Prerequisites

To control (rate-limit) the speed of a CPE device on your network edge, you will first require an active RADIUS server that is configured to provide AAA services to your network. If you haven't done so yet, please follow this link to learn how to configure a RADIUS server for use with Sonar.

Overview

To effectively manage your network edge policies, Sonar uses RADIUS groups that aggregate user accounts, device types, and account statuses with custom RADIUS attributes and Vendor-Specific Attributes (VSAs).

You can find an article here about configuring RADIUS groups for generic uses. This article will show the example of rate limiting for different data services.

The examples below are specific to MikroTik devices, as they use different RADIUS attributes to rate limit compared to other vendors. Please look up your vendor-specific attributes for whichever vendor's NAS device or appliance you will be using.

Be sure to set your Change Of Authority settings in your RADIUS / Sonar configuration to propagate delinquency rules appropriately.

Rate Limiting Based on Data Service

Scenario: Your ISP sells different internet packages, and you want to apply different rate limits with RADIUS policies for customers with a particular package.

Please refer to this article for building your desired data services, once your services are defined, follow the rest of the instructions here to apply RADIUS-based rate limits.

For our example, we will use a data service named Gold Internet

1. Navigate to Settings > Networking > RADIUS Groups, and click on the "Create RADIUS Group" button.
2. Give the group an appropriate name. In our example, we'll be using "Gold Internet Rate Limit".
3. Assign a priority to the group – in the event multiple policies apply that might conflict, the lower priority number will take precedence.
4. Ensure Fall through is enabled to continue processing rules after evaluation.

5. Set the Account Status to "All account statuses".
6. Set Delinquency to "Current" as the rate limit will typically only apply to accounts in good standing.
7. Select the data service to apply the RADIUS Group to. In our case, we're selecting Gold Internet.
8. Click the "Create" button to create the new policy.

Now that the policy is created, we will need to specify the appropriate rate-limiting property for your NAS device, you will need to look up your vendor's particular attributes as they're not standardized. For our example, we will tailor it to a MikroTik NAS.

9. Click the 'Create RADIUS Group Reply Attribute' for the new group.

1. Set the name to your vendor's rate-limiting attribute. You can look up your vendor's RADIUS VSA's for a dictionary of attributes supported by your NAS, but in our case we'll be using rx-rate.

11. Set the operator to "=".

12. Set the value to the desired limited bit rate (in bits/sec). Consult your vendor documentation for formatting.
13. Click the Create button.

Sonar will immediately apply the policy to the defined data services package.

Example Attributes by Vendor

Below is a short list of vendors and their default rate shaping attribute names:

MikroTik

1. rx-rate
2. tx-rate

Cisco

1. Cisco-Avpair
   1. Example Value: lcp:interface-config#1=rate-limit output 128000 10000 10000 conform-action continue exceed-action drop

Juniper

1. Jnpr-CoS-Parameter-Type:0
   1. Example Value: T02 100m indicates 100 Mbps downstream speed

Ubiquiti

1. WISPr-Bandwidth-Max-Up
2. WISPr-Bandwidth-Max-Down