Configuring Device Access Policies - Ruckus Wireless ZoneDirector 1100 User Manual

Configuring Device Access Policies

In response to the growing trend of employees and students bringing their personally owned
devices into the network, IT departments are requiring more sophisticated control over how
devices connect, what types of devices can connect, and what they are allowed to do once
connected.
Using the Device Access Policy settings, ZoneDirector can identify the type of client device
attempting to connect and perform control actions such as permit/deny, rate limiting and VLAN
tagging based on client type.
Once a Device Access Policy has been created, you can apply the policy to any WLANs for
which you want to control access by device type.
To create a Device Access Policy
1. Go to Configure > Access Control.
2. In the Device Access Policy section, click Create New.
3. Enter a Name and optionally a description for the access policy.
4. In Default Mode, select Deny all by default or Allow all by default.
5. In Rules, you can create multiple OS-specific rules for each access policy.
• Description: Description of the rule.
• OS/Type: Select from any of the supported client types.
• Type: Select rule type (allow or deny)
• Uplink/Downlink: Set rate limiting for this client type.
• VLAN: Segment this client type into a specified VLAN (1~4094; if no value entered, this
policy does not impact device VLAN assignment).
6. Click Save to save the rule you created. You can create up to nine rules per access policy
(one for each OS/Type).
7. To change the order in which rules are implemented, click the up or down arrows in the
Action column. You can also Edit or Clone rules from the Action column. To delete a rule,
select the box next to the rule and click Delete.
8. Click OK to save the access policy. You can create up to 32 access policies (one access
policy per WLAN).
Configuring Security and Other Services
Configuring Device Access Policies
85