User's Guide
Table Of Contents
- Table of Contents
- Preface
- Welcome to Extreme Campus Controller
- Dashboard
- Monitor
- Sites List
- Device List
- Access Points List
- Smart RF Widgets
- Switches List
- Networks List
- Clients
- Policy
- Configure
- Network Configuration Steps
- Sites
- Add a Site
- Modifying Site Configuration
- Site Location
- Adding Device Groups to a Site
- Add or Edit a Configuration Profile
- Associated Profiles
- Associated Networks
- Mesh Point Profile Configuration
- Configure Client Bridge
- Understand Radio Mode
- Radio as a Sensor
- Advanced AP Radio Settings
- VLAN Profile Settings
- AirDefense Profile Settings
- ExtremeLocation Profile Settings
- IoT Profile Settings
- Positioning Profile Settings
- Analytics Profile Settings
- RTLS Settings
- Advanced Configuration Profile Settings
- Configuring RF Management
- Configuring a Floor Plan
- Advanced Tab
- Devices
- Networks
- Policy
- Automatic Adoption
- ExtremeGuest Integration
- AAA RADIUS Authentication
- Onboard
- Onboard AAA Authentication
- Manage Captive Portal
- Manage Access Control Groups
- Access Control Rules
- Tools
- Administration
- System Configuration
- Manage Administrator Accounts
- Extreme Campus Controller Applications
- Product License
- Glossary
- Index
5. Configure the rule parameters.
The following is an example of a DNS-based Layer 3 rule that allows access through Facebook.
Figure 71: Layer 3 Rule
Each application site requires specific rules to access their site domains. Table 66 lists the rule
configuration parameters needed for each application site.
Note
The domain information for each application site is subject to change. Refer to specific
application site documentation if necessary.
Table 66: FQDN Rules Required for Social Logins
Application Site Rule Parameters
Facebook • Allow FQDN to facebook.com, port HTTPS
• Allow FQDN to fbcdn.net, port HTTPS
Google • Allow FQDN to accounts.google.com, port HTTPS
Microsoft • Allow FQDN to login.live.com, port HTTPS
• Allow FQDN to gfx.ms, port HTTPS
• Allow FQDN to akadns6.net, port HTTPS
Salesforce • Allow FQDN to login.salesforce.com
• Allow FQDN to sfdcstatic.com
Yahoo • Allow FQDN to login.yahoo.com, port HTTPS
• Allow FQDN to yimg.com, port HTTPS
Related Topics
Walled Garden Rules on page 251
Configuring L2 Rules on page 262
Configuring L3, L4 Rules on page 263
Configure
Captive Portal Settings
Extreme Campus Controller User Guide for version 5.46.03 253