NAC in-band vs out-of-band bandwidth management

Hi,
I am new to NAC. Would you please give me hints about bandwidth/traffic policy/QoS management when using out-of-band deployment of NAC? Is it possible NAC to configure the switch port with the appropriate bandwidth limiting template when it recognizes a certain user identity?
Regards,
Mladen

Refer to NAC appliance configuration guide for more information
http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/413/cam/m_intro.html

Similar Messages

Cisco 7606 and out of band remote management

Hi
I have been trying to look for a document to confirm that Cisco 7606 support out of band remote management via Aux port. Can anyone please confirm whether 7606 support out of band remote management.
Regards

The 7606 with a sup will only have a console port and no aux port.
Yes the console port supports OOB management using an external modem.
Thanks, Mak

Bandwidth Management for Software

Is there a utility out there that would allow you to allocate specific amounts of bandwidth any software could use? In many download managers (such as Speed Download, Limewire, Azul, etc.) you can easily set the total amount of bandwidth and even per file download parameters. I have always been surprised that browsers such as Safari and even iTunes does not allow you to control the amount of bandwidth it is to use when downloading.
I often find myself in situations where I need to download a large file, and yet be able to continue to surf for example, or else I would like to keep the setting in my iTunes to download podcasts automatically when I launch it. Both Safari and iTunes, will take as much bandwidth as you can throw at them which means that it can grind every other on line activity to a halt (specially when you do not have a blazing fat connection).
Anyone know of any such software?
Thanks.

Shahin wrote:
Thanks, but I don't understand what this has to do with bandwidth management? Perhaps I do not understand the capabilities of nice, but isn't nice just a way to prioritize applications and services? How would you use it to allocate bandwidth?
By giving various jobs different priorities, the effective bandwidth is limited. If you use 100% of the bandwidth for 1% of the time and 0% of the bandwidth for 99% of the time, you are effectively giving the "niced" app only 1% of your bandwidth. And since a computer is digital, there is really no such thing as "instantaneous" bandwidth, as there is in other areas of communication.
If you have 10 processes running and each consumes 10% of your total bandwidth, it does not matter whether the processes are time-shared or bandwidth-limited, when considered over any reasonable period of time.

Bandwidth management on 3650 configuration example

in the 3650 datasheet, he says
The 3650 switch has advanced wired plus wireless QoS capabilities. It uses the Cisco modular QoS command line interface (MQC). Theswitch manages wireless bandwidth using unprecedented hierarchical bandwidth management starting at the per-access-point level and drilling further down to per-radio, per-service set identification (SSID), and per-user levels. This helps manage and prioritize available bandwidth between various radios and various SSIDs (enterprise, guest, and so on) within each radio on a percentage basis. The switch is also capable of automatically allocating equal bandwidth among the connected users within a given SSID. This makes sure that all users within a given SSID get a fair share of the available bandwidth while being connected to the network. The UADP ASIC enables the hierarchical bandwidth management and fair sharing of bandwidth, thereby providing hardware-based QoS for optimized performance at line-rate traffic.
In addition to these capabilities, the switch is able to do class of service (CoS) or differentiated services code point (DSCP) based queuing, policing, shaping, and marking of wired plus wireless traffic. This enables users to create common policies that can be used across wired plus wireless traffic. The 3650 also supports downloadable policy names from the Cisco Identity Services Engine (ISE) when a user successfully authenticates to the network using the ISE.
We are having repeated issue of a single user taking up all the WAN bandwidth. We are trying to figure out a way to limit the user from taking up all the bandwidth My leadership see the datasheet and attended the webinar and they mention bandwidth management and think that the 3650 is the solution. From wireless, maybe, but from wired, ???
How could accomplish this goal from a wired side? or should I take a different approach?
I can discuss further if needed.

Hello,
That's a question that you as the network admin of that organization could answer.
How much traffic for business purposes must travel via HTTP/HTTPS?
How much bandwith are you willing to provide to this 2 protocols?
Those are the kind of answers you need to answer before setting the number
Regards
Remember to rate all of the helpful posts, Just click the 5 stars at the left of each post
Julio

ME3400E egress bandwidth management

With help from this site, I was able to figure out ingress bandwidth management on a per port basis, but now I need to be able to configure egress bandwidth management. I think I need to do traffic shaping but am not sure. I was told that if you configure the bandwidth management using a percentage, that it doesnt' use the actual negotiated (or configured) port speed, but looks at the bandwidth interface command - is this true? If a port is set to autonegotiate, and comes up as a GigE port, but the bandwidth command is set to 100Mbps, if you configured the egress shaping to 10% would that set it to 100Mbps or 10Mbps? We are using the ME3400E to provide internet access to our customers - egress bandwidth management is very important !

We had the same problem. Rate Control didn't seem to work.
I discovered that after changing the rate control settings and saving these settings the router needs a reboot.
Otherwise the rate control does not work anymore and the bandwidth is not managed.
Whenever something is modified in the rate control settings you have to reboot the router.

ISA 550 Bandwidth Management.

I wanted to know an automated or manual method of bandwidth management for ISA 550 with 1.2.x.x firmware. I currently have 30 nodes on a 2mbps link and if one host starts downloading others are left with very little or no bandwidth at all. Is there a way I can regulate this automatically or manually?

Sounds like Ciscomax got you fixed up. Also wanted to mention, should the need arise, you can do bandwidth throttling. We do this in some circumstances on Guest Wireless networks to prevent guests from hogging to much bandwidth. So, for example, if you wanted to limit bandwidth on a GuestWiFi to 512K/128K, you would do the following.
From within the ISA500 Config Utility, select Networking on the left
Expand QoS and select General Settings
Select to Enable WAN QoS and select Save
Expand WAN QoS and select Traffic Selector (Classification)
Select Add
Class Name:                   G-WiFi (In)
Source Address:                        Any
Destination Address:      Guest_Network
Select OK
Select Add (again)
Class Name:                   G-WiFi (Out)
Source Address:                        Guest_Network
Destination Address:      Any
Select OK
Select Save
Select QoS Policy Profile under QoS, WAN QoS in the Networking section on the left
Select Add
Policy Name: G-WiFi (In)
Select the Inbound Traffic radio button
Select Add
Select G-WiFi (In) from the Class drop down menu
DSCP Marking: None
CoS Marking:     7
Rate-limiting:      512
Select OK
Select OK
Select Add (again)
Policy Name: G-WiFi (Out)
Select the Outbound Traffic radio button
Select Add
Select G-WiFi (Out) from the Class drop down menu
Queue:               Q1
DSCP Marking: None
Rate-limiting:      128
Select OK
Select OK
Select Save

Operation timed out (FSP network services manager)

Received this error from five different RMAN jobs, all submitted at approx 6am, all failing within a couple of minutes. Resubmit of all five jobs worked fine. Many other jobs submitted at approx the same time worked fine. Time out does not appear to be related to waiting on tape drive resources.
Any ideas as to cause? If this is a network thing, any way to extend the timeout or cause it to retry?
Regards,
Rich McClain
ORA-19506: failed to create sequential file, name="SBT_TAPE/RMAN_SCMP.707724115.arch.1.7372.1", parms=""
ORA-27028: skgfqcre: sbtbackup returned error
ORA-19511: Error received from media manager layer, error text:
sbt__rpc_cat_query: Query for piece SBT_TAPE/RMAN_SCMP.707724115.arch.1.7372.1 failed.
(Oracle Secure Backup error: 'operation timed out (FSP network services manager)').
Snippet from obroxyd.log
2010/01/08.06:02:57 [2543] failed to connect to admin scheduler - operation timed out (FSP network services manager)
2010/01/08.06:03:02 [2543] client disconnect from IPC connection 4 (closing)
2010/01/08.06:03:03 [2543] obproxyd is terminating now
2010/01/08.06:03:11 [9770] failed to connect to admin scheduler - operation timed out (FSP network services manager)
2010/01/08.06:03:16 [9770] client disconnect from IPC connection 4 (closing)
2010/01/08.06:03:16 [9770] obproxyd is terminating now

Either reconfigure CONNECT_TIMEOUT to be 0, which means wait indefinitely, or reconfigure CONNECT_TIMEOUT to be some higher value. Or, if the timeout is unacceptably long, turn on tracing for further information.
If you have oracle metalink, then read the following note;
Note:119706.1 - Troubleshooting Guide TNS-12535 & ORA-12535 Errors

Group managers and Contributors fields are randomly cleared out in Terms Store Management Tool

Is there any explanation or how to solve this problem?
Group managers and Contributors fields are randomly cleared out in Terms Store Management Tool in SharePoint 2010.
Any ideas? Thanks!

Hi arevsun,
For this issue, I'm trying to involve someone familiar with this topic to further
look at it.
Thanks,
Eric Tao
TechNet Community Support

Bandwidth manager with Solaris

Hi all !
Is there a tool for bandwidth manager like pf-altq in BSDs or other in Linux ?
Thanks in advance.
roberto

Download and install:
ntop:
http://www.ntop.org/
iftop:
http://www.ex-parrot.com/~pdw/iftop/
Gary

Receiving Transaction Manager concurrent program errors out with INACTIVE, NO Manager

Hi,
We have an R12.1.3, 2-node (1 node Apps, 1 node DB) ERP system on Sparc 64, Solaris 10 Machines.
All the concurrent managers including Standard Manager and Receiving Transaction Manager are running fine.
When we are running the concurrent program Receiving Transaction Manager(RCVTPO), it errors out with Inactive No Manager error.
I am not being able to find any errors in the log files of CM or DB.
Could someone help me resolve this error. Its kinda urgent
Thanks.
Muneer

Please see the solution in (PODAMGR And RCVOLTM Inactive And Cannot Be Started (Doc ID 726158.1)).
Are there any errors in the database log file?
If the above didn't help, please run cmclean.sql and ccm.sql scripts.
Concurrent Processing - CMCLEAN.SQL - Non Destructive Script to Clean Concurrent Manager Tables (Doc ID 134007.1)
Concurrent Processing - CCM.sql Diagnostic Script to Diagnose Common Concurrent Manager Issues (Doc ID 171855.1)
Thanks,
Hussein

I have my ipod shuffle plugged into a diffrent computer associated with it for ittunes, but i cant figure out how to maually manage my music without erasing all the songs already on my ipod shuffle... so how do i do that?

I have my ipod shuffle plugged into a diffrent computer associated with it for ittunes, but i cant figure out how to maually manage my music without erasing all the songs already on my ipod shuffle... so how do i do that? I've done it before with my old ipod before it broke. I really need help with this!

I have my ipod shuffle plugged into a diffrent computer associated with it for ittunes, but i cant figure out how to maually manage my music without erasing all the songs already on my ipod shuffle... so how do i do that? I've done it before with my old ipod before it broke. I really need help with this!

I have full membership to CC and have been using it for 4 months. Randomly Photoshop stopped opening jpgs, so I uninstalled and re-installed. Photoshop then stopped working all together. I signed out of the app manager and when I signed back in all my inf

I have full membership to CC and have been using it for 4 months. Randomly Photoshop stopped opening jpgs, so I uninstalled and re-installed. Photoshop then stopped working all together. I signed out of the app manager and when I signed back in all my info was gone and only "TRIAL VERSIONS" of CC apps were available. I paid for this software. I need to be able to download it again.

Wow, Karan Taneja, you've just embarrassed yourself on a worldwide support forum. Not only is your post ridiculous and completely inappropriate for a technical support forum, but it also shows your ignorance as to whom you think the audience is. Apple is not here. It's users, like you.
If you would have spent half the time actually reading the Terms of Use of this forum that YOU agreed to by signing up to post, as you did composing that usesless, inappropriate post, you (and the rest of us on this forum) would have been much better off.

Bandwidth Management(Rate Limit) Using QoS Policies

Hello,
I need some advice. We have an ASA 5525 running version 8.6(1)2 and a 10 MG pipe. I have execs that want to limit bandwidth on users for stuff like youtube, stream media, and downloads. I found the article on ‘Bandwidth Management(Rate Limit) Using QoS Policies’ so it appears our firewall can do what we want. I’m not a cisco person. My knowledge is limited when it comes to configuration – that’s why we have SmartNet :). The advice I need is what to ask for, so to speak, when I put a case in. Can bandwidth be limited on end users and/or can they limit the ‘bandwidth rate limit’ to just youtube, steaming media, and downloads? If so, what should the limit be? and I’m assume this would be for ‘incoming’ traffic only? we’re running into some bandwidth hogs – usually youtube and/or streaming media. We have a Barracuda web filter which we’ve used to block and monitor activity but I simply do not have time to babysit this all day. I should also mention we do have critical data running up and down the pipe; such as credit card processing, DB replication between in house DB and hosted website, TPCx and EDI, FTP, and such that we don’t want restricted.
Need input please,
Thanks,
D

Hello,
That's a question that you as the network admin of that organization could answer.
How much traffic for business purposes must travel via HTTP/HTTPS?
How much bandwith are you willing to provide to this 2 protocols?
Those are the kind of answers you need to answer before setting the number
Regards
Remember to rate all of the helpful posts, Just click the 5 stars at the left of each post
Julio

Has anyone figured out a way to manage clients firefox prefs as plist?

has anyone figured out a way to manage clients firefox prefs as plist? I can't seem to find a plist to manage clients firefox prefs

What happens when you try to sync music to the iPod? The latest version of iTunes is compatible with all model iPods.

WAAS - Bandwidth Management support?

WAAS - Bandwidth Management support?

Sorry, I had a problem with the web. My comment was:
I know that other products such as Juniper's WXC supports Bandwidth Management. Does Cisco WAAS support it too?
Bandwidth Management means:
- Guarantee a minimum bandwidth for your most critical applications.
- Set maximum bandwidths to limit (or drop) low-priority traffic.
- Set priorities to determine how the âexcessâ bandwidth is allocated.
Thanks in advance.
JosÃ© Luis

NAC in-band vs out-of-band bandwidth management

Similar Messages

Maybe you are looking for