Per-User Differentiated QoS with EAP-TLS on a Single SSID

B.

When designing a wireless network utilizing EAP-TLS, one of the design requirements is to provide per-user differentiated QoS using only one SSID. To achieve this goal, there are several options available, as follows:

A. Using WMM Override: WMM (Wi-Fi Multimedia) is a QoS mechanism that prioritizes traffic based on application type. WMM Override allows administrators to assign higher or lower priority levels to specific applications or traffic types. This mechanism can be used to provide per-user differentiated QoS by assigning different priority levels to different users. However, this approach is not very granular and may not be sufficient for more complex QoS requirements.

B. Using Cisco Airespace VSAs: VSA (Vendor-Specific Attribute) is a mechanism that allows vendors to add custom attributes to RADIUS messages. Cisco Airespace VSAs can be used to provide per-user differentiated QoS by adding custom attributes to RADIUS messages sent by the authentication server. These attributes can be used to assign different QoS profiles to different users. This approach is more granular than WMM Override and can provide more flexibility in QoS configuration.

C. Using QoS Enhanced BSS: QoS Enhanced BSS (Basic Service Set) is a mechanism that allows administrators to assign different QoS profiles to different BSSIDs (Basic Service Set Identifiers) within the same SSID. This mechanism can be used to provide per-user differentiated QoS by assigning different QoS profiles to different users based on their BSSID association. This approach is more granular than WMM Override and can provide more flexibility in QoS configuration.

D. Using AP groups: AP (Access Point) groups are a mechanism that allows administrators to assign different configuration settings to different groups of APs. AP groups can be used to provide per-user differentiated QoS by assigning different QoS profiles to different AP groups. This approach is more granular than WMM Override and can provide more flexibility in QoS configuration.

In summary, there are several ways to provide per-user differentiated QoS using only one SSID in a wireless network utilizing EAP-TLS. WMM Override, Cisco Airespace VSAs, QoS Enhanced BSS, and AP groups are all viable options, but the choice depends on the specific requirements and the level of granularity needed in the QoS configuration.