Cisco Cisco 5520 Wireless Controller 기술 참조

다운로드
페이지 48
 
46
Application Visibility and Control Feature Deployment Guide
 
  AVC—Phase 3 in CUWN Release 8.0
To verify if the AVC policy is applied from the WLC:
AVC Profile Name: ............................................. teacher-AVC
Try to connect SSID with student credentials, you should see another policy applied (student-AVC) and 
if the client device is not an Apple-iPad, the user will not be able to access the network.
Native Profiling Limitations
Wired clients behind the WGB will not be profiled and policy action will not be done.
Only 16 policies per WLAN can be configured, and globally 64 policies will be allowed.
Policy action will be done after L2 authentication is complete or after L3 authentication or when the 
device sends http traffic and gets the device profiled. Due to which certain scenarios profiling and 
policy actions will happen more than once per client.
This release will support only IPv4 clients to be profiled.
No support for WGB wired clients for profiling because http profiling is not supported on WGB 
wired clients.
Summary
By default, profiling is disabled on all WLANs
Each WLAN can have mapped profiling policies configured.
Each Policy can have matching Role Type, Device Type, EAP type configured and an associated 
policy index mapped.
The policy index signifies which policy needs to be matched first.
The corresponding policy name will be deduced from the policy Index.
The policy matching will exit at the first policy match and the corresponding policy action attributes 
will be set per client.