User's Manual

Deployment Guide 115
EXAMPLE 4: CREATING USER PROFILES
IEEE 802.1X authentication, you must configure the user profile attribute that you set here as an attribute
on the RADIUS server as explained in "RADIUS Server Attributes" on page 124.
• Attribute Group: Leave this field empty.
•QoS Setting: QoS-ITdata
• Default VLAN: VLAN-1-EmployeeData (previously defined; see "Defining VLANs" on page 100)
HiveAPs assign users matching the IT user profile to VLAN 1. This separates all employee data traffic from
employee voice traffic, which will be on VLAN 2. Guest traffic will be on VLAN 3, separating it from both
employee data and voice traffic.
•Description: IT staff
Emp (Employees) QoS and User Profile
1. Click Configuration > QoS Policies > Rate Control & Queuing > (check box) QoS-ITdata > Clone, change the
following settings, and then click Save:
• Name: QoS-EmployeeData
•Description: QoS per regular employee
• Per User Queue Management: Keep all the settings at their default values.
2. Click Configuration > User Profiles > (check box) IT > Clone, make the following changes, and then click Save:
• Name: Emp (You cannot include any spaces when defining a user profile name.)
•Attribute: 4
Because the attribute numbers for the def-user, VoIP, and IT profiles are 1, 2, and 3 respectively, enter "4"
here. This number can be any unique number from 4 to 63. Because you will later map this profile to an SSID
that uses IEEE 802.1X authentication, you must configure the user profile attribute set here as an attribute
on the RADIUS server as explained in "RADIUS Server Attributes" on page 124.
•QoS Setting: QoS-EmployeeData
•Description: Regular employees
Guests QoS and User Profile
1. Click Configuration > QoS Policies > Rate Control & Queuing > New, enter the following, and then click Save:
• Name: QoS-Guests
• Per User Rate Limit: 2000 Kbps (802.11a/b/g); 2000 Kbps (802.11n)
This is the maximum amount of bandwidth that a single user belonging to this profile can use. It is far less
than that for employees, but should be sufficient for basic Internet and e-mail access.
•Description: QoS per guest
• Per User Queue Management: Enter the following items in bold. Leave all other cloned settings unchanged.
Note: Although the "per user rate limit" and the "per user queue management" settings are the same as those
for QoS-ITdata, you must create this QoS profile so that you can later assign different weights to
QoS-ITdata and QoS-EmployeeData (see "Example 9: Creating WLAN Policies" on page 126).
Class Number - Name Scheduling Type Scheduling
Weight
Weight %
(Read Only)
Policing Rate
Limit (Kbps)
(802.11a/b/g)
Policing Rate
Limit (Kbps)
(802.11n)
7 - Network Control Strict 0 0% 64 64
6 - Voice Strict
0 0% 64 64
5 - Video Weighted Round Robin 60
28% 2000 2000