Configuring the Quota Profile
The quota profile defines Internet access resources available to users and control and management actions after the quota is exceeded.
Prerequisites
The quota allocation mode and quota data planning have been clarified based on bandwidth management requirements of the enterprise.
Control and management actions taken after the quota is exceeded, including maximum bandwidth limiting and direct blocking, have been clearly defined.
Procedure
- In the system view, access the quota control policy view.
- In the quota control policy view, create a quota profile and access its view.
profile profile-name
- Set the Internet access quota of the user.
- The Internet access resource quota is individually configured for each user. If the quota control policy involves multiple users or user groups, each user exclusively enjoys this quota.
- After the traffic quota of a user reaches 100%, the device pushes a portal page to the user's browser to remind the exhaustion of the traffic quota, and the user cannot continue accessing the Internet.
- You can run the reminder-threshold reminder-threshold-value command to set a reminder threshold for the quota usage. If the traffic quota usage reaches the preset reminder threshold, the device pushes a portal page to the user's browser to remind the user of the quota usage.
Set the daily traffic quota for each user.
stream-daily stream-value [ reminder-threshold reminder-threshold-value ]
Set the daily online duration for each user.
time-daily time-value [ reminder-threshold reminder-threshold-value ]
Set the start time for the collection of daily traffic quota and daily online duration quota statistics.
daily-statistic start-hour start-hour
Set the monthly traffic quota for each user.
Run the stream-monthly stream-value [ reminder-threshold reminder-threshold-value ] command to set the monthly traffic quota for each user.
- Optional: Run the stream-monthly start-date start-date command to set the start date for monthly traffic statistics collection.
- Optional: Set the device domain name.
device-domain domain-name
The domain name can replace the FW's IP address in the URL of the portal page pushed to users to prevent information disclosure.
The mapping between the FW's domain name and IP address must be set on the DNS server, so that the DNS server can parse the domain name into the FW's IP address. - Set the maximum bandwidth limit for each user whose quota is exceeded. If bandwidth-value is 0, the user traffic is directly blocked after the user's quota is exhausted.
limit-bandwidth bandwidth-value