Discussion:
[PacketFence-users] Sending custom radius attribute based on role?
Hans Johnson
2017-04-30 21:58:25 UTC
Permalink
Hello,

I’m just setting up PF ZEN for a non-profit I work with, and I’m wondering if there is a way to send a custom RADIUS attribute based on the role. This would be to override the QoS setting for some users.

We operate a camp in a remote location, where our only access to the Internet is via a private satellite link. For wireless, I have a cisco WLC (a pair of WLC 4404s) going, with coverage in our staff housing.

In order to protect our meagre resources (we only have 3.3Mbps access to the outside world), what I would like to do is have the system be able to set the QoS level for our short term volunteers to “Bronze” as Cisco defines it. Within that, I’ll probably rate limit them to something like 250kbps, which should be fine for email, facebook, iMessage, etc


Anyhow, in reading the available documentation here:

http://www.cisco.com/c/en/us/support/docs/wireless/4100-series-wireless-lan-controllers/96103-wlc-attributes.html <http://www.cisco.com/c/en/us/support/docs/wireless/4100-series-wireless-lan-controllers/96103-wlc-attributes.html>

I should be able to push the radius attributes and override the QoS level for the network.

If I have to muck around in the config files, that’s fine, I just need to be pointed in the right direction. :)

Thanks,

Hans
Tim DeNike
2017-05-01 02:56:39 UTC
Permalink
Look at the radius filters. Match category and add an arbitrary radius
attribute pair.

Sent from my iPhone

On Apr 30, 2017, at 5:58 PM, Hans Johnson <***@gmail.com> wrote:

Hello,

I’m just setting up PF ZEN for a non-profit I work with, and I’m wondering
if there is a way to send a custom RADIUS attribute based on the role. This
would be to override the QoS setting for some users.

We operate a camp in a remote location, where our only access to the
Internet is via a private satellite link. For wireless, I have a cisco WLC
(a pair of WLC 4404s) going, with coverage in our staff housing.

In order to protect our meagre resources (we only have 3.3Mbps access to
the outside world), what I would like to do is have the system be able to
set the QoS level for our short term volunteers to “Bronze” as Cisco
defines it. Within that, I’ll probably rate limit them to something like
250kbps, which should be fine for email, facebook, iMessage, etc


Anyhow, in reading the available documentation here:

http://www.cisco.com/c/en/us/support/docs/wireless/4100-series-wireless-lan-controllers/96103-wlc-attributes.html

I should be able to push the radius attributes and override the QoS level
for the network.

If I have to muck around in the config files, that’s fine, I just need to
be pointed in the right direction. :)

Thanks,

Hans

Loading...