Symptom
When applying QoS policies to limit client rate through AAA override to different clients connecting to the same WLAN, the same client rate limit will be applied to all clients connected to the same access point. The last QoS policy received will be applied to all other clients, not matter which rate limit was applied before. It seems the last QoS policy applied overrides all others on the access point.
Conditions
- Apply QoS policies with client rate limit using AAA override
- Use APs in flex connect local switching
Workaround
Add the following AV-Pairs in the authorization profile on ISE :
Aire-Data-Bandwidth-Average-DownStream-Contract = 300 (here, you can use any value)
Aire-Data-Bandwidth-Average-UpStream-Contract = 300 (here, you can use any value)
Further Problem Description
Example : if we connect a client that gets the "Guest-QoS" applied, all clients will have the Guest-QoS applied.
#show rate-limit client
Per client rate limit:
mac vap rate_out rate_in policy
08:BE:AC:14:13:7D 1 10000 10000 Guest-QoS
94:18:65:48:6F:B1 1 10000 10000 Guest-QoS
If the next client connecting (or another client re-connecting) gets the "Corp-QoS" applied through AAA override, all clients on the AP will get the same client rate limit applied :
#show rate-limit client
Per client rate limit:
mac vap rate_out rate_in policy
08:BE:AC:14:13:7D 1 705032 705032 Corp-QoS
94:18:65:48:6F:B1 1 705032 705032 Corp-QoS