Creating an Adaptive Policy

You can use an Adaptive Policy with RADIUS or DPSK to authenticate clients. Clients that meet all the conditions defined in the Adaptive Policy will be able to connect. Enable the Adaptive Policy from the DPSK services. For information on how to add a DPSK network, refer to Adding a DPSK Network.

Complete the following steps to create an Adaptive Policy:

  1. From the navigation bar, select Network Control > Policies & Profiles.
    The Policies & Profiles page is displayed.
    Policies & Profiles Page
  2. Click Adaptive Policy.
    The Adaptive Policy page is displayed. By default, the Adaptive Policy tab is displayed. The Adaptive Policy page has the following tabs:
    • RADIUS Attribute Groups: Displays the list of RADIUS attribute groups.
    • Adaptive Policy: Displays the list of adaptive policies.
    • Adaptive Policy Sets: Displays the list of adaptive policy sets.
  3. In the upper right-hand corner of the Adaptive Policy page, click Add Policy.
    The Add Adaptive Policy page is displayed.
    Adding an Adaptive Policy
  4. Complete the following fields to configure and add Adaptive Policy:
    • Profile Name: Enter the name for the Adaptive Policy.
    • Policy Type: Select RADIUS or DPSK.
    • Access Conditions: Complete the following steps to configure a client access condition. You may add more than one condition.
      1. Click Add. The Add Access Condition dialog box is displayed.
        Add Access Condition Sidebar
      2. Complete the following fields:
        • Condition Type: Select a condition type from the drop-down.
        • Condition Value: Enter the condition value.
      3. Click Add.
    • RADIUS Attribute Group: The configured RADIUS attributes are applied to the clients when this policy is matched. Complete the following steps to select or configure the RADIUS Attribute group.
      1. Click Select Group. The Select RADIUS Attribute Group sidebar is displayed.
      2. Select the RADIUS Attributes Group from the table or click Add Group to create a new RADIUS Attribute Group. The Add RADIUS Attribute Group sidebar is displayed.
      3. In the Add RADIUS Attribute Group page, complete the following fields:
        • Group Name: Enter the name for the RADIUS Attribute Group.
        • RADIUS Attributes: These attributes will be returned when a client connects. Complete the following steps to add a RADIUS Attributes:
          1. Click Add. The Add RADIUS Attribute dialog box is displayed.
            Add RADIUS Attribute Dialog Box
          2. In the Attribute Type section, select the attribute type from the first drop-down (Common Attributes, Foundry, Ruckus, WISPr, or General), then select the specific attribute name from the second drop-down. The list of attribute names differs depending upon the selected attribute type.
          3. The Condition Value comprises two fields, an action and a value. For the action field, select from Add (Multiple), Add or Replace (Single), or Add if it Doesn't Exist and then enter a valid number in the second field.
          4. Click Add to add the configured RADIUS attribute to the RADIUS Attributes table.
      4. Click Add to add the configured RADIUS attribute group to the RADIUS Attribute Group table.
      5. Click the radio button beside the RADIUS Attribute Group name, then click the Select. The sidebar disappears and the selected RADIUS Attribute Group appears on the Add Adaptive Policy page.
  5. Click Apply.
    The Adaptive Policy is created and is displayed in the Adaptive Policy tab, and the created RADIUS Attribute Group is displayed in the RADIUS Attribute Groups tab.
  6. (Optional) Complete the following steps to create a new RADIUS Attribute Group.
    1. In the RADIUS Attribute Groups page, select the RADIUS Attribute Groups tab and click Add Group.
      The Add RADIUS Attribute Group page is displayed.
      Adding a RADIUS Attributes Group
    2. In the Add RADIUS Attributes Group page, complete the following:
      • Group Name: Enter a group name.
      • RADIUS Attributes: Configure the RADIUS attributes. These attributes are returned when a client connects. Click Add to access the Add RADIUS Attribute sidebar.
    3. In the Add RADIUS Attribute sidebar, complete the following:
      • In the Attribute Type section, select the attribute type from the first drop-down (Common Attributes, Foundry, Ruckus, WISPr, or General), then select the specific attribute name from the second drop-down. The list of attribute names differs depending upon the selected attribute type.
        Note: Foundry, Ruckus, and Wireless Internet Service Provider (WISPr) attributes are vendor-specific. Interpretation and usage of these attributes depend on the specific hardware implementation (Access Points, Switches) rather than the RADIUS server. Refer to the documentation of your network hardware (APs, Switches) for detailed instructions on how to configure and utilize these attributes.
      • The Condition Value comprises two fields, an action and a value. For the action field, select from Add (Multiple), Add or Replace (Single), or Add if it Doesn't Exist and then enter a valid number in the second field.
    4. Click Apply.
      The newly created RADIUS Attribute Group is displayed in the table and is available for selection when creating or editing an Adaptive Policy.
  7. (Optional) Complete the following steps to create the Adaptive Policy Set.

    You can curate multiple Adaptive Policies into a single Adaptive Policy Set, creating a superset of authentication rules. The credentials of the connecting device will be verified against the complete set of authentication rules. If the device matches all of the rules, it will be connected.

    1. Select the Adaptive Policy Sets tab and click Add Sets.
      The Add Adaptive Policy Set page is displayed.
      Adding Adaptive Policy Set
    2. Enter the name for the Adaptive Policy Set.
    3. Complete the following steps to select the access policies:
      Selecting Access Policies
      1. Click Select Policies. The Select Access Policies dialog box is displayed.
      2. Use the toggle to select the desired policies. Click Add Policy to create a new policy.
      3. Click Add.

        The list of selected policies appears in the Add Adaptive Policy Set table. When multiple policy sets exist, you can reorder them using the = icon to control the order in which the authentication policies are applied.

      4. Click Apply.

        The Adaptive Policy Set is added and appears in the Adaptive Policy Sets table.