Filter
Top Products
l
role-name
with the name you want to identify the voice user role.
l service-name with any of the service names from Table 285.
Using the User-Derivation Roles
The user role can be derived from attributes from the client’s association with an AP. For VoIP phones, you can
configure the devices to be placed in their user role based on the SSID or the Organizational Unit Identifier (OUI)
of the client’s MAC address.
NOTE: User-derivation rules are executed
before
the client is authenticated.
Using the WebUI to derive the role based on SSID
1. Navigate to the Configuration > Security > Authentication > User Rules page.
2. Click Add to add a new set of derivation rules. Enter a name for the set of rules, and click Add. The name
appears in the User Rules Summary list.
3. In the User Rules Summary list, select the name of the rule set to configure rules.
4. Click Add to add a rule. For Set Type, select Role from the drop-down menu.
5. For Rule Type, select ESSID.
6. For Condition, select equals.
7. For Value, enter the SSID used for the phones.
8. For Roles, select the user role you previously created.
9. Click Add.
10. Click Apply.
Using the CLI to derive the role based on SSID
aaa derivation-rules user name
set role condition essid equals ssid set-value role
Using the WebUI to derive the role based on MAC OUI
1. Navigate to the Configuration > Security > Authentication > User Rules page.
2. Click Add to add a new set of derivation rules. Enter a name for the set of rules, and click Add. The name
appears in the User Rules Summary list.
3. In the User Rules Summary list, select the name of the rule set to configure rules.
4. Click Add to add a rule. For Set Type, select Role from the drop-down menu.
5. For Rule Type, select MAC Address.
6. For Condition, select contains.
7. For Value, enter the first three octets (the OUI) of the MAC address of the phones (for example, the Spectralink
OUI is 00:09:7a).
8. For Roles, select the user role you previously created.
9. Click Add.
10. Click Apply.
Using the CLI to derive the role based on MAC OUI
aaa derivation-rules user name
set role condition macaddr contains xx:xx:xx set-value role
DellPowerConnectW-SeriesArubaOS6.2 | User Guide Voiceand Video | 686