aaa classification-rule ip-address
Defines a User Network Profile (UNP) IP address mobile rule. If the source IP address of a device matches
the IP address defined for the rule, the specified UNP is applied to the device. UNP mobile rules are
applied using an Access Guardian Group Mobility device classification policy
aaa classification-rule ip-address ip_address [subnet_mask] user-network-profile name profile_name
aaa classification-rule no ip-address ip_address [subnet_mask]
Syntax Definitions
ip_address
subnet_mask
profile_name
Defaults
By default, the subnet mask is set to the default subnet mask value for the IP address class.
Platforms Supported
OmniSwitch 6400, 6850, 6850E, 6855, 9000E
Usage Guidelines
•
Use the no form of this command to remove the UNP mobile rule from the switch configuration.
•
To change the UNP associated with a mobile rule, enter the IP address of an existing rule but specify a
different UNP name.
•
When Group Mobility is configured as an Access Guardian device classification policy for an 802.1x
port, both UNP mobile rules and VLAN mobile rules are applied to device traffic on that port.
•
Note that UNP mobile rules take precedence over VLAN mobile rules.
Examples
-> aaa classification-rule ip-address 10.1.1.1 user-network-profile name accounting
-> aaa classification-rule ip-address 198.4.21.1 255.255.0.0 user-network-profile
name marketing
-> aaa classification-rule no ip-address 10.1.1.1
Release History
Release 6.3.4; command was introduced.
page 36-86
IP network address (e.g., 10.0.0.0, 171.15.0.0, 196.190.254.0)
Class A, B, or C subnet mask (e.g., 255.0.0.0, 255.255.0.0, or
255.255.255.0).
The name of an existing user network profile.
OmniSwitch CLI Reference Guide
AAA Commands
June 2012