config user nac-policy
Configure NAC policy matching pattern to identify matching NAC devices.
config user nac-policy
Description: Configure NAC policy matching pattern to identify matching NAC devices.
edit <name>
set description {string}
set category [device|firewall-user|...]
set status [enable|disable]
set mac {string}
set hw-vendor {string}
set type {string}
set family {string}
set os {string}
set hw-version {string}
set sw-version {string}
set host {string}
set user {string}
set src {string}
set user-group {string}
set ems-tag {string}
set switch-fortilink {string}
set switch-group <name1>, <name2>, ...
set switch-mac-policy {string}
set firewall-address {string}
set ssid-policy {string}
next
end
config user nac-policy
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
description |
Description for the NAC policy matching pattern. |
string |
Maximum length: 63 |
|
||||||||
|
category |
Category of NAC policy. |
option |
- |
device |
||||||||
|
|
|
|||||||||||
|
status |
Enable/disable NAC policy. |
option |
- |
enable |
||||||||
|
|
|
|||||||||||
|
mac |
NAC policy matching MAC address. |
string |
Maximum length: 17 |
|
||||||||
|
hw-vendor |
NAC policy matching hardware vendor. |
string |
Maximum length: 15 |
|
||||||||
|
type |
NAC policy matching type. |
string |
Maximum length: 15 |
|
||||||||
|
family |
NAC policy matching family. |
string |
Maximum length: 31 |
|
||||||||
|
os |
NAC policy matching operating system. |
string |
Maximum length: 31 |
|
||||||||
|
hw-version |
NAC policy matching hardware version. |
string |
Maximum length: 15 |
|
||||||||
|
sw-version |
NAC policy matching software version. |
string |
Maximum length: 15 |
|
||||||||
|
host |
NAC policy matching host. |
string |
Maximum length: 64 |
|
||||||||
|
user |
NAC policy matching user. |
string |
Maximum length: 64 |
|
||||||||
|
src |
NAC policy matching source. |
string |
Maximum length: 15 |
|
||||||||
|
user-group |
NAC policy matching user group. |
string |
Maximum length: 35 |
|
||||||||
|
ems-tag |
NAC policy matching EMS tag. |
string |
Maximum length: 79 |
|
||||||||
|
switch-fortilink |
FortiLink interface for which this NAC policy belongs to. |
string |
Maximum length: 15 |
|
||||||||
|
switch-group |
List of managed FortiSwitch groups on which NAC policy can be applied. Managed FortiSwitch group name from available options. |
string |
Maximum length: 79 |
|
||||||||
|
switch-mac-policy |
Switch MAC policy action to be applied on the matched NAC policy. |
string |
Maximum length: 63 |
|
||||||||
|
firewall-address |
Dynamic firewall address to associate MAC which match this policy. |
string |
Maximum length: 79 |
|
||||||||
|
ssid-policy |
SSID policy to be applied on the matched NAC policy. |
string |
Maximum length: 35 |
|
||||||||