Cisco Cisco 5760 Wireless LAN Controller 기술 참조
5
Profiling and Policy on Cisco Unified Access CT5760 Controllers and Catalyst 3850 Switches Deployment Guide, Cisco IOS XE Software Release
Local Profiling
Example of the similar role type configured on ACS:
Figure 4
Role AV-Pair Configuration on ACS
b.
Device type—Device type defines the type of device, for example: Windows machine, Smart
phone, and Apple device such as iPad, iPhone and so on.
phone, and Apple device such as iPad, iPhone and so on.
c.
Username—Username defines the login credentials entered by the user.
d.
OUI—Organizationally Unique Identifier of the device.
e.
MAC—MAC address of the device.
The above parameters are configurable as policy match attributes. Once WLC has a match corresponding
to the above parameters per end-point, you can define the policy enforcement. Policy enforcement is
based on session attributes such as:
to the above parameters per end-point, you can define the policy enforcement. Policy enforcement is
based on session attributes such as:
a.
VLAN
b.
ACL
c.
Session Timeout
d.
Ingress QoS
e.
Egress QoS
You can configure these policies and enforce end-points with specified policies. The wireless clients are
profiled based on the MAC OUI, DHCP, and HTTP user-agent (valid Internet is required for successful
HTTP profiling). The WLC uses these attributes and predefined classification profiles to identify the
device in the network.
profiled based on the MAC OUI, DHCP, and HTTP user-agent (valid Internet is required for successful
HTTP profiling). The WLC uses these attributes and predefined classification profiles to identify the
device in the network.
Profiling Configuration
In Cisco IOS XE Release 3.6, the WLC has embedded or built-in profiles available with which it
identifies the devices in the network. In later releases, it should be possible to create user-defined
profiles, which will take precedence over the embedded profiles. Currently, there are 287 default profiles
and you can view these profiles through the WLC CLI prompt.
identifies the devices in the network. In later releases, it should be possible to create user-defined
profiles, which will take precedence over the embedded profiles. Currently, there are 287 default profiles
and you can view these profiles through the WLC CLI prompt.