Can wireless controller do rate limit for guest WLAN via ISE ?

[David Tian]

Hi Experts,

we know that the WLC can do rate limit via Qos profile per client or per SSID which setup on WLC . however, I would like to consult that if can do via Radius with ISE ?

for example, the authenticated user1 on Radius server will have the bandwidth 1 Mbps, and the authenticated users in user group 2 will have the bandwidth 2Mbps, the ISE check/authenticate the users from AD/LDAP server and then download the policy to WLC(only can download ACL? )

can it work ? is there a solution for this scenario ？

Thanks,

David

[howon · Accepted solution]

Yes, it can be done. You need to create matching AuthZ profile on ISE with list of rates as seen in the screen shot:

You can reference following document to find out what each of the rates are for:

Wireless Bi-Directional Rate Limiting Deployment Guide - Cisco

[howon]

FYI, there is a WLC network device profile with the rate limiting attributes:

Legacy RADIUS Dictionary file for Cisco AireOS Controller

[David Tian]

Thanks so much huwon, so useful example.

Br,

David

[m.soleimani]

I was deployed ISE Guest Access Service with Cisco ISE 2.4 and Cisco WLC 8.5, I want to limit client bandwidth in this service,i wan to have different bandwidth profile for my users, for example for ordinary users 2 Mbps Bandwidth limitation and for VIP User 8 Mbps.

i used authorization profiles via cisco ISE, i set advanced attributes like below, when client connect to Wireless Network this attributes passed to the wlc but dosent work correctly (it means that QoS just applied on Up Stream ) i set Gold QoS Profile
For ise guest Access WLAN (no limitation) as Attached file.

Some idea.. someone can help me.

Thanx in advance

Aire-Real-Time-Bandwidth-Average-UpStream-Contract = 2000
Aire-Data-Bandwidth-Average-DownStream-Contract = 2000
Aire-Data-Bandwidth-Burst-UpStream-Contract = 2000
Aire-Real-Time-Bandwidth-Burst-DownStream-Contract = 2000
Aire-Real-Time-Bandwidth-Average-DownStream-Contract = 2000
Aire-Real-Time-Bandwidth-Burst-UpStream-Contract = 2000
Aire-Data-Bandwidth-Average-UpStream-Contract = 2000
Aire-Data-Bandwidth-Burst-DownStream-Contract = 2000

[m.soleimani]

Some idea.. someone can help me.

Thanx in advance

Aire-Real-Time-Bandwidth-Average-UpStream-Contract = 2000
Aire-Data-Bandwidth-Average-DownStream-Contract = 2000
Aire-Data-Bandwidth-Burst-UpStream-Contract = 2000
Aire-Real-Time-Bandwidth-Burst-DownStream-Contract = 2000
Aire-Real-Time-Bandwidth-Average-DownStream-Contract = 2000
Aire-Real-Time-Bandwidth-Burst-UpStream-Contract = 2000
Aire-Data-Bandwidth-Average-UpStream-Contract = 2000
Aire-Data-Bandwidth-Burst-DownStream-Contract = 2000