Cisco Cisco 5508 Wireless Controller テクニカルリファレンス
46
Application Visibility and Control Feature Deployment Guide
AVC—Phase 3 in CUWN Release 8.0
To verify if the AVC policy is applied from the WLC:
AVC Profile Name: ............................................. teacher-AVC
Try to connect SSID with student credentials, you should see another policy applied (student-AVC) and
if the client device is not an Apple-iPad, the user will not be able to access the network.
if the client device is not an Apple-iPad, the user will not be able to access the network.
Native Profiling Limitations
•
Wired clients behind the WGB will not be profiled and policy action will not be done.
•
Only 16 policies per WLAN can be configured, and globally 64 policies will be allowed.
•
Policy action will be done after L2 authentication is complete or after L3 authentication or when the
device sends http traffic and gets the device profiled. Due to which certain scenarios profiling and
policy actions will happen more than once per client.
device sends http traffic and gets the device profiled. Due to which certain scenarios profiling and
policy actions will happen more than once per client.
•
This release will support only IPv4 clients to be profiled.
•
No support for WGB wired clients for profiling because http profiling is not supported on WGB
wired clients.
wired clients.
Summary
•
By default, profiling is disabled on all WLANs
•
Each WLAN can have mapped profiling policies configured.
•
Each Policy can have matching Role Type, Device Type, EAP type configured and an associated
policy index mapped.
policy index mapped.
•
The policy index signifies which policy needs to be matched first.
•
The corresponding policy name will be deduced from the policy Index.
•
The policy matching will exit at the first policy match and the corresponding policy action attributes
will be set per client.
will be set per client.