Access Classification

The Unified Profile Access Classification Screen displays all Access Classification Rules configured for Access Role Profiles and is used to create edit, and and delete Access Classification Rules (Access Classification Rules in AOS Devices. Access Classification Rules are defined and associated with an Access Role Profile to provide an additional method for classifying a device into an Access Role Profile. If authentication is not available or does not return a profile name for whatever reason, Access Classification rules are applied to determine the profile assignment.

Creating an Access Classification Rule

Click on the Create icon. Select a Rule Type from the drop-down menu. Configure the Rule as described below, select the Access Role Profile for which you want to configure the rule, then click on the Create button. When you are finished, click on the Apply to Devices button to assign the Rule to switches/ports on the network.

Access Classification Rules

Editing an Access Classification Rule

Select the profile in the Classification Profile List and click on the Edit icon to bring up the Edit Access Classification Screen. Edit the fields as described above then click on the Apply button to save the changes to the server. Note that if the Access Role Profile has been applied to any devices, you will have to re-apply the profile to those devices. You can also go to the Device Config - Access Classification Screen to edit a profile on any device.

Note: You cannot edit an Access Classification Rule Name.

Assigning an Access Classification Rule

When you click the Apply To Devices button, the Access Classification Assignments Screen appears. Select a Mapping Method, then select devices. When you are finished, click on the Apply button. Note that a VLAN must exist on a switch/wireless devices to configure VLAN Mapping.

Select Mapping Methods

You can map the Access Classification Rule to a specific VLAN or service. Select a Mapping Method, then make a selection from the drop-down menu. Note that you can only use one mapping method for a profile.

Select Devices

After configuring the Mapping Method, click on the Devices ADD button and/or the AP Group ADD button to select devices. The device(s) will appear in the List of Selected Devices. If necessary, click on the Devices EDIT button and/or the AP Group EDIT button to add/remove devices from the list.

The devices presented will vary according to your Mapping Method. For example, if you selected VLAN Number 3, only those devices on which VLAN 3 is configured would be displayed. After selecting devices, click on the Apply button to assign the Access Classification Rule.

Deleting an Access Classification Rule

To delete a rule(s), select the Rule(s) in the table and click on the Delete icon, then click OK at the confirmation prompt. This removes the profile from the server. If the profile has been assigned to any devices, go to the Device Config - Access Classification Screen to remove the profile from the device(s). Select the applicable device(s) in the Devices - Classification Profile List, click on the Delete icon, then click OK at the confirmation prompt.