Hello Lucas,

To send a specific RADIUS attribute in answer you will need to work with the RADIUS filter.


From there you can choose a condition for example an SSID or the device role in PacketFence, then custom what RADIUS answer you send. For instance Filter-Id => 10,

You have examples in the file conf/radius_filter.conf.example


Thanks


On 09/08/2017 08:52 AM, luca comes via PacketFence-users wrote:

Ok Diego,

I will try but it's not so clear to me how to proceed. I understand that I should create a new connection profile similar to the one I use in normal operation and assign role on the violation? How can I send vsa back to the controller?


Luca




------------------------------------------------------------------------
*Da:* Diego Garcia del Rio <garc...@gmail.com>
*Inviato:* venerdì 8 settembre 2017 14:29
*A:* luca comes
*Cc:* packetfence-users@lists.sourceforge.net
*Oggetto:* Re: [PacketFence-users] Bandwidth limit
Ciao Luca. I would imagine Aruba can do rate limits on the AP. You need to find which radius vsa to send so that it can apply a profile to the user and do the rate limit.

On Sep 8, 2017 07:02, "luca comes" <lucaco...@hotmail.it <mailto:lucaco...@hotmail.it>> wrote:

    Hi Diego,

    It's an Aruba appliance.


    Luca


    Inviato da Outlook <http://aka.ms/weboutlook>



    ------------------------------------------------------------------------
    *Da:* Diego Garcia del Rio <garc...@gmail.com
    <mailto:garc...@gmail.com>>
    *Inviato:* giovedì 7 settembre 2017 17:04
    *A:* packetfence-users@lists.sourceforge.net
    <mailto:packetfence-users@lists.sourceforge.net>
    *Cc:* luca comes
    *Oggetto:* Re: [PacketFence-users] Bandwidth limit
    Hi Luca,

    I don't have experience with the "inline mode" of PF. I haven't
    seen any options to do bandwidth limiting in the UI though, so I
    would not keep my hopes up.

    What controller do you have?


    On Thu, Sep 7, 2017 at 3:37 AM, luca comes via PacketFence-users
    <packetfence-users@lists.sourceforge.net
    <mailto:packetfence-users@lists.sourceforge.net>> wrote:

        Hi Diego,
        thank you for your answer. What about if I put PF inline in
        front of the WiFi controller? Could it perform rate limit
        after user authentication when the IP assigned is known
        without working on the controller?

        Luca


        ------------------------------------------------------------------------
        *Da:* Diego Garcia del Rio <garc...@gmail.com
        <mailto:garc...@gmail.com>>
        *Inviato:* lunedì 4 settembre 2017 20:23
        *A:* packetfence-users@lists.sourceforge.net
        <mailto:packetfence-users@lists.sourceforge.net>
        *Cc:* luca comes
        *Oggetto:* Re: [PacketFence-users] Bandwidth limit
        You can do this by assinging a new profile to the user as the
        action of the bandwidth violation. Of course the capability to
        rate limit will depend on the device doing the access. If its
        a fairly advanced wifi, you could do it, but might be
        impossible or hard on wired switches (especially lower end)



        On Mon, Sep 4, 2017 at 5:41 AM, luca comes via
        PacketFence-users <packetfence-users@lists.sourceforge.net
        <mailto:packetfence-users@lists.sourceforge.net>> wrote:

            Dear all,

            I have a customer who need to restrict bandwidth to
            IP/user when they exceed the limit. Is there the
            possibility using PF? Can you drive me to documentation or
            some example to understand the possibilities?


            Thanks


            Luca



            Inviato da Outlook <http://aka.ms/weboutlook>


            
------------------------------------------------------------------------------
            Check out the vibrant tech community on one of the world's
            most
            engaging tech sites, Slashdot.org! http://sdm.link/slashdot
            _______________________________________________
            PacketFence-users mailing list
            PacketFence-users@lists.sourceforge.net
            <mailto:PacketFence-users@lists.sourceforge.net>
            https://lists.sourceforge.net/lists/listinfo/packetfence-users
            <https://lists.sourceforge.net/lists/listinfo/packetfence-users>



        
------------------------------------------------------------------------------
        Check out the vibrant tech community on one of the world's most
        engaging tech sites, Slashdot.org! http://sdm.link/slashdot
        <http://sdm.link/slashdot>
        _______________________________________________
        PacketFence-users mailing list
        PacketFence-users@lists.sourceforge.net
        <mailto:PacketFence-users@lists.sourceforge.net>
        https://lists.sourceforge.net/lists/listinfo/packetfence-users
        <https://lists.sourceforge.net/lists/listinfo/packetfence-users>




------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot


_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

--
Antoine Amacher
aamac...@inverse.ca  ::  www.inverse.ca
+1.514.447.4918 x130  :: +1 (866) 353-6153 x130
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to