Users Guide

328 | Roles and Policies Dell PowerConnect W-Series ArubaOS 6.1 | User Guide
access-list session web-only position 1
After assigning the user role (see “User Role Assignments” on page329), you can use the show reference user-
role <role> command to see the profiles that reference this user role.
Bandwidth Contracts
You can manage bandwidth utilization by assigning maximum bandwidth rates, or bandwidth contracts, to user
roles. You can configure bandwidth contracts, in kilobits per second (Kbps) or megabits per second (Mbps), for
the following types of traffic:
 from the client to the controller (“upstream” traffic)
 from the controller to the client (“downstream” traffic)
You can assign different bandwidth contracts to upstream and downstream traffic for the same user role. You can
also assign a bandwidth contract for only upstream or only downstream traffic for a user role; if there is no
bandwidth contract specified for a traffic direction, unlimited bandwidth is allowed.
By default, all users that belong to the same role share a configured bandwidth rate for upstream or downstream
traffic. You can optionally apply a bandwidth contract on a per-user basis; each user who belongs to the role is
allowed the configured bandwidth rate.
For example, if clients are connected to the controller through a DSL line, you may want to restrict the upstream
bandwidth rate allowed for each user to 128 Kbps. Or, you can limit the total downstream bandwidth used by all
users in the ‘guest’ role to 128 Mbps. The following example configures a bandwidth rate of 128 Kbps and applies
it to upstream traffic for the previously-configured ‘web-guest’ user role on a per-user basis.
Configuring a Bandwidth Contract in the WebUI
In the WebUI, you can first configure a bandwidth contract and then assign it to a user role:
1. Navigate to the Configuration > Advanced Services > Stateful Firewall > BW Contracts page.
2. Click Add to create a new contract.
3. In the Contract Name field, enter BC512_up.
4. The Bandwidth field allows you to define a bandwidth rate in either kbps or Mbps. For this example, enter
512 in the Bandwidth field, then click the drop-down list and select kbps.
5. Click Done.
Assigning a Bandwidth Contract to a User Role in the WebUI
Now that you have a defined bandwidth contract, you can assign that contract to a user role.
1. Navigate to the Configuration > Security > Access Control > User Roles page.
2. Select Edit for the web-guest user role.
3. Under Bandwidth Contract, select BC512_up from the drop-down menu for Upstream.
4. Select Per User.
5. Scroll to the bottom of the page, and click Apply.
You can also can configure the user role and create the bandwidth contract from the User Roles page:
1. Navigate to the Configuration > Security > Access Control > User Roles page.
2. Select Edit for the web-guest user role.
3. In the Bandwidth Contract section, click the Upstream drop-down list and select Add New. The New
Bandwidth Contract fields appear.
a. In the Name field, enter BC512_up.
b. In the Bandwidth field, enter 512.