ONEPolicy
ONEPolicy provides for the configuration of role-based profiles
for securing and provisioning network resources based upon the role the user or device plays
within the enterprise. By first defining the user or device role, network resources can be
granularly tailored to a specific user, system, service, or port-based context by configuring
and assigning rules to the policy role. A policy role can be configured for any combination of
Class of Service,
VLAN (Virtual LAN) assignment, or default behavior based upon
L2, L3, and L4 packet fields. Hybrid authentication allows either policy or dynamic VLAN
assignment, or both, to be applied through
RADIUS (Remote Authentication Dial In User Service) authorization.
Note
The software only allows policy to be enabled if all the devices in
the stack support policy. At the time of configuration the device will provision the lowest
common denominator of functionality. If a device attempts to join the stack after policy is
enabled, it must be able to support the existing level of functionality or it will not be
allowed to participate in policy. For more detailed information about lowest common
denominator, see
Policy and Lowest Common Denominator Stacking.
Print
this page
Email this topic
Feedback
View PDF
Download EPUB