Policy-Level Configurations - Black Box LWN602A User Manual

10.2.2 Policy-Level Configurations

Policies control how wireless clients access the network. The following list contains some key areas of policy-level configurations
and relevant commands.
• QoS settings
qos { classifier-map | classifier-profile | marker-map | marker-profile | policy } ...
• User profiles
user-profile string ...
• SSIDs
ssid string ...
• AAA (authentication, authorization, and accounting) settings for IEEE 802.1X authentication
aaa radius-server ...
Although the configuration of most SmartPathOS features involves one or more related commands, to define and apply a QoS
policy to a group of users, you must configure several different but related features: a QoS policy, a user profile, and—if you do
not authenticate users with a RADIUS server—an SSID that references the user profile, and an interface to which you assign the
SSID. The configuration steps are shown in Figure 10-2.
First, configure a QoS policy that you want to apply
to wireless traffic from a group of users.
Second, configure a user profile that references the
QoS policy you just configured.
The next step depends on whether you use
a RADIUS server to authenticate users.
If you use a RADIUS server, configure
it to return attributes for the realm to
which the wireless users belong. After
authenticating a user, the server
returns these attributes with the
Access-Accept message. The
attributes indicate which
user profile to apply to the
user, and the profile in turn
indicates the QoS policy to
apply.
User accounts are stored
on the RADIUS Server.
Returned Attributes
• Tunnel Type = GRE (value = 10)
• Tunnel Medium Type = IPv4 (value = 1)
• Tunnel Private Group ID = user_profile_number
The attributes indicate which user profile to apply to the user,
and the profile in turn indicates which QoS policy to apply.
Chapter 10: SmartPath Operating System (OS)
qos policy string ...
1
user-profile string qos-policy string
2
Yes No
RADIUS
Server?
3
4
Figure 10-2. Steps for configuring and applying QoS.
724-746-5500 | blackbox.com
vlan-id number attribute number
If you do not use a RADIUS server, create
an SSID that specifies the user profile
attribute as its default user profile.
ssid string
3
ssid string default-
user-profile-attr number
4
interface interface ssid string
Assign the SSID to an interface.
The SmartPath AP applies the QoS policy to all
The HiveAP applies the QoS policy to all
wireless clients that associate with the SSID.
wireless clients that associate with the SSID.
Page 131