Users Guide

397| Roles and Policies Dell Networking W-Series ArubaOS 6.5.x| User Guide
Global Bandwidth Contract Configuration
To configure bandwidth contracts to limit application and application categories on an application or global
level, or to show global bandwidth contract configuration output, access the command-line interface and use
the commands dpi global-bandwidth-contract and show dpi global-bandwidth-contract.
(host)(config) #dpi global-bandwidth-contract[app|appcategory]
(host) #show dpi global-bandwidth-contract
Role-Specific Bandwidth Contracts
Application-specific bandwidth contracts (unlike "generic" bandwidth-contracts) allow you to control or reserve
rates for specific applications only on a per-role basis. An optional exclude list is provided that allows you to
exclude applications or application categories on which a generic user/role bandwidth-contract is not applied.
Using an Exclude List
Use an exclude to give specific enterprise mission-critical applications priority over other user traffic. An
enterprise may have well known applications such as Microsoft Exchange, SAP, Oracle, accounting and finance
applications, and other enterprise resource planning (ERP) or customer relationship management (CRM)
applications.
Instead of enumerating bandwidth limits for each application individually on a per-user/per-role basis, you can
configure a single bandwidth contract on a per-user/per-role to limit all non-mission critical applications. You
can then exclude all mission-critical applications by placing them in an exclude list. This way all mission-critical
applications will not be rate-limited. Important points regarding bandwidth contracts include:
l Application bandwidth contracts are per-role by default.
l When an application bandwidth-contract is configured for both a category and an application within the
category, always apply the most specific bandwidth contract.
In the WebUI
1. Navigate to Configuration > Security > Access Control > User Roles.
2. Click Add to create a new user role or Edit to modify an existing role.
3. Select the Bandwidth Contracts tab.
4. To exclude an application or application category, click the Add button below the Exceptions section, select
an item from the Name drop-down menu and click Done.
5. To add an application or application category to a bandwidth contract, click Add under Application
Bandwidth Contracts.
6. Select the application from the Name drop-down me and whether it is enforced.
7. Enter a name of the new bandwidth contract, the bandwidth in kpbs or mbps, and if downstream is
enforced.
8. Select an option from the Downstream drop-down menu and Per Role, Per User, or Per AP Group from the
adjacent drop-down menu.
9. Select additional configuration parameters from the Misc. Configuration pane.
Make sure that the Enable Deep Packet Inspection option is checked.
10.Click Apply.
In the CLI
To configure the bandwidth application-specific parameters using the CLI, access the command-line interface in
config mode, and issue the following commands: