User's Manual

l role-name with the name you want to identify the voice user role
l service-name with any of the service names from Table 187
Using the User-Derivation Roles
The user role can be derived from attributes from the client’s association with an AP. For VoIP phones, you can
configure the devices to be placed in their user role based on the SSID or the Organizational Unit Identifier
(OUI) of the client’s MAC address.
User-derivation rules are executed before the client is authenticated.
Using the WebUI to Derive the Role Based on SSID
1. Navigate to the Configuration > Security > Authentication > User Rules page.
2. Click Add to add a new set of derivation rules. Enter a name for the set of rules, and click Add. The name
appears in the User Rules Summary list.
3. In the User Rules Summary list, select the name of the rule set to configure rules.
4. Click Add to add a rule. For Set Type, select Role from the drop-down menu.
5. For Rule Type, select ESSID.
6. For Condition, select equals.
7. For Value, enter the SSID used for the phones.
8. For Roles, select the user role you previously created.
9. Click Add.
10.Click Apply.
Using the CLI to Derive the Role Based on SSID
Use the following commands:
aaa derivation-rules user name
set role condition essid equals ssid set-value role
Using the WebUI to Derive the Role Based on MAC OUI
1. Navigate to the Configuration > Security > Authentication > User Rules page.
2. Click Add to add a new set of derivation rules. Enter a name for the set of rules, and click Add. The name
appears in the User Rules Summary list.
3. In the User Rules Summary list, select the name of the rule set to configure rules.
4. Click Add to add a rule. For Set Type, select Role from the drop-down menu.
5. For Rule Type, select MAC Address.
6. For Condition, select contains.
7. For Value, enter the first three octets (the OUI) of the MAC address of the phones (for example, the
Spectralink OUI is 00:09:7a).
8. For Roles, select the user role you previously created.
9. Click Add.
10.Click Apply.
Using the CLI to Derive the Role Based on MAC OUI
Use the following commands:
aaa derivation-rules user name
set role condition macaddr contains xx:xx:xx set-value role
Dell Networking W-Series ArubaOS 6.4.x | User Guide Voice and Video | 882