Configuring Client Identity Group

About this task

An identity group is a collection of client identity variables. Each client identity in the group is set a value indicating its priority when device fingerprinting.

Device fingerprinting relies on specific information sent by a client when acquiring an IP address and configuration information from a DHCP server. Device fingerprinting uses the DHCP options sent by the wireless client in DHCP request or discover packets to derive a signature specific to a device class. For example, Apple devices have a different signature from Android devices. The signature is used to classify the devices and assign permissions and restrictions on each class.

To configure a client identity group:

Procedure

Expand the Device Fingerprinting menu item on the left-hand side of the screen and select Client Identity Group.

Device Fingerprinting - Client Identity Group Screen
Select Add to create a new policy, Edit to modify the attributes of an existing policy, or Delete to remove obsolete policies from the list of those available.
Use Rename to change the name of an existing policy, or Copy a policy to a different location.
Client identity group policies configure the signatures used to identify clients and use the signatures to classify and assign network access permissions.
If you are adding a new client identity group, provide a 32-character maximum name and select the OK button at the bottom of the screen.
Select the + Add Row button to populate the screen's Client Identity and Precedence parameters.

Device Fingerprinting - Add/Edit - Client Identity Group Screen
Select the Client Identity policy to include in this group from the drop-down menu.
Use the Precedence spinner control to set the sequence (or priority) each listed client identity is checked or matched.
Lower integers are assigned the highest priority.
Select OK to save the changes.
Select Reset to revert to the last saved configuration.