Mobile Groups

Page 19-9

How a Device Is Dropped from the Default Mobile Group (def_group)

If def_group is enabled....

The device that does not
match any policies becomes a
member of the default group.
Default Group 1
Group 3

Why enable def_group?

• Ensure that all network devices will be a
member of at least one mobile group.

If def_group is disabled....

Default
All traffic from the device that
does not match any policies
is dropped. The device is not
a member of any mobile
group, including the default
mobile group.
Mobile Group 1
Secondary
Mobile Group 3
• Reduces traffic to and from devices that
do not satisfy any network policies.
Device sends traffic that is forwarded to the MPX for pro-
cessing. If the traffic matches the policies of an existing
mobile group, then it will become a member of that group.
If the device does not match the policies of any mobile
group, then the def_group variable determines whether
that device becomes a member of the default group.
Default Group 1
Group 3

Why disable move_from_def?