Viewing The Currently Active Per-Port Cos And Rate-Limiting Configuration Specified By A Radius Server - HP ProCurve 6400cl Series Access Security Manual
Hide thumbs
Also See for ProCurve 6400cl Series:
- Management and configuration manual (508 pages) ,
- Installation and getting started manual (84 pages) ,
- Management manual (664 pages)
Table of Contents
Advertisement
RADIUS Authentication and Accounting
Configuring a RADIUS Server To Specify Per-Port CoS and Rate-Limiting Services
6-22
Service
Control Method and Operating Notes:
Rate-Limiting on
Vendor-Specific Attribute configured in the RADIUS server.
inbound traffic
ProCurve vendor-specific ID:11
This feature assigns a VSA: 46 (integer = HP)
bandwidth limit to all
Setting: HP-RATE-LIMIT = < bandwidth-in-Kbps >
inbound packets
received on a port
supporting an
authenticated client.
Requires a port-access (802.1x, Web Auth, or MAC Auth)
For more on Rate-Limiting, refer to "Rate-Limiting" in the "Port Traffic
Controls" chapter of the Management and Configuration Guide for
your switch.
Viewing the Currently Active Per-Port CoS and Rate-
Limiting Configuration Specified by a RADIUS Server
While a port-access authenticated client session is active, any RADIUS-
imposed port settings override their counterparts in the port's configuration.
For example, if the switch configuration allows port B1 a rate-limit of 80% of
the port's available bandwidth, but the RADIUS server specifies a rate-limit of
50% for a given authenticated client, then the switch shows the RADIUS-
imposed rate-limit for that port as long as the authenticated client session is
active.
Syntax: show port-access authenticator [ port-list ]
show rate-limit
show qos port-priority
Note: The CLI command for configuring a rate-limit on a port uses
a percent-age value. However, using a VSA on a RADIUS server to
specify a rate-limit requires the actual Kbps to which you want to
limit inbound traffic volume. Thus, to limit in-bound traffic on a
gigabit port to 50% of the port's bandwidth capacity requires a VSA
setting of 500000 (1,000,000 x 0.5).
authentication method configured on the client's port on the
ProCurve switch.
Advertisement
Table of Contents
