About this task
Use this task to create a network policy.
Procedure
-
Select Create Policy.
-
Select Add Network
Policy.
Create New Policy
pop-up window displays.
-
For Policy Name, enter at least three alphanumeric characters
- Optional:
Enter a description.
-
For User Groups,
select Any User or select a user group from the drop-down
menu or create one.
-
For Device Groups,
select Any Device or select a device group from the
drop-down menu or create one.
Note
If user and device groups are configured in the policy, for the policy to
match for network access both access conditions must pass.
- Optional:
For Location Based
Condition, select a location condition from the drop-down menu or
create a new condition to use.
- Optional:
For Time Based
Condition, select a time condition from the drop-down menu or
create a new condition to use.
- Optional:
For Authentication Based
Condition, select an authentication condition from the drop-down
menu or create a new condition.
-
If you do not want to use a secure network access, change the Default
Network Access to Allow.
-
For the Select VLAN from ExtremeCloud IQ options, you can use your own
VLAN or a VLAN from ExtremeCloud IQ.
-
To use your own VLAN, ensure Select VLAN from ExtremeCloud IQ is
deactivated (default) and enter a VLAN ID.
-
To use a VLAN from ExtremeCloud IQ,
activate Select VLAN from ExtremeCloud IQ and select a VLAN from
the list.
- Optional:
Select a VLAN from the drop-down
menu.
- Optional:
ISID - this is a fabric service
identifier.
- Optional:
Select Network Service Group and
continue as follows:
-
Select Add Network Service
Group.
-
Select Allowed or
Denied.
-
Select Add.
Results
Your network policy displays in the list showing the Network Access status
as Enabled.