Specifications

11-106 Access Point Commands
set service-profile soda enforce-checks
Specifieswhetheraclientisallowedaccesstothenetworkafterithasdownloadedandrunthe
SODAagentsecuritychecks.
Syntax
set service-profile name enforce-checks {enable | disable}
Parameters
Defaults
Bydefault,SODAagentchecksareperformedbeforetheclientisallowedaccesstothenetwork.
Mode
Enabled
Usage
WhentheSODAagentisenabledinaserviceprofile,by default theSODAagentchecksare
downloadedtoaclientandrunbeforetheclientisallowedonthenetwork.Youcanusethis
commandtodisabletheenforcementoftheSODAsecuritychecks,sothattheclientisallowed
accesstothenetworkimmediatelyaftertheSODAagentisdownloaded,ratherthanwaitingfor
thesecuritycheckstobe run.
Whentheenforcechecksoptionisenabled,uponsuccessfulcompletionoftheSODAagent
checks,theclientperformsanHTTPGetoperationtoloadthesuccesspage.Uponloadingthe
successpage,theclientisgrantedaccesstothenetwork.
Inorderfor theclienttoloadthesuccesspage,youmustmakesuretheSODAagentisconfigured
(throughSODAManager)withthecorrectURLofthesuccesspage,sothattheRoamAbout
Switchcanservethepagetothe
client.
Similarly,youmustmakesuretheSODAagentisconfiguredwiththecorrectURLsofthefailure
andlogoutpages,sothatwhentheclientrequeststhesepages,theRoamAbout
SwitchRoamAboutSwitchcanservethosepagesaswell.
Example
Thefollowingcommandallowsnetworkaccesstoclientsaftertheyhavedownloadedthe SODA
agent,butwithoutrequiringthattheSODAagentchecksbecompleted:
RBT-8100# set service-profile sp1 enforce-checks disable
success: change accepted.
name Serviceprofilename.
enable SODAagentchecksareperformedbeforetheclientisallowedaccessto
thenetwork.
disable AllowstheclientaccesstothenetworkimmediatelyaftertheSODA
agentisdownloaded,withoutwaitingforthecheckstoberun.