Cisco Cisco 5520 Wireless Controller 기술 참조
44
Application Visibility and Control Feature Deployment Guide
AVC—Phase 3 in CUWN Release 8.0
To verify if the AVC policy is applied from the WLC:
AVC Profile Name: ............................................. teacher-AVC
Try to connect SSID with student credentials, you should see another policy applied (student-AVC) and if the client device
is not an Apple-iPad, the user will not be able to access the network.
is not an Apple-iPad, the user will not be able to access the network.
Native Profiling Limitations
Wired clients behind the WGB will not be profiled and policy action will not be done.
Only 16 policies per WLAN can be configured, and globally 64 policies will be allowed.
Policy action will be done after L2 authentication is complete or after L3 authentication or when the device sends
http traffic and gets the device profiled. Due to which certain scenarios profiling and policy actions will happen more
than once per client.
http traffic and gets the device profiled. Due to which certain scenarios profiling and policy actions will happen more
than once per client.
This release will support only IPv4 clients to be profiled.
No support for WGB wired clients for profiling because http profiling is not supported on WGB wired clients.
Summary
By default, profiling is disabled on all WLANs
Each WLAN can have mapped profiling policies configured.
Each Policy can have matching Role Type, Device Type, EAP type configured and an associated policy index
mapped.
mapped.
The policy index signifies which policy needs to be matched first.
The corresponding policy name will be deduced from the policy Index.
The policy matching will exit at the first policy match and the corresponding policy action attributes will be set per
client.
client.
The order of applying the policies per client will be based on the security type.