Creating an Adaptive Policy
You can use an Adaptive Policy with RADIUS or DPSK to authenticate clients. Clients that meet all the conditions defined in the Adaptive Policy will be able to connect. Enable the Adaptive Policy from the DPSK services. For information on how to add a DPSK network, refer to Adding a DPSK Network.
Complete the following steps to create an Adaptive Policy:
-
From the navigation bar, select Network Control > Policies &
Profiles.
The Policies & Profiles page is displayed.
-
Click Adaptive
Policy.
The Adaptive Policy page is displayed. By default, the Adaptive Policy tab is displayed. The Adaptive Policy page has the following tabs:
- RADIUS Attribute Groups: Displays the list of RADIUS attribute groups.
- Adaptive Policy: Displays the list of adaptive policies.
- Adaptive Policy Sets: Displays the list of adaptive policy sets.
-
In the upper right-hand corner of the Adaptive Policy
page, click Add
Policy.
The Add Adaptive Policy page is displayed.
-
Complete the following fields to
configure and add Adaptive Policy:
- Profile Name: Enter the name for the Adaptive Policy.
- Policy Type: Select RADIUS or DPSK.
- Access
Conditions: Complete the following steps to configure a
client access condition. You may add more than one condition.
- Click Add. The Add Access Condition dialog box is displayed.
- Complete the
following fields:
- Condition Type: Select a condition type from the drop-down.
- Condition Value: Enter the condition value.
- Click Add.
- RADIUS
Attribute Group: The configured RADIUS attributes are
applied to the clients when this policy is matched. Complete the
following steps to select or configure the RADIUS Attribute group.
- Click Select Group. The Select RADIUS Attribute Group sidebar is displayed.
- Select the RADIUS Attributes Group from the table or click Add Group to create a new RADIUS Attribute Group. The Add RADIUS Attribute Group sidebar is displayed.
- In the
Add RADIUS Attribute Group page,
complete the following fields:
- Group Name: Enter the name for the RADIUS Attribute Group.
- RADIUS Attributes: These
attributes will be returned when a client connects.
Complete the following steps to add a RADIUS
Attributes:
- Click Add. The Add RADIUS Attribute dialog box is displayed.
- In the Attribute Type section, select the attribute type from the first drop-down (Common Attributes, Foundry, Ruckus, WISPr, or General), then select the specific attribute name from the second drop-down. The list of attribute names differs depending upon the selected attribute type.
- The Condition Value comprises two fields, an action and a value. For the action field, select from Add (Multiple), Add or Replace (Single), or Add if it Doesn't Exist and then enter a valid number in the second field.
- Click Add to add the configured RADIUS attribute to the RADIUS Attributes table.
- Click Add to add the configured RADIUS attribute group to the RADIUS Attribute Group table.
- Click the radio button beside the RADIUS Attribute Group name, then click the Select. The sidebar disappears and the selected RADIUS Attribute Group appears on the Add Adaptive Policy page.
-
Click
Apply.
The Adaptive Policy is created and is displayed in the Adaptive Policy tab, and the created RADIUS Attribute Group is displayed in the RADIUS Attribute Groups tab.
-
(Optional) Complete the
following steps to create a new RADIUS Attribute
Group.
-
In the RADIUS Attribute
Groups page, select the RADIUS Attribute
Groups tab and click Add
Group.
The Add RADIUS Attribute Group page is displayed.
-
In the Add
RADIUS Attributes Group page, complete the
following:
- Group Name: Enter a group name.
- RADIUS Attributes: Configure the RADIUS attributes. These attributes are returned when a client connects. Click Add to access the Add RADIUS Attribute sidebar.
-
In the Add RADIUS
Attribute sidebar, complete the following:
- In the Attribute
Type section, select the attribute type from the first drop-down
(Common Attributes,
Foundry, Ruckus,
WISPr, or
General), then select the specific
attribute name from the second drop-down. The list of attribute
names differs depending upon the selected attribute type.Note: Foundry, Ruckus, and Wireless Internet Service Provider (WISPr) attributes are vendor-specific. Interpretation and usage of these attributes depend on the specific hardware implementation (Access Points, Switches) rather than the RADIUS server. Refer to the documentation of your network hardware (APs, Switches) for detailed instructions on how to configure and utilize these attributes.
- The Condition Value comprises two fields, an action and a value. For the action field, select from Add (Multiple), Add or Replace (Single), or Add if it Doesn't Exist and then enter a valid number in the second field.
- In the Attribute
Type section, select the attribute type from the first drop-down
(Common Attributes,
Foundry, Ruckus,
WISPr, or
General), then select the specific
attribute name from the second drop-down. The list of attribute
names differs depending upon the selected attribute type.
-
Click Apply.
The newly created RADIUS Attribute Group is displayed in the table and is available for selection when creating or editing an Adaptive Policy.
-
In the RADIUS Attribute
Groups page, select the RADIUS Attribute
Groups tab and click Add
Group.
-
(Optional) Complete the
following steps to create the Adaptive Policy Set.
You can curate multiple Adaptive Policies into a single Adaptive Policy Set, creating a superset of authentication rules. The credentials of the connecting device will be verified against the complete set of authentication rules. If the device matches all of the rules, it will be connected.
-
Select the
Adaptive Policy Sets tab and click Add
Sets.
The Add Adaptive Policy Set page is displayed.
- Enter the name for the Adaptive Policy Set.
-
Complete the following
steps to select the access policies:
- Click Select Policies. The Select Access Policies dialog box is displayed.
- Use the toggle to select the desired policies. Click Add Policy to create a new policy.
- Click Add.
The list of selected policies appears in the Add Adaptive Policy Set table. When multiple policy sets exist, you can reorder them using the = icon to control the order in which the authentication policies are applied.
- Click Apply.
The Adaptive Policy Set is added and appears in the Adaptive Policy Sets table.
-
Select the
Adaptive Policy Sets tab and click Add
Sets.