User's Manual

In the WebUI
1. Navigate to Configuration > Access Control > Policies.
2. Click Add/Edit.
3. Click Add under Rules/IP Version.
4. Select application or application category from the Service drop-down menu and select configuration
options.
5. Click Apply.
In the CLI
To configure the ACL application-specific parameters using the command-line interface, access the command-
line interface in config mode, run the following commands:
ip access-list session <accname>
<source> <dest> <service> <action>[<extended action>]
Configuring Bandwidth Contracts for AppRF 2.0
Bandwidth contract configuration lets you configure bandwidth contracts for both the global or application-
specific levels.
Global Bandwidth Contract Configuration
You can configure bandwidth contracts to limit application and application categories on an application or
global level.
In the CLI
To configure global bandwidth contracts:
(host)(config) #dpi global-bandwidth-contract[app|appcategory]
<name>[downstream|upstream][kbits|mbits]<256..2000000>
To show global bandwidth contract configuration output:
(host) #show dpi global-bandwidth-contract all
(host) #show dpi global-bandwidth-contract app name
(host) #show dpi global-bandwidth-contract appcategory name
Role-Specific Bandwidth Contracts
Application-specific bandwidth contracts (unlike "generic" bandwidth-contracts) allow you to control or reserve
rates for specific applications only on a per-role basis. An optional exclude list is provided that allows you to
exclude applications or application categories on which a generic user/role bandwidth-contract is not applied.
Using an Exclude List
The exclude list enables you to give specific enterprise mission-critical applications priority over other user
traffic. An enterprise may have well known applications such as Microsoft Exchange, SAP, Oracle, accounting
and finance applications, and other enterprise resource planning (ERP) or customer relationship management
(CRM) applications.
An exclude list helps you to prioritize these mission-critical enterprise applications.
Instead of enumerating bandwidth limits for each application individually on a per-user/per-role basis, you can
configure a single bandwidth contract on a per-user/per-role to limit all non-mission critical applications. You
can then exclude all mission-critical applications by placing them in an exclude list. This way all mission-critical
applications will not be rate-limited.
Important points regarding bandwidth contracts include:
l Application bandwidth contracts are per-role by default.
Dell Networking W-Series ArubaOS 6.4.x | User Guide Roles and Policies | 384