Concept Guide

Rule Type Condition Value
l xSec
essid: Assign client to a role or VLAN
based upon the ESSID to which the client
is associated
One of the following:
l contains
l ends with
l equals
l does not equal
l starts with
l value of (does
not take string;
attribute value is
used as role)
string
location: Assign client to a role or VLAN
based upon the ESSID to which the client
is associated
One of the following:
l equals
l does not equal
string
macaddr: MAC address of the client One of the following:
l contains
l ends with
l equals
l does not equal
l starts with
MAC address (xx:xx:xx:xx:xx:xx)
The device identification feature allows you to assign a user role or VLAN to a specific device type by identifying
a DHCP option and signature for that device. If you create a user rule with the DHCP-Option rule type, the first
two characters in the Value field must represent the hexadecimal value of the DHCP option that this rule
should match, while the rest of the characters in the Value field indicate the DHCP signature the rule should
match. To create a rule that matches DHCP option 12 (host name), the first two characters of the in the Value
field must be the hexadecimal value of 12, which is 0C. To create a rule that matches DHCP option 55, the first
two characters in the Value field must be the hexadecimal value of 55, which is 37.
The following table describes some of the DHCP options that are useful for assigning a user role or VLAN.
DHCP Option Description Hexidecimal Equivalent
12 Host name 0C
55 Parameter Request List 37
60 Vendor Class Identifier 3C
81 Client FQDN 51
Dell Networking W-Series ArubaOS 6.5.x | Reference Guide aaa derivation-rules | 82