OmniSwitch os6900, Network Configuration Manual, Page: 727 / 942

Configuring Universal Network Profiles UNP Configuration Overview
OmniSwitch AOS Release 7 Network Configuration Guide June 2013 page 27-27
UNP Configuration Overview
There is no overall switch setting to invoke the UNP feature. Instead, UNP is enabled on individual switch
ports and profiles are created with specific attributes to determine which UNP is applied to specific traffic
received on that port.
Configuring the UNP feature consists of both profile-based and port-based configuration tasks. The tasks
associated with configuring the profiles are global tasks that apply to all UNPs on the switch. The port-
based tasks enable UNP functionality on individual ports. By default, UNP is disabled on all ports even if
profiles exist in the switch configuration.
Profile Configuration Tasks
•
Create a VLAN-based or service-based classification profile. See “Configuring Profiles” on
page 27-33 .
•
Optionally assign a QoS policy list to the profile. See “Configuring QoS Policy Lists” on page 27-37 .
•
Optionally configure classification rules for the profile. When classification is enabled on a UNP port,
these rules are applied to traffic received on the port to determine which UNP is applied to the traffic.
See
“Enabling Dynamic VLAN Profile Configuration” on page 27-35 .
•
Enable or disable dynamic VLAN configuration of the VLANs associated with a VLAN classification-
profile. The status of dynamic VLAN configuration is applied to all VLAN profiles. See
“Enabling
Dynamic VLAN Configuration” on page 27-38 .
•
Enable or disable dynamic configuration of VLAN classification profiles. A dynamic profile is created
only when specific traffic conditions occur on UNP bridge ports. See
“Enabling Dynamic VLAN
Profile Configuration” on page 27-35 .
•
Define a temporary UNP to which devices classified on UNP bridge ports are assigned in the event the
authentication server is down or unreachable. A configurable timer is also available to specify how
long a device remains in this temporary UNP. See
“Configuring an Authentication Server Down UNP”
on page 27-40 .
Port Configuration Tasks
•
Enable or disable UNP functionality on one or more switch ports. When UNP is enabled for a port,
traffic received on that port is then subject to the UNP authentication and classification configuration.
See
“Configuring UNP Port-Based Access Control” on page 27-28 .
•
Enable or disable MAC-based authentication. If MAC authentication is disabled, then classification
rules are applied. See
“Enabling MAC Authentication” on page 27-29 .
•
Specify an alternate pass UNP. When MAC authentication is successful but the RADIUS server does
not return a UNP name, the alternate pass UNP is applied to the traffic. See
“Configuring an Alternate
Pass UNP” on page 27-30 .
•
Enable or disable classification for the UNP port. When classification is enabled, UNP rules are
applied to device traffic if authentication fails or is not available. See
“Enabling Classification” on
page 27-30 .
•
Configure a default UNP for the UNP port. The default UNP is applied to traffic when other classifica-
tion methods do not provide a profile name. See
“Configuring a Default UNP” on page 27-31 .