Dell PowerConnect W-IAP92 Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 139

DHCP Option and DHCP Fingerprinting, Device, DHCP Option, DHCP Fingerprint

Page 139 highlights

2. Select the attribute from the Attribute drop-down list that the rule will match against. The list of supported attributes includes RADIUS attributes (see "List of supported VSA" on page 113), DHCPOption, and 802.1X-Authentication-Type. 3. Select the operator from the Operator drop-down list. The following types of operators are supported:  contains-To check if the attribute contains the operand value.  Is the role- To check if the role is same as the operand value.  equals- To check if the attribute is equal to the operand value.  not-equals-To check if the attribute is not equal to the operand value.  starts-with- To check if the attribute the starts with the operand value.  ends-with- To check if the attribute ends with the operand value. 4. Enter the string to match in the String text box. 5. Select the appropriate role from the Role drop-down list. 6. Click OK. Figure 119 Creating Role Assignment Rules DHCP Option and DHCP Fingerprinting The DHCP fingerprinting feature allows you to identify the operating system of a device by looking at the options in the DHCP frame. Based on the operating system type, a role can be assigned to the device. For example, in order to create a role assignment rule with DHCP option, select equals from the Operator dropdown list and enter 370103060F77FC in the String text box. Since 370103060F77FC is the fingerprint for Apple iOS devices such as iPad and iPhone, IAP assigns Apple iOS devices to the role that you choose. Table 21 Validated DHCP Fingerprint Device DHCP Option DHCP Fingerprint Apple iOS Android Blackberry Option 55 Option 60 Option 60 370103060F77FC 3C64686370636420342E302E3135 3C426C61636B4265727279 Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Role Derivation | 139

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246

Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0
| User Guide
Role Derivation
|
139
2.
Select the attribute from the
Attribute
drop-down list that the rule will match against. The list of supported
attributes includes RADIUS attributes (see
“List of supported VSA” on page
113
), DHCPOption, and
802.1X-Authentication-Type.
3.
Select the operator from the
Operator
drop-down list. The following types of operators are supported:
contains
—To check if the attribute contains the operand value.
Is the role
— To check if the role is same as the operand value.
equals
— To check if the attribute is equal to the operand value.
not-equals
—To check if the attribute is not equal to the operand value.
starts-with
— To check if the attribute the starts with the operand value.
ends-with
— To check if the attribute ends with the operand value.
4.
Enter the string to match in the
String
text box.
5.
Select the appropriate role from the
Role
drop-down list.
6.
Click
OK
.
Figure 119
Creating Role Assignment Rules
DHCP Option and DHCP Fingerprinting
The DHCP fingerprinting feature allows you to identify the operating system of a device by looking at the options
in the DHCP frame. Based on the operating system type, a role can be assigned to the device.
For example, in order to create a role assignment rule with DHCP option, select equals from the Operator drop-
down list and enter 370103060F77FC in the String text box. Since 370103060F77FC is the fingerprint for Apple
iOS devices such as iPad and iPhone, IAP assigns Apple iOS devices to the role that you choose.
Table 21
Validated DHCP Fingerprint
Device
DHCP Option
DHCP Fingerprint
Apple iOS
Option 55
370103060F77FC
Android
Option 60
3C64686370636420342E302E3135
Blackberry
Option 60
3C426C61636B4265727279