Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Using Labels in a WxLAN Policy

When creating a WxLAN policy in a WLAN template, the idea is to create a line of logic that associates Users with Resources, connected by an action such as Allow or Deny, to control the users' access to the resource. In this context, user labels represent things like Wi-Fi clients or APs, and resources labels represent things like applications (specific or by category) and IP addresses. By connecting them, you can create some rules to allow guest users access social media, or others to prevents corporate users from using streaming video services other than, say, YouTube.

If you don't already have a label defined to represent a given group of users, you can create one from within the policy while making the rule. However, we do recommend that you plan your labels before starting the policy so they will be available in a drop-down list.

To create a label, you give it a name and then choose from a variety of predefined types, such as AAA attributes, APs, WLANs, or IP addresses, and then add your specific parameters in the corresponding values field. To use a label, for example when creating a user access policy for the organization, select it from the drop-down of available labels and add it to the rule.

Figure 1: Creating Labels Creating Labels

Policies created in a WLAN template take precedence over policies created for an individual site. In other words, the rules in a site-level policy will only take effect if no other rules, from an organization policy that includes the site, already match one or more of the conditions.

In addition, only organization-level labels are available for WxLAN policies; site level labels do not show up in the drop-down.

To create labels for a WLAN access policy:

  1. From the Mist portal, select Organization > Wireless | Labels.
  2. Click Add Label and then give your label a descriptive name (the label names will appear in the policy drop-down when adding rules to a policy in the WLAN Templates page).
  3. Select an option from the Label Type drop-down list, and then enter a value in the corresponding Label Values field. Depending on the label type that you select, you can either enter your parameters directly in the field or click the button that appears and enter values for the specified parameters.
  4. Click Create in the upper-right corner of the page.