Filter
Top Products
set location policy 257
inacl inacl-name — Name of an existing security ACL to apply to
packets sent to the WX with attributes matching the location policy
rule.
Optionally, you can add the suffix .in to the name.
outacl outacl-name — Name of an existing security ACL to apply to
packets sent from the WX with attributes matching the location policy
rule.
Optionally, you can add the suffix .out to the name.
Condition options — MSS takes the action specified by the rule if
all conditions in the rule are met. You can specify one or more of the
following conditions:
ssid operator ssid-name — SSID with which the user is associated.
The operator must be eq, which applies the location policy rule to all
users associated with the SSID. Asterisks (wildcards) are not supported
in SSID names. You must specify the complete SSID name.
vlan operator vlan-glob — VLAN-Name attribute assigned by AAA
and condition that determines if the location policy rule applies.
Replace operator with one of the following operands:
eq — Applies the location policy rule to all users assigned VLAN
names matching vlan-glob.
neq — Applies the location policy rule to all users assigned VLAN
names not matching vlan-glob.
For vlan-glob, specify a VLAN name, use the double-asterisk wildcard
character (**) to specify all VLAN names, or use the single-asterisk
wildcard character (*) to specify a set of VLAN names up to or
following the first delimiter character, either an at sign (@) or a period
(.). (For details, see “VLAN Globs” on page 32.)
user operator user-glob — Username and condition that
determines if the location policy rule applies. Replace operator with
one of the following operands:
eq — Applies the location policy rule to all usernames matching
user-glob.
neq — Applies the location policy rule to all usernames not
matching user-glob.