Enterasys SECURESTACK C3, Configuration Manual

Page: 801 / 872

set policy maptable
SecureStack C3 Configuration Guide 26-55
Defaults
If no VLAN list is specified, all entries in the VLAN ‐ to ‐ policy mapping table are displayed.
Mode
Switch command, read ‐ only.
Usage
This command displays both the policy maptable response setting, and the entries in the VLAN ‐
to ‐ policy mapping table for one or multiple VLANs. Refer to “ Operational Description ” on
page 26 ‐ 53 for information about how the VLAN ‐ to ‐ policy mapping table is used.
Example
This example shows how to display the policy maptable response and all the entries in the VLAN ‐
to ‐ policy mapping table. In this example, hybrid authentication mode is enabled (because the
policy maptable response is both ).
C3(rw)->show policy maptable
Policy map response : both
Policy map last change : 1 days 00:23:57
VLAN ID Policy Profile
144 4 (Students)
160 7 (Faculty)
set policy maptable
Use this command to configure the VLAN ‐ to ‐ policy mapping table and also the switch’s maptable
response setting— that is, whether the switch is in tunnel mode, policy mode, or hybrid
authentication mode.
Syntax
set policy maptable { vlan-list policy-index | response { both | policy | tunnel }}
Parameters
vlan ‐ list policy ‐ index Specifies an entry in the VLAN ‐ to ‐ policy mapping table, which relates a
policy profile with a VLAN ID or range of IDs. vlan ‐ list can range from 1
to 4093. policy ‐ index can range from 1 to 1023.
response Indicates that this command is configuring the policy maptable
response.
both Sets the maptable response to look at both the Filter ‐ ID and tunnel
attributes in a RADIUS Access ‐ Accept reply to determine how to
handle an authenticating user. This is equivalent to enabling hybrid
authentication mode.
policy Sets the maptable response to policy mode. The system will look at only
the Filter ‐ ID attributes in a RADIUS Access ‐ Accept reply to determine
how to handle an authenticating user.
tunnel Sets the maptable response to tunnel mode. The system will look at
only the tunnel attributes in a RADIUS Access ‐ Accept reply to
determine how to handle an authenticating user.