Cisco Cisco Clean Access 3.5

Cisco Clean Access lets you control how much network bandwidth is available to users by role. You can 
independently configure bandwidth management using global forms in the CAM as needed for system 
user roles, or only on certain Clean Access Servers using local forms. However, the option must first be 
enabled on the CAS for this feature to work. You can also specify bandwidth constraints for each user 
within a role or for the entire role.

For example, for a CAM managing two CASes, you can specify all the roles and configure bandwidth 
management on some of the roles as needed (e.g. guest role, quarantine role, temporary role, etc.). If 
bandwidth is only important in the network segment where CAS1 is deployed and not on the network 
segment where CAS2 is deployed, you can then turn on bandwidth management on CAS1 but not CAS2. 

With bursting, you can allow for brief deviations from a bandwidth constraint. This accommodates users 
who need bandwidth resources intermittently (for example, when downloading and reading pages), 
while users attempting to stream content or transfer large files are subject to the bandwidth constraint. 

By default, roles have a bandwidth policy that is unlimited (specified as -1 for both upstream and 
downstream traffic). 

First, enable bandwidth management on the CAS by going to Device Management > CCA Servers 
> Manage [CAS_IP] > Filter > Roles > Bandwidth. 

Select Enable Bandwidth Management and click Update.

See the Cisco Clean Access Server Installation and Administration Guide for details on local 
bandwidth management. 

From User Management > User Roles > Bandwidth, click the Edit button (

) next to the role 

for which you want to set bandwidth limitations. The Bandwidth form appears as follows: