Specifications
Configuring SODA Functionality
RoamAbout Mobility System Software Configuration Guide 20-9
Thefollowingcommandspecifiesfailure.html,inthesoda ‐filesdirectoryontheRoamAboutSwitch,
asthepagetoloadwhenaclientfailstheSODAagentchecks:
RBT-8100# set service-profile sp1 soda failure-page soda-files/failure.html
success: change accepted.
Specifying a Remediation ACL
IftheSODAagentchecksfailonaclient,bydefaulttheclientisdisconnectedfromthenetwork.
Optionally,youcanspecifyafailurepagefor theclienttoload(withthesetservice‐profilesoda
failure‐pagecommand,describedabove).YoucanoptionallyspecifyaremediationACLtoapplyto
theclientwhenthefailurepageisloaded.TheremediationACLcanbeusedtogrant theclient
limitedaccesstonetworkresources,forexample.
TospecifyaremediationACLtobeappliedtoaclientifitfailsthechecksperformedbytheSODA
agent,usethefollowingcommand:
set service-profile name soda remediation-acl acl-name
TodisableuseoftheremediationACLfortheserviceprofile,usethefollowingcommand:
clear service-profile name soda remediation-acl
Theacl‐namereferstoanexistingsecurityACL.IfthereisnoremediationACLconfiguredforthe
serviceprofile,thentheclientisdisconnectedfromthenetworkwhenthefailurepageisloaded.
Ifconfigured,aremediationACLisappliedtoaclientwhentheclientloadsthefailurepage.
A
clientloadsthefailurepageonlyiftheserviceprofileissettoenforceSODAagentchecks,and the
clientfailstheSODAagentchecks.Consequently,inordertoapplyaremediationACLtoaclient,
youmustmakesuretheserviceprofileissettoenforceSODAagent
checks.
Example
ThefollowingcommandconfigurestheRoamA boutSwitchtoapplyacl‐1toaclientwhenitloads
thefailurepage:
RBT-8100# set service-profile sp1 soda remediation-acl acl-1
success: change accepted.
Specifying a SODA Agent Logout Page
WhenaclientclosestheSODAvirtualdesktop,theclientisautomaticallydisconnectedfromthe
network.Youcanoptionallyspecifyapagethatisloadedwhentheclientlogsoutofthenetwork.
Todothis,usethefollowingcommand:
set service-profile name soda logout-page page
Toresetthelogoutpagetothedefaultvalue,usethefollowingcommand:
clear service-profile name soda logout-page
ThepagereferstoafileontheRoamAboutSwitch.
YoumustalsoenabletheHTTPSserverontheRoamAboutSwitch,sothatclientscanlog outof
thenetworkandaccessthelogoutpageusingHTTPS.Todothis,usethefollowingcommand:
set ip https server enable