
183 | Roles and Policies AOS-W Instant 6.3.1.1-4.0 | User Guide
Figure 61 VLAN Assignment Rule Window
3. Select the attribute from the Attribute drop-down list. The list of supported attributes includes RADIUS
attributes, dhcp-option, dot1x-authentication-type, mac-address, and mac-address-and-dhcp-options. For
information on a list of RADIUS attributes, see RADIUS Server Authentication with VSA on page 136.
4. Select the operator from the Operator drop-down list. The following types of operators are supported:
l contains— The rule is applied only if the attribute value contains the string specified in
Operand
.
l equals— The rule is applied only if the attribute value is equal to the string specified in
Operand
.
l not-equals — The rule is applied only if the attribute value is not equal to the string specified in
Operand
.
l starts-with — The rule is applied only if the attribute value starts with the string specified in
Operand
.
l ends-with — The rule is applied only if the attribute value ends with string specified in
Operand
.
l matches-regular-expression — The rule is applied only if the attribute value matches the regular expression
pattern specified in
Operand
. This operator is available only if the mac-address-and-dhcp-options attribute
is selected in the Attribute drop-down. The mac-address-and-dhcp-options attribute and matches-
regular-expression are applicable only for the WLAN clients.
5. Enter the string to match in the String field.
6. Select the appropriate VLANID from the VLAN drop-down list.
7. Click OK.
8. Ensure that all other required parameters are configured.
9. Click Finish to apply the changes.
In the CLI
To create a VLAN assignment rule for WLAN SSID:
(Instant Access Point)(config)# wlan ssid-profile <name>
(Instant Access Point)(SSID Profile <name>)# set-vlan <attribute>{equals|not-equals|starts-wit
h|ends-with|contains|matches-regular-expression}<operator><VLAN-ID>|value-of}
(Instant Access Point)(SSID Profile <name>)# end
(Instant Access Point)# commit apply
To configure a VLAN assignment rule for a wired profile:
(Instant Access Point)(config)# wired-port-profile <nname>
(Instant Access Point)(wired ap profile <name>)# set-vlan <attribute>{equals|not-equals|start
s-with|ends-with|contains}<operator><VLAN-ID>|value-of}
(Instant Access Point)(wired ap profile <name>)# end
(Instant Access Point)# commit apply
Example
(Instant Access Point)(config)# wlan ssid-profile Profile1
Kommentare zu diesen Handbüchern