Brocade Mobility RFS Controller CLI Reference Guide (Supporting software release 5.5.0.0 and later) - Manual (Page 1051)

1042 Brocade Mobility RFS Controller CLI Reference Guide
53-1003098-01
17
NOTE
A user-based VLAN is effective only if dynamic VLAN authorization is enabled for the WLAN.
Supported in the following platforms:
• Access Points — Brocade Mobility 650 Access Point, Brocade Mobility 6511 Access Point,
Brocade Mobility 1220 Access Point, Brocade Mobility 71XX Access Point, Brocade
Mobility 1240 Access Point
• Wireless Controllers — Brocade Mobility RFS4000, Brocade Mobility RFS6000, Brocade
Mobility RFS7000
• Service Platforms — Brocade Mobility RFS9510
Syntax:
policy [access|day|role|ssid|time|vlan]
policy vlan <1-4094>
policy access [all|console|ssh|telnet|web]
policy access [all|console|ssh|telnet|web] {(all|console|ssh|telnet|web)}
policy day [all|fr|mo|sa|su|th|tu|we|weekdays]
{(fr|mo|sa|su|th|tu|we|weekdays)}
policy role
[helpdesk|monitor|network-admin|security-admin|superuser|system-admin|
web-user-admin]
policy ssid <SSID>
policy time start <HH:MM> end <HH:MM>
NOTE
Access and role settings are applicable only to a management group. They cannot be configured for
a RADIUS non-management group.
Parameters
policy vlan <1-4094>
vlan <1-4094> Sets the guest RADIUS group’s VLAN ID from 1 - 4094. The VLAN ID is representative of the shared SSID
each group member (user) employs to interoperate within the network (once authenticated by the local
RADIUS server).
This option applicable to a guest user group, which has guest access and temporary permissions to the local
RADIUS server. The terms of the guest access can be set uniquely for each group. Guest user groups cannot
be made management groups with unique access and role permissions.
Enable dynamic VLAN assignment for the WLAN for the VLAN assignment to take effect.