Editing the ExtremeCloud IQ - Site Engine Profile for Policy and Location-Based Services

In this section, we outline how to configure Location-Based Services in ExtremeCloud IQ - Site Engine to create more than one mapping to an External Captive Portal. Multiple mappings are necessary when configuring ExtremeCloud IQ Controller side-by-side with other controllers in your network.

All policies/filter-ids sent from ExtremeCloud IQ - Site Engine to ExtremeCloud IQ Controller must also be configured in ExtremeCloud IQ Controller. If ExtremeCloud IQ Controller cannot correlate a filter-id to an existing policy in the ExtremeCloud IQ Controller roles database, the ExtremeCloud IQ Controller default authenticated roles are applied.

To enable Location Based Services ExtremeCloud IQ - Site Engine, take the following steps:

Go to Control > Access Control > Configuration.
Select the configuration in use, then select Rules.
Select Advanced Locations > Add.
Select Location Field > New.
Select Add.

Add Location Group
Create the location group as follows:

Switch

ExtremeCloud IQ Controller Switch IP address. Use the Select Devices button to select one or more devices.

Interface (optional)

Select Wireless to restrict to a Wireless interface.
Select Add.
Select Save to save the group.

Create Location Group for ExtremeCloud IQ Controller
From the Add Advanced Location Based Access Behavior screen, select the newly created location group for the Location field, and select OK.

New Location Group for ExtremeCloud IQ Controller
Select the portal and features that you wish to enabled for this location.

Note
When a portal configuration is used in multiple advanced location based sets, edits to a portal in one set will propagate across all sets. For example, if you remove Guest Registration from the Default portal, Guest Registration is removed from all advanced location based portals that use are based on the Default portal.
From the Rules Engine, select the newly created Unregistered rule.
Now create a profile associated with the Unregistered ExtremeCloud IQ Controller rule.
1. Double-click the new Unregistered Rule to open the Edit Rule dialog.
2. Scroll down to the Actions pane and select the Profile field.
3. From the Profile field, select New.
ExtremeCloud IQ Controller Policy Rule Mapping
Create a new profile called Unregistered role for <Network Name>. In our example we used Guest.
From the new profile, select Accept Policy > New.
Create a new policy mapping.

Edit Policy Mapping
Select newly created policy mapping as the Accept Policy.

Profile Unregistered for Guest ExtremeCloud IQ Controller

Note
There are multiple registration rules for each registration type (rules ending with XCC and rules without the XCC suffix), because we have configured both Guest and Authenticated registrations enabled on the portal configuration.

Final Rule Configuration

Note
If there is a mismatch in roles between Extreme Control and ExtremeCloud IQ Controller, force a re-authentication from ExtremeCloud IQ Controller. The mismatch may be a result of a timing issue. View Session timeouts on the network configuration for more information.
If the mismatch persists, confirm that you have used exact syntax on the role configuration. See Editing the Unregistered Policy on ExtremeCloud IQ - Site Engine for more information.

For more information about External Captive Portal on ExtremeCloud IQ - Site Engine, refer to ExtremeCloud IQ - Site Engine Documentation.