Dell W-Series 304 Instant 6.5.1.0-4.3.1.0 CLI Reference Guide - Page 81

Parameter Description l starts-with: Check if attribute starts with the string in the parameter. set-value | Specify the user role or VLAN ID to be assigned to the client if the above condition is met. description Describes the user derivation rule. This parameter is optional and has a 128 character maximum. position Position of this rule relative to other rules that are configured. Usage Guidelines The user role can be derived from attributes from the client's association with an AP. User-derivation rules are executed before the client is authenticated. You configure the user role to be derived by specifying condition rules; when a condition is met, the specified user role is assigned to the client. You can specify more than one condition rule; the order of rules is important as the first matching condition is applied. You can also add a description of the rule. The table below describes the conditions for which you can specify a user role or VLAN. Rule Type bssid: Assign client to a role or VLAN based upon the BSSID of AP to which client is associating. Condition Value One of the following: l contains l ends with l equals l does not equal l starts with MAC address (xx:xx:xx:xx:xx:xx) dhcp-option: Assign client to a role or VLAN based upon the DHCP signature ID. One of the following: l equals l starts with DHCP signature ID. Note: This string is not case sensitive. dhcp-option-77: Assign client to a role or VLAN based upon the user class identifier returned by DHCP server. equals string encryption-type: Assign client to a role or VLAN based upon the encryption type used by the client. One of the following: l equals l does not equal l Open (no encryption) l WPA/WPA2 AES l WPA-TKIP (static or dynamic) l Dynamic WEP l WPA/WPA2 AES PSK l Static WEP 81| aaa derivation-rules Dell Networking W-Series ArubaOS 6.5.x | Reference Guide