Creating Role Assignment RulesThis section describes the rules for determining the role that is assigned for each authenticatedclient.NOTE: When Enforce Machine Authentication is enabled, both the device and the user mustbe authenticated for the role assignment rule to apply.To create role assignment rules for the user role:1. Click New in the Role Assignment Rules section of the window. The default user role is thenewly created user role.2. Select the attribute from the Attribute drop-down list that the rule it matches against. Thelist of supported attributes includes RADIUS attributes (see "List of Supported VSA" on page118), DHCP-Option, 802.1X-Authentication-Type, and MAC-Address.3. Select the operator from the Operator drop-down list. The following types of operators aresupported:l contains— To check if the attribute contains the operand value.l Is the role— To check if the role is same as the operand value.l equals— To check if the attribute is equal to the operand value.l not-equals— To check if the attribute is not equal to the operand value.l starts-with— To check if the attribute the starts with the operand value.l ends-with— To check if the attribute ends with the operand value.4. Enter the string to match in the String text box.5. Select the appropriate role from the Role drop-down list.6. Click OK.Figure 107 - Creating Role Assignment RulesMAC-Address AttributeThe first three octets in a MAC address are known as Organizationally Unique Identifier (OUI),and are purchased from the Institute of Electrical and Electronics Engineers, Incorporated (IEEE)Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 147 | Role Derivation
