Applied Rates For Radius-Assigned Rate Limits - HP 2530 Manual Supplement

Table 4 CoS and rate-limiting services (continued)
Service
Ingress (inbound) rate-limiting per-user
Assigns a RADIUS-configured bandwidth limit to the
inbound packets received from a specific client
authenticated on a port.
Note: This attribute is assigned per-authenticated-user, not
per-port. To assign a per-port inbound rate limit, use the
rate-limit all in CLI command.
Egress (outbound) rate-limiting per-port
Assigns a RADIUS-configured bandwidth limit to the
outbound traffic sent to a switch port.
To configure support for the services listed in
application, see the documentation provided with the RADIUS application.

Applied rates for RADIUS-assigned rate limits

On the switches covered by this guide, rate limits are applied incrementally as determined by the
RADIUS-applied rate. For any given bandwidth assignment, the switch applies the nearest rate
increment that does not exceed the assigned value. Increments are in graduated steps, as shown
in Table 5 (page 32).
Control method and operating notes
For more on 802.1p priority levels, see "Overview" in the
"Quality of Service (QoS)" chapter of the latest HP Switch
Software Advanced Traffic Management Guide for your
switch.
VSA used in the RADIUS server.
HP vendor-specific ID:1 1
VSA: 46
Setting: HP-Bandwidth-Max-Egress= <bandwidth-in-Kbps>
Note: RADIUS-assigned rate-limit bandwidths must be
specified in Kbps. (Bandwidth percentage settings are not
supported.) Using a VSA on a RADIUS server to specify a
per-user rate-limit requires the actual Kbps to which you
want to limit ingress traffic volume. For example, to limit
inbound traffic on a gigabit port to half the port's
bandwidth requires a VSA setting of 500,000 Kbps.
Requires a port-access authentication method (802.1X,
Web Auth, or MAC Auth) configured on the client's switch
port.
The actual bandwidth available for ingress traffic from an
authenticated client can be affected by the total bandwidth
available on the client port. See
VSA used in the RADIUS server.
HP vendor-specific ID:1 1
VSA: 48 (string=HP)
Setting: HP-RATE-LIMIT=< bandwidth-in-Kbps >
Note: RADIUS-assigned rate-limit bandwidths must be
specified in Kbps — bandwidth percentage settings are
not supported. Using a VSA on a RADIUS server to specify
a per-port rate-limit requires the actual Kbps to which you
want to limit outbound traffic volume. For example, to limit
outbound traffic on a gigabit port to half the port's
bandwidth requires a VSA setting of 500,000 Kbps.
Where multiple, authenticated clients use this feature on
the same switch port, only one (per-port) rate limit is
applied — the actual rate used is the rate assigned by the
RADIUS server to the most recently authenticated client.
This rate remains in effect as long as any authenticated
client remains connected on the port.
Requires a port-access authentication method (802.1X,
Web Auth, or MAC Auth) configured on the client's switch
port.
Actual bandwidth available for egress traffic from an
authenticated client can be affected by the total bandwidth
available on the client port. See
override" (page 32).
Table 4 (page 30) on a specific RADIUS server
Configuring RADIUS server support for switch services
(page 32).
"Per-port bandwidth
31