Siemens SCALANCE W1750D UI

Roles and Policies
15.4 Configuring Derivation Rules
SCALANCE W1750D UI
272 Configuration Manual, 02/2018, C79000-G8976-C451-02
5. Select the operator from the
Operator
drop-down list. The following types of operators are
supported:
–
contains
—The rule is applied only if the attribute value contains the string specified in
Operand .
–
Is the role
—The rule is applied if the attribute value is the role.
–
equals
—The rule is applied only if the attribute value is equal to the string specified in
Operand .
–
not-equals
—The rule is applied only if the attribute value is not equal to the string
specified in
Operand .
–
starts-with
—The rule is applied only if the attribute value starts with the string specified
in
Operand .
–
ends-with
—The rule is applied only if the attribute value ends with the string specified
in
Operand .
–
matches-regular-expression
—The rule is applied only if the attribute value matches
the regular expression pattern specified in
Operand . This operator is available only if
the
mac-address-and-dhcp- options
attribute is selected in the
Attribute
drop-down list.
The
mac-address-and-dhcp-options
attribute and
matches-regular-expression
are
applicable only for the WLAN clients.
6. Enter the string to match the attribute in the
String
text box.
7. Select the appropriate role from the
Role
drop-down list.
● Click
OK
Note
When Enforce Machine Authentication
is enabled, both the device and the user must be
authenticated for the role assignment rule to apply.
In the CLI
To configure role assignment rules for a WLAN SSID:
(scalance)(config)# wlan ssid-profile <name>
(scalance)(SSID Profile <name>)# set-role <attribute>{{equals|not-equals|starts-
with|ends- with|contains|matches-regular-expression} <operator><role>|value-of}
(scalance)(SSID Profile <name>)# end (scalance)# commit apply
To configure role assignment rules for a wired profile:
(scalance)(config)# wired-port-profile <name>
(scalance)
(wired ap profile <name>)# set-role <attribute>{{equals|not-equal|starts-
with| ends-with|contains}<operator> <role>|value-of}
(scalance)(wired ap profile <name>)# end (scalance)# commit apply