Configuring Access Guardian Configuring Port-Based Network Access Control
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 28-54
To verify the UNP profile configuration for the switch, use the show unp profile command. For example:
-> show unp profile guest
Profile Name: guest
Qos Policy = qlist1,
Location Policy = loclist1,
Period Policy = timelist1,
CP Profile = guest-profile,
CP State = Ena,
Authen Flag = Dis,
Mobile Tag = Dis,
SAA Profile = -,
Ingress BW = -,
Egress BW = -,
Ingress Depth = -,
Egress Depth = -,
Inact Interval = 10
For more information about the commands described in this section, see the “Access Guardian
Commands” chapter in the OmniSwitch AOS Release 8 CLI Reference Guide.
Configuring the UNP Profile Mapping
In addition to profile attributes, each profile is mapped to either a VLAN ID or to service-based
parameters. The following types of services can be mapped to a UNP profile:
• Shortest Path Bridging (SPB)
• Virtual eXtensible LAN (VXLAN)
• A static service (the ID for an existing service is specified).
Only one type of profile mapping (VLAN, SPB, VXLAN, or static) is associated with a profile at any
given time. The type of mapping configured for a profile determines whether traffic received on UNP
bridge ports or on UNP access ports is eligible for assignment to that profile. For example:
• Traffic received on UNP bridge ports is eligible for assignment to a VLAN profile.
• Traffic received on UNP access ports is eligible for assignment to a service profile.
This section describes how to configure the following different types of mappings for a UNP profile:
• “Mapping a VLAN to a UNP Profile” on page 28-54.
• “Mapping Service Parameters to a UNP Profile” on page 28-58
• “Mapping a Static Service to a UNP Profile” on page 28-61
For more information about profiles, see “UNP Profiles” on page 28-16.
Mapping a VLAN to a UNP Profile
The unp profile map vlan command is used to map a VLAN ID to a UNP profile. For example, the
following command maps VLAN 400 to the “employee” profile:
-> unp profile employee map vlan 400
Devices classified into the “employee” profile are dynamically assigned to VLAN 400.
To Next Page
Loading...
