Wireless Controller, Service Platform and Access Point CLI Reference Guide

Associates an existing and configured client identity (device fingerprinting definition) with this client identity group

Supported in the following platforms:

Access Points — AP310i/e, AP410i/e, AP460i/e, AP560i/h, AP510i/e, AP505i, AP7522, AP7532, AP7562, AP7612, AP7632, AP7662, AP8432, AP8533
Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000

Syntax

client-identity <CLIENT-IDENTITY-NAME> precedence <1-10000>

Parameters

client-identity <CLIENT-IDENTITY-NAME> precedence <1-10000>


client-identity <CLIENT-IDENTITY-NAME>	Associates a client identity with this group <CLIENT-IDENTITY-NAME> – Specify a client identity name (should be existing and configured)
precedence <1-10000>	Determines the order in which client identity is used. <1-10000> – Specify this client identity precedence from <1-10000>. The client identity rule is applied based on its precedence value. Lower the value, higher is the precedence. Therefore, a client identity with precedence 5 gets priority over a client identity having precedence 20.

Examples

The following example shows two client identities created and configured:

nx9500-6C8809(config)#show context
!
! Configuration of NX9500 version 7.1.0.0-010D
!
!
version 2.6
!
!
client-identity TestClientIdentity
 dhcp 1 message-type request option-codes exact hexstring 5e4d36780b3a7f
!
client-identity test
 dhcp 2 message-type discover option 2 exact hexstring 012456c22c44
 dhcp 1 message-type request option 60 exact ascii MSFT5.0
 dhcp-match-message-type all
!
client-identity-group ClientIdentityGroup
 client-identity TestClientIdentity precedence 1
!
client-identity-group test
!
ip access-list BROADCAST-MULTICAST-CONTROL
 permit tcp any any rule-precedence 10 rule-description "permit all TCP traffic"
 --More--
nx9500-6C8809(config)#

The following example associates client identity ‘test‘ with the client identity group ‘test‘:

nx9500-6C8809(config-client-identity-group-test)#client-identity test precedence 1

The following example shows the client identity group ‘test‘ with two associated client identities having precedence 1 and 2:

nx9500-6C8809(config-client-identity-group-test)#client-identity TestClientIdentity precedence 2
nx9500-6C8809(config-client-identity-group-test)#show context
client-identity-group test
 client-identity test precedence 1
 client-identity TestClientIdentity precedence 2
nx9500-6C8809(config-client-identity-group-test)#

Related Commands


no	Removes the client identity associated with the client identity group