6.7 Mesh QoS Policy .........................................................................................................................................................6-93

6.8 Passpoint Policy ........................................................................................................................................................6-100

Chapter 7, Network Configuration

7.1 Policy Based Routing (PBR) ...........................................................................................................................................7-2

7.2 L2TP V3 Configuration ..................................................................................................................................................7-8

7.3 Crypto CMP Policy ......................................................................................................................................................7-12

7.4 AAA Policy ..................................................................................................................................................................7-15

7.5 AAA TACACS Policy ...................................................................................................................................................7-26

7.6 Alias ............................................................................................................................................................................7-42

7.6.1 Network Basic Alias .........................................................................................................................................7-42

7.6.2 Network Group Alias ........................................................................................................................................7-45

7.6.3 Network Service Alias ......................................................................................................................................7-48

7.7 IPv6 Router Advertisement Policy ..............................................................................................................................7-50

7.8 Network Deployment Considerations ........................................................................................................................7-54

Chapter 8, Security Configuration

8.1 Wireless Firewall ..........................................................................................................................................................8-2

8.1.1 Defining a Firewall Configuration .......................................................................................................................8-2

8.2 Configuring IP Firewall Rules .....................................................................................................................................8-16

8.2.1 Setting an IPv4 or IPv6 Firewall Policy .............................................................................................................8-16

8.2.2 Setting an IP SNMP ACL Policy ........................................................................................................................8-20

8.3 Device Fingerprinting ..................................................................................................................................................8-23

8.4 Configuring MAC Firewall Rules ................................................................................................................................8-30

8.5 Wireless IPS (WIPS) ...................................................................................................................................................8-33

8.6 Device Categorization .................................................................................................................................................8-43

8.7 Security Deployment Considerations .........................................................................................................................8-45

Chapter 9, Services Configuration

9.1 Configuring Captive Portal Policies ..............................................................................................................................9-2

9.1.1 Configuring a Captive Portal Policy ....................................................................................................................9-2

9.2 Setting the DNS Whitelist Configuration ...................................................................................................................9-13

9.3 Setting the DHCP Server Configuration .....................................................................................................................9-14

9.3.1 Defining DHCP Pools .........................................................................................................................................9-14

9.3.2 Defining DHCP Server Global Settings .............................................................................................................9-22

9.3.3 DHCP Class Policy Configuration ......................................................................................................................9-24

9.3.4 DHCP Deployment Considerations ...................................................................................................................9-26

9.4 Setting the Bonjour Gateway Configuration ..............................................................................................................9-27

9.4.1 Configuring the Bonjour Discovery Policy .........................................................................................................9-27

9.4.2 Configuring the Bonjour Forwarding Policy ......................................................................................................9-29

9.5 Setting the DHCPv6 Server Policy ..............................................................................................................................9-32

9.5.1 Defining DHCPv6 Options .................................................................................................................................9-33

9.5.2 DHCPv6 Pool Configuration ..............................................................................................................................9-34

9.6 Setting the RADIUS Configuration .............................................................................................................................9-38

Table of Contents