Dynamic Port Configuration (DPC) provides the ability to assign port profiles to client devices automatically.
Client device can identify itself to the system using specific device properties and provision port configuration automatically.
DPC rules can be defined based on the following items:
When using Radius filter-id as a match criteria for DPC rule, it is required to create a firewall filter with matching name against the filter-id returned and an accept-all rule for this to work. To do this, under UI's additional CLI commands section, add below commands and save the configuration:
set firewall family inet filter <filter-id> term allow-any from destination-address 0.0.0.0/0set firewall family inet filter <filter-id> term allow-any then accept
NOTE: filter-id name should match both on NPS Radius attribute config and on above CLI commands.
On Mist UI, when using Radius filter-id as a match criteria for DPC rule. Automatic provisioning will not occur, unless a firewall filter, matching its name against the filter-id, its defined.
Under UI's additional CLI commands section, add below commands and save the configuration:
10/18/24 - Initial Publication