Per user bandwidth limits with DPPSK and/or Vouchers

Zulgrib Posts: 24
First Comment Friend Collector Second Anniversary
 Freshman Member

Currently, speed limit is defined strictly by the SSID, it would be useful to be able to set different bandwidth limit to specific users when using DPPSK.

Initial request was on ticket #376231, feature would allow Zyxel to position itself against competitor allowing per client bandwidth limit based on voucher code. Combined with Nebula and API, it could be integrated in CRMs where guest access could be created automatically with speed based on customer defined parameters. It is highly demanded by places giving wireless access to end customers, like hotels, cafés, shopping malls. Refer to ticket for potential financial impact.

I hope to gather more Zyxel customers wishing to have this feature in the forum to help prioritize the potential development of the feature.

Thank you

1 votes

Active · Last Updated


  • Zyxel_Judy
    Zyxel_Judy Posts: 546
    Zyxel Certified Network Engineer Level 1 - Security Zyxel Certified Network Administrator - Security 50 Answers First Comment
     Zyxel Employee

    Hi @Zulgrib ,

    Thank you for your valuable suggestion. We appreciate you bringing this to our attention and we will certainly consider this for future development.

    In response to your ticket regarding the need for increased bandwidth limits for VIP guests at the game center for example, so we suggest you utilize DPPSK with Dynamic VLAN. Subsequently, you can use the traffic shaping feature to set the rate limit.

    Here's the method to assign the VLAN ID for DPPSK users:

    Please refer to the FAQ which shows how to set up rate limits with Dynamic VLAN using Traffic Shaping.

    By following these steps, all clients will still be able to connect to a single SSID. However, you will be able to segregate users into different VLAN groups, each with a distinct rate limit.



  • Zulgrib
    Zulgrib Posts: 24
    First Comment Friend Collector Second Anniversary
     Freshman Member

    Hello @Zyxel_Judy ,

    This is the workaround i'm currently using, but the shaping needs to be done as soon as possible in some cases —- before it arrives at the gateway. It is also not manageable to create 400VLANs considering USG Flex 700 specification state a maximum of 128 VLAN interfaces. Giving access to common employee the possibility to modify the USG's configuration is also a security risk, while just letting them use Nebula to manage APs alone would be a lower risk since critical VLANs could be excluded from APs' ports on switches.

    This is also part of a software solution we are creating to help businesses manage their guest access that would rely on Nebula API, these business could be locked with ISP's gateway or not willing to invest on a gateway.

  • Zyxel_Kay
    Zyxel_Kay Posts: 296
    Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - WLAN Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Security
     Zyxel Employee

    Hi @Zulgrib ,

    Thank you for taking the time to share your feedback with us. We understand your concerns regarding the current workaround and the limitations it poses in certain scenarios.

    We value your input, and we will carefully consider your suggestions, along with the feedback from other users in the community. The votes and comments on this topic will be closely monitored and taken into account as we shape our product development decisions.


Nebula Tips & Tricks