You could use internal captive portal or external captive portal and control the guest access via a RADIUS server. The role you return back from RADIUS can have different bandwidth limits assigned per user group. Something like A users in Gold, B users in Silver etc.
Doug Hyde
Director, Technical Support / Extreme Networks