In This Chapter - OmniSwitch os6900 Network Configuration Manual

27 Configuring Universal
The Universal Network Profile (UNP) feature provides network administrators with the ability to define
and apply network access control to specific types of devices by grouping such devices according to
specific matching profile criteria. This allows network administrators to create virtual machine network
profiles (vNPs) and user network profiles from a unified framework of operation and administration.
UNP is not limited to creating profiles for only certain types of devices. However, the following classifica-
tion methods implemented through UNP functionality and profile criteria provide the ability to tailor
profiles for specific devices (physical or virtual):
•
MAC-based authentication using a RADIUS-capable server. A profile name is returned upon success-
ful authentication.
•
Switch-wide classification rules to classify on source MAC or IP address (no authentication required).
•
VLAN tag classification to create VLAN port associations or device MAC address associations with
Shortest Path Bridging (SPB) services based on the VLAN ID contained in device packets.
•
Default profile classification for untagged traffic or traffic not classified through other methods.
Basically, UNP functionality is used to define profile-based VLANs or SPB service access points (SAPs)
to which network devices are assigned. The profile can allow, deny, or require actions by users or
machines on the network. Because membership to a VLAN or service is based on UNP profile criteria,
devices assigned to the VLAN or service are not tied to a specific port or switch. This flexibility allows
device mobility within the network while maintaining network security.

In This Chapter

This chapter provides an overview of the UNP feature and describes how to configure the port-based func-
tionality and profile attributes through the Command Line Interface (CLI). CLI commands are used in the
configuration examples; for more details about the syntax of commands, see the OmniSwitch CLI Refer-
ence Guide.
The following information and procedures are included in this chapter:
•
"Quick Steps for Configuring UNP" on page 27-4
•
"UNP Overview" on page
•
"Interaction With Other Features" on page
•
"Configuring UNP Port-Based Access Control" on page
•
"Configuring Profiles" on page
OmniSwitch AOS Release 7 Network Configuration Guide
Network Profiles
27-9.
27-23.
27-33.
June 2013
27-28.
page 27-1