Network-Access Dynamic-Qos; Table 76: Dynamic Qos Profiles - Edge-Core ES3510MA Management Manual

| General Security Measures
C 25
HAPTER
Network Access (MAC Address Authentication)
network-access
dynamic-qos
Use this command to enable the dynamic QoS feature for an authenticated
port. Use the no form to restore the default.
S
YNTAX
[no] network-access dynamic-qos
D S
EFAULT ETTING
Disabled
C M
OMMAND ODE
Interface Configuration
C U
OMMAND SAGE
The RADIUS server may optionally return dynamic QoS assignments to
◆
be applied to a switch port for an authenticated user. The "Filter-ID"
attribute (attribute 11) can be configured on the RADIUS server to pass
the following QoS information:

Table 76: Dynamic QoS Profiles

Profile Attribute Syntax
DiffServ service-policy-in=policy-map-name service-policy-in=p1
Rate Limit rate-limit-input=rate
802.1p switchport-priority-default=value
When the last user logs off of a port with a dynamic QoS assignment,
◆
the switch restores the original QoS configuration for the port.
When a user attempts to log into the network with a returned dynamic
◆
QoS profile that is different from users already logged on to the same
port, the user is denied access.
◆ While a port has an assigned dynamic QoS profile, any manual QoS
configuration changes only take effect after all users have logged off of
the port.
Any configuration changes for dynamic QoS are not saved to the
N :
OTE
switch configuration file.
E
XAMPLE
The following example enables the dynamic QoS feature on port 1.
Console(config)#interface ethernet 1/1
Console(config-if)#network-access dynamic-qos
Console(config-if)#
– 644 –
Example
rate-limit-input=100 (Kbps)
switchport-priority-default=2