Configuring Client
Identity Group
An identity group is a collection of client identity
variables. Each client identity in the group is set a value
indicating its priority when device fingerprinting.
Device fingerprinting relies on specific information sent by a
client when acquiring an IP address and configuration
information from a DHCP server. Device fingerprinting uses the
DHCP options sent by the wireless client in DHCP request or
discover packets to derive a signature specific to a device
class. For example, Apple devices have a different signature
from Android devices. The signature is used to classify the
devices and assign permissions and restrictions on each class.
To configure a client identity
group:
-
Expand the
Device
Fingerprinting menu item on the left-hand
side of the screen and select Client
Identity Group.
Device Fingerprinting - Client Identity Group
Screen
-
Select
Add to create a new policy, Edit to modify the attributes of an
existing policy, or Delete to remove obsolete policies from the
list of those available.
Use
Rename to change the name of an existing
policy, or
Copy a policy to a different location.
Client identity group policies configure the
signatures used to identify clients and use the
signatures to classify and assign network access
permissions.
-
If you are
adding a new client identity group, provide a 32-character
maximum name and select the OK button at the bottom of the screen.
-
Select the
+ Add
Row button to populate the screen's
Client
Identity and Precedence parameters.
Device Fingerprinting - Add/Edit - Client Identity
Group Screen
-
Select the
Client
Identity policy to include in this group
from the drop-down menu.
-
Use the
Precedence spinner control to set the
sequence (or priority) each listed client identity is
checked or matched.
Lower
integers are assigned the highest priority.
-
Select
OK to save the changes.
Select
Reset to revert to the last saved
configuration.