Operation Manual

MP Access Point Commands
MP Access Point Commands
12 – 309
History
Introduced in MSS Version 4.2.
Usage
If the SODA agent checks fail on a client, by default the client is disconnected from the
network. Optionally, you can specify a failure page for the client to load (with the set
service-profile soda failure-page command). When the failure page is loaded, you can
optionally specify a remediation ACL to apply to the client. The remediation ACL can be used to
grant the client limited access to network resources, for example. If there is no remediation ACL
configured, then the client is disconnected from the network when the failure page is loaded.
This functionality occurs only when the enforce checks option is enabled for the service profile. The
enforce checks option is enabled by default.
Examples
The following command configures the MX to apply acl-1 to a client when it loads the
failure page:
MX# set service-profile sp1 soda remediation-acl acl-1
success: change accepted.
See Also
set service-profile soda enforce-checks on page 12-305
set service-profile soda failure-page on page 12-306
show service-profile on page 12-357
set service-profile soda success-page
Specifies a page on the MX that loads when a client passes the security checks performed by the
SODA agent.
Syntax
set service-profile profile-name soda success-page page
Defaults
By default, the MX generates a page indicating that the client passed the SODA agent
checks.
Access
Enabled.
History
Introduced in MSS Version 4.2.
Usage
Use this command to specify a custom page loaded by the client when it passes the checks
performed by the SODA agent. After this page is loaded, the client is placed in its assigned VLAN
and granted access to the network.
The page is assumed to reside in the root directory on the MX. You can optionally specify a
different directory where the page resides.
This functionality occurs only when the enforce checks option is enabled for the service profile. The
enforce checks option is enabled by default.
Examples
The following command specifies success.html, which resides in the root directory on the
MX, as the page to load when a client passes the SODA agent checks:
MX# set service-profile sp1 soda success-page success.html
success: change accepted.
The following command specifies success.html, which resides in the soda-files directory on the MX
switch, as the page to load when a client passes the SODA agent checks:
MX# set service-profile sp1 soda success-page soda-files/success.html
success: change accepted.
profile-name Service profile name.
page Page loaded if the client passes the security checks performed by the SODA
agent.