Jump to content

Limit bandwidth to user groups

Go to solution Solved by Haraikomono,

lots of, depending on your connection the price may differ 😄

but not the way you want.

let me elaborate:


cheap method:

  • get a medium good router that is able to specify bandwith limiting for a specific range in the subnet
  • then assign static ip addresses for your devices that you want to limit the bandwith of
  • youre done

expensive method: But enterprise/production ready

  • get a modem depending on your isps connection you might need a good modem, like if you have vdsl2 youd need one with 35.b support
  • get a node for your firewall/controller/gateway/router  (I prefer setting up it as Pfsense) use the modem as passthrough machine
  • what you want is vlan where each vlan gets a own subnet 10.1.1.1, 10.1.1.2, 10.1.1.3...
  • you can control the bandwith assigned to each vlan through your controller ( i'd suggest pfsense)
  • get a good wifi access point that is vlan capable, Id suggest draytek for cheapness, aruba for enterprise or ubiquity (my preferred choice)
  • assign the vlans to own ssids, and youre done
  • or you could leave it as one ssid and setup a secondary radius server with 802.1x auhtenticaion coupled with vlans to assign the user directly to pre configured vlan 😄

 

 

😄 😄 😄

 

lots of, depending on your connection the price may differ 😄

but not the way you want.

let me elaborate:


cheap method:

  • get a medium good router that is able to specify bandwith limiting for a specific range in the subnet
  • then assign static ip addresses for your devices that you want to limit the bandwith of
  • youre done

expensive method: But enterprise/production ready

  • get a modem depending on your isps connection you might need a good modem, like if you have vdsl2 youd need one with 35.b support
  • get a node for your firewall/controller/gateway/router  (I prefer setting up it as Pfsense) use the modem as passthrough machine
  • what you want is vlan where each vlan gets a own subnet 10.1.1.1, 10.1.1.2, 10.1.1.3...
  • you can control the bandwith assigned to each vlan through your controller ( i'd suggest pfsense)
  • get a good wifi access point that is vlan capable, Id suggest draytek for cheapness, aruba for enterprise or ubiquity (my preferred choice)
  • assign the vlans to own ssids, and youre done
  • or you could leave it as one ssid and setup a secondary radius server with 802.1x auhtenticaion coupled with vlans to assign the user directly to pre configured vlan 😄

 

 

😄 😄 😄

 

Link to post
Share on other sites

42 minutes ago, LuckyLoser said:

Probably dumb question, but is there a affordable wifi router that can limit bandwidth to user group or groups and not just per device

  1. Define “affordable” for you.
  2. What kind of environment is this for? Why do you need to do this?

 

Edit:

Coincidentally, I watched this video over at CrossTalk Solutions and the TP-Link Omada Controller seems to offer this exact feature. Scroll to around 26mins and Chris talks about ‘Session Limits’ and ‘Bandwidth Control’. You’ll notice that the rules can be applied to groups (that you’d have to create either based on assigned IPs or MAC addresses).

Link to post
Share on other sites

30 minutes ago, Haraikomono said:

lots of, depending on your connection the price may differ 😄

but not the way you want.

let me elaborate:


cheap method:

  • get a medium good router that is able to specify bandwith limiting for a specific range in the subnet
  • then assign static ip addresses for your devices that you want to limit the bandwith of
  • youre done

expensive method: But enterprise/production ready

  • get a modem depending on your isps connection you might need a good modem, like if you have vdsl2 youd need one with 35.b support
  • get a node for your firewall/controller/gateway/router  (I prefer setting up it as Pfsense) use the modem as passthrough machine
  • what you want is vlan where each vlan gets a own subnet 10.1.1.1, 10.1.1.2, 10.1.1.3...
  • you can control the bandwith assigned to each vlan through your controller ( i'd suggest pfsense)
  • get a good wifi access point that is vlan capable, Id suggest draytek for cheapness, aruba for enterprise or ubiquity (my preferred choice)
  • assign the vlans to own ssids, and youre done
  • or you could leave it as one ssid and setup a secondary radius server with 802.1x auhtenticaion coupled with vlans to assign the user directly to pre configured vlan 😄

 

 

😄 😄 😄

 

Technically that does not meet their requirements as its still per-device rather than per-user.  Seems like they would need some sort of captive portal system to authenticate a user and bandwidth management that way.

ASUS B650E-F GAMING WIFI + R7 7800X3D + 2x Corsair Vengeance 32GB DDR5-6000 CL30-36-36-76  + ASUS RTX 4090 TUF Gaming OC

Router:  Intel N100 (pfSense) Backup: GL.iNet GL-X3000/ Spitz AX Switches: Netgear MS510TXUP, MS510TXPP, GS110EMX
WiFi6: Zyxel NWA210AX (1.7Gbit peak at 160Mhz) WiFi5: Ubiquiti NanoHD OpenWRT (~500Mbit at 80Mhz)
ISPs: Zen Full Fibre 900 (~930Mbit down, 115Mbit up) + Three 5G (~1200Mbit down, 115Mbit up, variable)
Upgrading Laptop/Desktop CNVIo WiFi 5 cards to PCIe WiFi6e/7

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×