client-identity

Associates an existing and configured client identity (device fingerprinting definition) with this client identity group

Supported on the following devices:

Access Points: AP3000/X, AP5010, AP310i/e, AP410i/e, AP505i, AP510i, AP510e, AP560i, AP7602, AP7612, AP7622, AP7632, AP7662, AP8163, AP8533.
Service Platforms: NX5500, NX7500, NX9500, NX9600
Virtual Platforms: CX9000, VX9000

Syntax

client-identity <CLIENT-IDENTITY-NAME> precedence <1-10000>

Parameters

client-identity <CLIENT-IDENTITY-NAME> precedence <1-10000>


client-identity <CLIENT-IDENTITY-NAME>	Associates a client identity with this group <CLIENT-IDENTITY-NAME> – Specify a client identity name (should be existing and configured)
precedence <1-10000>	Determines the order in which client identity is used. <1-10000> – Specify this client identity precedence from <1-10000>. The client identity rule is applied based on its precedence value. Lower the value, higher is the precedence. Therefore, a client identity with precedence 5 gets priority over a client identity having precedence 20.

Examples

The following example shows two client identities created and configured:

nx9500-6C8809(config)#show context
!
! Configuration of NX9500 version 7.1.0.0-010D
!
!
version 2.6
!
!
client-identity TestClientIdentity
 dhcp 1 message-type request option-codes exact hexstring 5e4d36780b3a7f
!
client-identity test
 dhcp 2 message-type discover option 2 exact hexstring 012456c22c44
 dhcp 1 message-type request option 60 exact ascii MSFT5.0
 dhcp-match-message-type all
!
client-identity-group ClientIdentityGroup
 client-identity TestClientIdentity precedence 1
!
client-identity-group test
!
ip access-list BROADCAST-MULTICAST-CONTROL
 permit tcp any any rule-precedence 10 rule-description "permit all TCP traffic"
 --More--
nx9500-6C8809(config)#

The following example associates client identity ‘test‘ with the client identity group ‘test‘:

nx9500-6C8809(config-client-identity-group-test)#client-identity test precedence 1

The following example shows the client identity group ‘test‘ with two associated client identities having precedence 1 and 2:

nx9500-6C8809(config-client-identity-group-test)#client-identity TestClientIdentity precedence 2
nx9500-6C8809(config-client-identity-group-test)#show context
client-identity-group test
 client-identity test precedence 1
 client-identity TestClientIdentity precedence 2
nx9500-6C8809(config-client-identity-group-test)#

Related Commands


no	Removes the client identity associated with the client identity group