Users Guide

804| Dashboard Monitoring Dell Networking W-Series ArubaOS 6.5.x| User Guide
WebCC Bandwidth Contract Configuration
With this feature, ArubaOS supports configuring WebCC category and reputation based bandwidth contract
configuration/enforcement. This can be enforced globally for all user-roles, or can be enforced per user-role.
Use the following command to apply global WebCC based bandwidth contracts using the CLI:
(host) (config) #web-cc global-bandwidth-contract webcc-category/webcc-reputation <name>
upstream/downstream mbits/kbits <value>
Use the following command to apply AAA bandwidth contracts using the CLI:
(host) (config) #aaa bandwidth-contract webcc mbits <value>
Use the following command to apply role-specific web-cc based bandwidth contracts using the CLI:
(host) (config) #user-role webcc
(host) (config-role) #bw-contract webcc-category/webcc-reputation <name> <contract>
upstream/downstream
Debugging— The following show commands are introduced as part of this feature:
l show web-cc category all: Displays all WebCC categories
l show web-cc reputation: Displays WebCC reputation
l show web-cc stats: Displays the statistics of WebCC module in CP
l show web-cc status:Display the status of Web-CC module in CP
l show web-cc global-bandwidth-contract: Displays configured WebCC bandwidth contract
l show datapath web-cc: Displays md5, web category, reputation, and age for each URL
l show datapath web-cc counters: Displays the number of URLs in cache, Classified and Unclassified
sessions.
l show datapath session web-cc: Displays Internal Flags, Pre Classification ACE Index, and Post
Classification ACE Index
l show gsm debug channelweb_cc_info: Lists md5, Category, and Reputation for each URL. GSM entries
are populated as and when URL cache entry is learned, and it is used for reporting the actual URLs being
associated with user session entries.
The following clear command are introduced as part of this feature:
l clear web-cc cache <md5_1> <md5_2> : Clears the WebCC cache entry from both data plane and GSM.
l clear web-cc stats: Clears all WebCC statistics.
l clear datapath web-cc counters: Clears configuration values and statistics in the WebCC datapath
module.
Blocked Sessions
ArubaOS 6.5 introduces the support for system administrator to have the ability to look at blocked sessions
for AppRF and WebCC on the controller dashboard. System administrators can see blocked sessions belonging
to specific web-category (like news / sports / gambling) ,session belonging to specific app category.
This tab displays WebCC and AppRF sessions which are blocked by ACL through system logging or on the
WebUI interface.
Blocked session feature support in Firewall-Visibility process is enabled by default .Once the management
server is configured, AMON feed generation is enabled by default. Only for system logging , enable blk-session
option of firewall visibility CLI command.
In the controller WebUI, navigate to Dashboard > Traffic Analysis > Blocked Sessions to view blocked
sessions. You can view this page for the following information: