EAC - grouping rules

[EF]

Hi team,

For SSID auth I use "member of" to asing VLAN, so for the same SSID a have several rules, one each AD group.

I dont like much because this full the screen with a lot of rules for the same SSID. I wolud like to have only one rule for each SSID, and inside it severals conditions (if you are member of 1 then VLAN1, member of 2 then VLAN2 and so on) but I dont know if this is possible.

Regards

EF

[Ryan_Yacobucci · Accepted solution]

Hello,

The AAA configuration has a feature called LDAP policy mappings. 

You can build out policy mappings within the AAA configuration that would align a specific LDAP criteria to a policy mapping that overrides rules/profile assignment: 

Thanks
-Ryan