OmniSwitch AOS Release 7 Network Configuration Guide June 2013 page 27-1
27 Configuring Universal
Network Profiles
The Universal Network Profile (UNP) feature provides network administrators with the ability to define
and apply network access control to specific types of devices by grouping such devices according to
specific matching profile criteria. This allows network administrators to create virtual machine network
profiles (vNPs) and user network profiles from a unified framework of operation and administration.
UNP is not limited to creating profiles for only certain types of devices. However, the following classifica-
tion methods implemented through UNP functionality and profile criteria provide the ability to tailor
profiles for specific devices (physical or virtual):
• MAC-based authentication using a RADIUS-capable server. A profile name is returned upon success-
ful authentication.
• Switch-wide classification rules to classify on source MAC or IP address (no authentication required).
• VLAN tag classification to create VLAN port associations or device MAC address associations with
Shortest Path Bridging (SPB) services based on the VLAN ID contained in device packets.
• Default profile classification for untagged traffic or traffic not classified through other methods.
Basically, UNP functionality is used to define profile-based VLANs or SPB service access points (SAPs)
to which network devices are assigned. The profile can allow, deny, or require actions by users or
machines on the network. Because membership to a VLAN or service is based on UNP profile criteria,
devices assigned to the VLAN or service are not tied to a specific port or switch. This flexibility allows
device mobility within the network while maintaining network security.
In This Chapter
This chapter provides an overview of the UNP feature and describes how to configure the port-based func-
tionality and profile attributes through the Command Line Interface (CLI). CLI commands are used in the
configuration examples; for more details about the syntax of commands, see the OmniSwitch CLI Refer-
ence Guide.
The following information and procedures are included in this chapter:
• “Quick Steps for Configuring UNP” on page 27-4
• “UNP Overview” on page 27-9.
• “Interaction With Other Features” on page 27-23.
• “Configuring UNP Port-Based Access Control” on page 27-28.
• “Configuring Profiles” on page 27-33.
To Next Page
Loading...
Need help?
General