l

role-name

with the name you want to identify the voice user role.
lservice-namewi th any of the service names from Table 285.
Using the User-Derivation Roles
The userrole can be derived from attributes from the client’s association wit han A P. For VoIP phones, you can
configurethe devices to be placedi nt heiruser role based on the SSID or the Organizational Unit Identifier (OUI)
of the client’s MAC address.
NOTE:User-derivation rules are executed
before
thecli ent is authenticated.

Using the WebUIto derive the role based on SSID

1. Navigate to the Configuration > Security > Authentication > User Rules page.
2. Click Add to add a newset of derivation rules.E ntera namefor the set of rules,and click Add. The name
appearsi n the User Rules Summarylist.
3. In the User Rules Summary list, select the name of the ruleset to c onfigurerules.
4. Click Add to adda rule.For Set Type, select Role from the drop-down menu.
5. For Rule Type, select ESSID.
6. For Condition, select equals.
7. For Value, enter the SSID used for the phones.
8. For Roles, select t heuser role you previously created.
9. Click Add.
10. Click Apply.

Using the CLI to derive ther olebased on SSID

aaa derivation-rules user name
set role condition essid equals ssid set-value role

Using the WebUIto derive the role based on MAC OUI

1. Navigate to the Configuration > Security > Authentication > User Rules page.
2. Click Add to add a newset of derivation rules.E ntera namefor the set of rules,and click Add. The name
appearsi n the User Rules Summarylist.
3. In the User Rules Summary list, select the name of the ruleset to c onfigurerules.
4. Click Add to adda rule.For Set Type, select Role from the drop-down menu.
5. For Rule Type, select MAC Address.
6. For Condition, select con tains.
7. For Value, enter the first three octets (the OUI) of the MAC address of the phones (for example,the Spectralink
OUI is 00:09:7a).
8. For Roles, select t heuser role you previously created.
9. Click Add.
10. Click Apply.

Using the CLI to derive ther olebased on MAC OUI

aaa derivation-rules user name
set role condition macaddr contains xx:xx:xx set-value role
DellPowerConnect W- Series ArubaOS 6.2 | User Guide Voiceand Video | 686