Roles and Policies
15.4 Configuring Derivation Rules
SCALANCE W1750D UI
272
Configuration Manual, 02/2018, C79000-G8976-C451-02
5.
Select the operator from the Operator drop-down list. The following types of operators are
supported:
–
contains—The rule is applied only if the attribute value contains the string specified in
Operand
.
–
Is the role—The rule is applied if the attribute value is the role.
–
equals—The rule is applied only if the attribute value is equal to the string specified in
Operand
.
–
not-equals—The rule is applied only if the attribute value is not equal to the string
specified in
Operand
.
–
starts-with—The rule is applied only if the attribute value starts with the string specified
in
Operand
.
–
ends-with—The rule is applied only if the attribute value ends with the string specified
in
Operand
.
–
matches-regular-expression—The rule is applied only if the attribute value matches
the regular expression pattern specified in
Operand
. This operator is available only if
the mac-address-and-dhcp- options attribute is selected in the Attribute drop-down list.
The mac-address-and-dhcp-options attribute and matches-regular-expression are
applicable only for the WLAN clients.
6.
Enter the string to match the attribute in the String text box.
7.
Select the appropriate role from the Role drop-down list.
●
Click OK
Note
When Enforce Machine Authentication is enabled, both the device and the user must be
authenticated for the role assignment rule to apply.
In the CLI
To configure role assignment rules for a WLAN SSID:
(scalance)(config)# wlan ssid-profile <name>
(scalance)(SSID Profile <name>)# set-role <attribute>{{equals|not-equals|starts-
with|ends- with|contains|matches-regular-expression} <operator><role>|value-of}
(scalance)(SSID Profile <name>)# end (scalance)# commit apply
To configure role assignment rules for a wired profile:
(scalance)(config)# wired-port-profile <name>
(scalance)
(wired ap profile <name>)# set-role <attribute>{{equals|not-equal|starts-
with| ends-with|contains}<operator> <role>|value-of}
(scalance)(wired ap profile <name>)# end (scalance)# commit apply
