Cloud Managed Networks

You can do this with Cloud Authentication and Policy, which is under the Global View, then Security and Authentication and policy. There you can create device policies that point assign a role depending on the client tag ([Mobile & Gadgets]). When you have done that, use Cloud Auth as authentication server for your network.

The VLAN assignment roles are AP 'local significant', so that doesn't have access to the profiling information in Central unless you link it through Cloud Auth (or ClearPass).

Hi Herman,

I created a new Role "xxx_IOT" and allowed all traffic and assigned VLAN20.

I then did as u suggested and created the policy.

The WLAN itself uses PSK to authenticate, but i only see CloudAuth under Enterprise.

Am i missng something?

You can do this with Cloud Authentication and Policy, which is under the Global View, then Security and Authentication and policy. There you can create device policies that point assign a role depending on the client tag ([Mobile & Gadgets]). When you have done that, use Cloud Auth as authentication server for your network.

The VLAN assignment roles are AP 'local significant', so that doesn't have access to the profiling information in Central unless you link it through Cloud Auth (or ClearPass).

You can do this with Cloud Authentication and Policy, which is under the Global View, then Security and Authentication and policy. There you can create device policies that point assign a role depending on the client tag ([Mobile & Gadgets]). When you have done that, use Cloud Auth as authentication server for your network.

The VLAN assignment roles are AP 'local significant', so that doesn't have access to the profiling information in Central unless you link it through Cloud Auth (or ClearPass).

Is this also possible for switches to assing VLAN based on DeviceType?

You can do this with Cloud Authentication and Policy, which is under the Global View, then Security and Authentication and policy. There you can create device policies that point assign a role depending on the client tag ([Mobile & Gadgets]). When you have done that, use Cloud Auth as authentication server for your network.

The VLAN assignment roles are AP 'local significant', so that doesn't have access to the profiling information in Central unless you link it through Cloud Auth (or ClearPass).

yes you can also enable MAC auth and choose CloudAuth for it.

Is this also possible for switches to assing VLAN based on DeviceType?

You can do this with Cloud Authentication and Policy, which is under the Global View, then Security and Authentication and policy. There you can create device policies that point assign a role depending on the client tag ([Mobile & Gadgets]). When you have done that, use Cloud Auth as authentication server for your network.

The VLAN assignment roles are AP 'local significant', so that doesn't have access to the profiling information in Central unless you link it through Cloud Auth (or ClearPass).