mark-device <1-1000> [sanctioned|neighboring] [ap|client]
mark-device <1-1000> [sanctioned|neighboring] ap {mac <MAC>|ssid <SSID> {mac <MAC>}}
         mark-device <1-1000> [sanctioned|neighboring] client {mac <MAC>}
      mark-device <1-1000> [sanctioned|neighboring] ap {mac <MAC>|ssid <SSID> {mac <MAC>}}
         | <1-1000> | Configures the device categorization entry index number | 
| sanctioned | Marks a device as sanctioned. A sanctioned device is authorized to use network resources. | 
| neighboring | Marks a device as neighboring. A neighboring device is a neighbor in the same network as this device. | 
| ap {mac <MAC>| ssid <SSID>} | Marks a specified AP as sanctioned or neighboring based on its MAC address or the SSID it is beaconing 
 All APs are marked if no specific MAC address or SSID is provided. | 
mark-device [sanctioned|neighboring] client {mac <MAC>}
         | <1-1000> | Configures the device categorization entry index number | 
| sanctioned | Marks the wireless client as sanctioned. A sanctioned device is authorized to use network resources. | 
| neighboring | Marks the wireless client as neighboring. A neighboring device is a neighbor in the same network as this device. | 
| client {mac <MAC>} | Marks a specified wireless client as sanctioned or neighboring based on its MAC address 
 | 
nx9500-6C8809(config-device-categorization-rfs4000)#mark-device 1 sanctioned ap
 mac 11-22-33-44-55-66
         nx9500-6C8809(config-device-categorization-rfs4000)#show context device-categorization rfs4000 mark-device 1 sanctioned ap mac 11-22-33-44-55-66 nx9500-6C8809(config-device-categorization-rfs4000)#
| no | Removes an entry from the device categorization list |