Ljavax.servlet.http.HttpServletRequest;Ljavax.servlet.http.HttpServletResponse; )V(ActionServlet.java:1568 )
     at org.apache.struts.action.ActionServlet.doGet(Ljavax.servlet.http.HttpServletRequest;Ljavax.servlet.http.HttpServletResponse; )V(ActionServlet.java:491)
     at javax.servlet.http.HttpServlet.service(Ljavax.servlet.http.HttpServletRequest;Ljavax.servlet.http.HttpServletResponse; )V(HttpServlet.java:740)
     at com.clear2pay.ppp.util.ui.struts.ActionServlet.service(Ljavax.servlet.http.HttpServletRequest;Ljavax.servlet.http.HttpServletResponse; )V(ActionServlet.java:138 )
     at javax.servlet.http.HttpServlet.service(Ljavax.servlet.ServletRequest;Ljavax.servlet.ServletResponse; )V(HttpServlet.java:853)
     at weblogic.servlet.internal.ServletStubImpl$ServletInvocationAction.run()Ljava.lang.Object;(ServletStubImpl.java:996)
     at weblogic.servlet.internal.ServletStubImpl.invokeServlet(Ljavax.servlet.ServletRequest;Ljavax.servlet.ServletResponse;Lweblogic.servlet.internal.FilterChainImpl; )V(ServletStubImpl.java:419)
     at weblogic.servlet.internal.TailFilter.doFilter(Ljavax.servlet.ServletRequest;Ljavax.servlet.ServletResponse;Ljavax.servlet.FilterChain; )V(TailFilter.java:28 )
     at weblogic.servlet.internal.FilterChainImpl.doFilter(Ljavax.servlet.ServletRequest;Ljavax.servlet.ServletResponse; )V(FilterChainImpl.java:27)
     at com.clear2pay.ppp.util.ui.SetCharacterEncodingFilter.doFilter(Ljavax.servlet.ServletRequest;Ljavax.servlet.ServletResponse;Ljavax.servlet.FilterChain; )V(SetCharacterEncodingFilter.java:150)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(Ljavax.servlet.ServletRequest;Ljavax.servlet.ServletResponse; )V(FilterChainImpl.java:27)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run()Ljava.lang.Object;(WebAppServletContext.java:6458 )
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(Lweblogic.security.subject.AbstractSubject;Ljava.security.PrivilegedAction; )Ljava.lang.Object;(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(Lweblogic.security.acl.internal.AuthenticatedSubject;Lweblogic.security.acl.internal.AuthenticatedSubject;Ljava.security.PrivilegedAction; )Ljava.lang.Object;(SecurityManager.java:118 )
     at weblogic.servlet.internal.WebAppServletContext.invokeServlet(Lweblogic.servlet.internal.ServletRequestImpl;Lweblogic.servlet.internal.ServletResponseImpl; )V(WebAppServletContext.java:3661)
     at weblogic.servlet.internal.ServletRequestImpl.execute(Lweblogic.kernel.ExecuteThread; )V(ServletRequestImpl.java:2630)
     at weblogic.kernel.ExecuteThread.execute(Lweblogic.kernel.ExecuteRequest; )V(ExecuteThread.java:219)
     at weblogic.kernel.ExecuteThread.run()V(ExecuteThread.java:178 )
     at java.lang.Thread.startThreadFromVM(Ljava.lang.Thread; )V(Unknown Source)
----- END STACKTRACE -----
The page in question is just a simple JSP using Struts (v 1.0.2) to call in a template.
----- BEGIN JSP -----
<%@ page language="java" contentType="text/html; charset=UTF-8" %>
<%@ taglib uri="/WEB-INF/lib/struts.tld" prefix="struts" %>
<%@ taglib uri="/WEB-INF/lib/struts-bean.tld" prefix="bean" %>
<%@ taglib uri='/WEB-INF/lib/struts-template.tld' prefix='template' %>
<template:insert template='/t/system.jsp'>
<template:put name='title'><bean:message key="tit_su_h0"/></template:put>
<template:put name='sidenav' content='/t/su_snv.jsp'/>
<template:put name='content' content='/c/su_h0_c.jsp'/>
<template:put name='footer' content='/t/su_ftr.jsp' />
</template:insert>
----- END JSP -----
I passed the -keepGenerated flag to the precompile task in my Ant build so I could look at the line it's choking on, but it's not very helpful. I'm stuck. I can set up the build so it doesn't precompile the JSPs, but then the QA team wouldn't like me very much.

Acrobat 6.0 - encrypting for certain identities using certificates

Hello:
Can someone help me.
I am attempting to restrict opening and editing to certain identites a document using certificates.
1st I created a digital ID for myself with a password to be able to get at the document. This works well as I can open the document with the password and others I send this to cannot open the document.
Next I requested a certificate from the other user so that I could set them as a trusted identity. This worked OK as I was able to send the request per the adobe help. They were able to respond and sent me a certificate that apparently they created from a Reader (I do not think they have acrobat).
I was then able to import the requested certificate from email; however, I am not able to add the certificate to my list of trusted identities for encryption. Is there something I am doing wrong? Can someone please advise? This person did have outlook on their computer, so the process was pretty simple. Another test with AOL was not so simple and I am not able to load the certificate at all.
Any input/direction would be appreciated.

Did you check for updates from http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh? You can download updates to Acrobat there. You should generally install the updates in order unless indicated otherwise.
However, it may be that what is being sent to Distiller is the problem, not Distiller itself. What is the error message? How are you creating the input for Distiller? I am not quite sure about the steps on a MAC since I use a PC, but at least these questions should help track down the problem. If you can post the full text of the error (or a screen shot), it would help.

Looking for best practices using Linux

I use Linux plataform to all the Hyperion tools, we has been problems with Analyzer V7.0.1, the server hangs up ramdomly.<BR>I'm looking for a Linux best practices using Analyzer, Essbsae, EAS, etc.<BR>I'll appreciate any good or bad comments related Hyperion on Linux OS.<BR><BR>Thanks in advance.<BR><BR>Mario Guerrero<BR>Mexico

Hi,<BR><BR>did you search for patches? It can be known problem. I use all Hyperion tools on Windows without any big problem.<BR><BR>Hope this helps,<BR>Grofaty

Looking for applications written using CLDC.

Dear all,
I want to find some opensource Java application*s* written using CLDC. It is because I want to test the optimization of Squawk. Squawk only compiles Java files (not class files) written using CLDC.
Can you please give me some links pointing to CLDC based applications with Java source files.
Looking for your reply,

Dear all,
I want to find some opensource Java application*s* written using CLDC. It is because I want to test the optimization of Squawk. Squawk only compiles Java files (not class files) written using CLDC.
Can you please give me some links pointing to CLDC based applications with Java source files.
Looking for your reply,

I have 300 stores and I'm looking for a global QOS config that would shape/policy the bandwith based on a % of the detected ISP link speed

Hi,
We have 300 stores with mostly the same router config.
The router in each store is a cisco 891 router capable of doing QOS.
Each of our store is connected to internet through a local Internet Service Provider (ISP). They all have different ISP.
Each store has different Internet plan with different speed, some are DSL, other are using cable modem.
The connection between the router and the modem is 100Mbps. But the real speed after the modem will be different depending of the Internet plan the store is using. Exemple : 20Mbps download / 2Mbps upload.
I'm looking for a standard QOS config that would be put in each routeur and that would shape/policy the bandwith based on a % of the detected ISP link speed. The goal here is to prevent a single desktop computer of the store to take all available bandwith of the ISP link because of youtube , cloud photo upload, etc.
Because the wan of the router is in the modem at 100Mbps, I cannot use this bandwith indication for the % calculation. The ISP link speed (after the modem) is much lower than that.
In other words, I dont want to set specific qos value or bandwith manual value in each of my 300 router. Especially because the ISP speed is not the same in each site, it's a big job and it's changing all the time. Stores owner boost their link, etc.
So, Is there a way within the router to detect the Wan real max speed and to assign dynamically % of the deduced value and assign it to different policy-map rules, etc.
regards
Jonathan D

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
I'm unaware of any (one) "built-in" feature that will do what you're desire. (BTW, I don't believe PfR, as mentioned by Matt, will do what you desire either, but I've haven't used it in several years.)
I was looking to address a somewhat similar problem several months ago, and believe I could construct dynamic QoS shaping using an embedded device script working with IP SLA monitoring. However, the "problem" site (using a cable modem) closed, so I didn't pursue it further.
An alternative approach would be to use as few policy models as possible. For example if there are sites with 2, 3 or even 5 Mbps uploads, you might use a 2 Mbps shaper for each. Of course, sites with more available bandwidth won't obtain the full advantage of it, but your maintenance support will be easier. Conversely, especially for cable modems, running under their nominal speed might provide much more predictable performance, as HFCs are generally much more variable in their actual available bandwidth, moment to moment.

Looking for way to use certificate attributes in Authorization policy

Similar Messages

Maybe you are looking for