Cisco Cisco NAC Appliance 3390 Technical Manual

Page of 3
Cisco Clean Access (NAC Appliance) Bandwidth
Management Configuration Example
Document ID: 98583
Contents
Introduction
 Prerequisites
      Requirements
      Components Used
      Conventions
 Control Bandwidth Usage
      Configure Bandwidth Settings for a Role
 Troubleshoot
 Related Information
Introduction
Cisco Clean Access (NAC Appliance) allows you to control how much network bandwidth is available to
users by role. You can independently configure bandwidth management using global forms in the Clean
Access Manager (CAM) as needed for system user roles, or only on certain Clean Access Servers (CASes)
using local forms. However, the option must first be enabled on the CAS for this feature to work. You can
also specify bandwidth constraints for each user within a role or for the entire role.
For example, for a CAM that manages two CASes, you can specify all the roles and configure bandwidth
management on some of the roles as needed (for example, guest role, quarantine role, temporary role, and so
forth). If bandwidth is only important in the network segment where CAS1 is deployed and not on the
network segment where CAS2 is deployed, you can then turn on bandwidth management on CAS1 but not
CAS2.
With bursting, you can allow for brief deviations from a bandwidth constraint. This accommodates users who
need bandwidth resources intermittently (for example, when users download and read pages), while users that
attempt to stream content or transfer large files are subject to the bandwidth constraint. By default, roles have
a bandwidth policy that is unlimited (specified as −1 for both upstream and downstream traffic).
Prerequisites
Requirements
There are no specific requirements for this document.
Components Used
The information in this document is based on Cisco Clean Access (NAC Appliance) with version 3.6.
The information in this document was created from the devices in a specific lab environment. All of the
devices used in this document started with a cleared (default) configuration. If your network is live, make sure
that you understand the potential impact of any command.