Owners manual

198 | Roles and Policies Aruba Instant 6.4.0.2-4.1 | User Guide
l To configure VLAN derivation rule for a WLAN SSID profile, Click Network > New > New WLAN > VLAN or
Network > edit > Edit <WLAN-profile> > VLAN. Select the Dynamic option under the Client VLAN
assignment.
l To configure VLAN derivation rule for a wired network profile, click Wired > New > New Wired Network >
VLAN or Wired > Edit > Edit Wired Network > VLAN.
2. Click New to create a VLAN assignment rule. The New VLAN Assignment Rule window is displayed. In this
window, you can define a match method by which the string in Operand is matched with the attribute values
returned by the authentication server.
Figure 60 VLAN Assignment Rule Window
3. Select the attribute from the Attribute drop-down list. The list of supported attributes includes RADIUS
attributes, dhcp-option, dot1x-authentication-type, mac-address, and mac-address-and-dhcp-options. For
information on a list of RADIUS attributes, see RADIUS Server Authentication with VSA on page 151.
4. Select the operator from the Operator drop-down list. The following types of operators are supported:
l contains— The rule is applied only if the attribute value contains the string specified in Operand .
l equals— The rule is applied only if the attribute value is equal to the string specified in Operand .
l not-equals — The rule is applied only if the attribute value is not equal to the string specified in Operand .
l starts-with — The rule is applied only if the attribute value starts with the string specified in Operand .
l ends-with — The rule is applied only if the attribute value ends with string specified in Operand .
l matches-regular-expression — The rule is applied only if the attribute value matches the regular expression
pattern specified in Operand . This operator is available only if the mac-address-and-dhcp-options attribute
is selected in the Attribute drop-down. The mac-address-and-dhcp-options attribute and matches-
regular-expression are applicable only for the WLAN clients.
5. Enter the string to match in the String field.
6. Select the appropriate VLANID from the VLAN drop-down list.
7. Click OK.
8. Ensure that all other required parameters are configured.
9. Click Finish to apply the changes.
In the CLI
To create a VLAN assignment rule for WLAN SSID:
(Instant AP)(config)# wlan ssid-profile <name>
(Instant AP)(SSID Profile <name>)# set-vlan <attribute>{equals|not-equals|starts-with|ends-
with|contains|matches-regular-expression}<operator><VLAN-ID>|value-of}
(Instant AP)(SSID Profile <name>)# end
(Instant AP)# commit apply