Associates an existing and configured client identity (device fingerprinting definition) with this client identity group

Supported in the following platforms:

  • Access Points — AP505i, AP510i/e, AP560i/h
  • Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000


client-identity <CLIENT-IDENTITY-NAME> precedence <1-10000>


client-identity <CLIENT-IDENTITY-NAME> precedence <1-10000>

client-identity <CLIENT-IDENTITY-NAME>

Associates a client identity with this group

  • <CLIENT-IDENTITY-NAME> – Specify a client identity name (should be existing and configured)

precedence <1-10000>

Determines the order in which client identity is used.

  • <1-10000> – Specify this client identity precedence from <1-10000>.

The client identity rule is applied based on its precedence value. Lower the value, higher is the precedence. Therefore, a client identity with precedence 5 gets priority over a client identity having precedence 20.


The following example shows two client identities created and configured:

nx9500-6C8809(config)#show context
! Configuration of NX9500 version
version 2.6
client-identity TestClientIdentity
 dhcp 1 message-type request option-codes exact hexstring 5e4d36780b3a7f
client-identity test
 dhcp 2 message-type discover option 2 exact hexstring 012456c22c44
 dhcp 1 message-type request option 60 exact ascii MSFT5.0
 dhcp-match-message-type all
client-identity-group ClientIdentityGroup
 client-identity TestClientIdentity precedence 1
client-identity-group test
 permit tcp any any rule-precedence 10 rule-description "permit all TCP traffic"

The following example associates client identity ‘test‘ with the client identity group ‘test‘:

nx9500-6C8809(config-client-identity-group-test)#client-identity test precedence 1

The following example shows the client identity group ‘test‘ with two associated client identities having precedence 1 and 2:

nx9500-6C8809(config-client-identity-group-test)#client-identity TestClientIdentity precedence 2
rfs4000-229D58(config-client-identity-group-test)#show context
client-identity-group test
 client-identity test precedence 1
 client-identity TestClientIdentity precedence 2

Related Commands


Removes the client identity associated with the client identity group