Users Guide

Dell PowerConnect W-Series ArubaOS 6.1 | User Guide Roles and Policies | 331
Device Identification
The device identification feature allows you to assign a user role or VLAN to a specific device type by identifying
a DHCP option and signature for that device. If you create a user rule with the DHCP-Option rule type, the first
two characters in the Value field must represent the hexadecimal value of the DHCP option that this rule should
match, while the rest of the characters in the Value field indicate the DHCP signature the rule should match. To
create a rule that matches DHCP option 12 (host name), the first two characters of the in the Value field must be
the hexadecimal value of 12, which is 0C. To create a rule that matches DHCP option 55, the first two characters
in the Value field must be the hexadecimal value of 55, which is 37.
Table 61 Conditions for a User-Derived Role or VLAN
Rule Type Condition Value
BSSID: Assign client to a role or VLAN based upon
the BSSID of AP to which client is associating.
One of the following:
 contains
 ends with
 equals
 does not equal
 starts with
MAC address (xx:xx:xx:xx:xx:xx)
DHCP-Option: Assign client to a role or VLAN based
upon the DHCP signature ID.
One of the following:
 equals
 starts with
DHCP signature ID.
NOTE: This string is not case sensitive.
DHCP-Option-77: Assign client to a role or VLAN
based upon the user class identifier returned by
DHCP server.
equals string
Encryption: Assign client to a role or VLAN based
upon the encryption type used by the client.
One of the following:
 equals
 does not equal
 Open (no encryption)
 WPA/WPA2 AES
 WPA-TKIP (static or dynamic)
 Dynamic WEP
 WPA/WPA2 AES PSK
 Static WEP
 xSec
ESSID: Assign client to a role or VLAN based upon
the ESSID to which the client is associated
One of the following:
 contains
 ends with
 equals
 does not equal
 starts with
 value of (does not take
string; attribute value
is used as role)
string
Location: Assign client to a role or VLAN based
upon the ESSID to which the client is associated
One of the following:
 equals
 does not equal
string
MAC address of the client One of the following:
 contains
 ends with
 equals
 does not equal
 starts with
MAC address (xx:xx:xx:xx:xx:xx)