createOrgNacTag

POST https://{{host}}/api/v1/orgs/:org_id/nactags

NameTypeDescription
namestringthe name
typestringmatch / radius_group / vlan
matchstringtype of match, vendor / ssid / certcn / certsub / certserial / certissuer / certsan / idprole / realm / username / clientmac / mdmstatus / usermaclabel
match_allbooleanfalse': means it is sufficient to match any of the values (i.e., match-any behavior),
'true': means all values should be matched (i.e., match-all behavior),
default is 'false
This field is applicalbe only when 'type' field is set to 'match'
Currently it makes sense to set this field to 'true' only if the 'match' is set to 'idprole' and 'usermaclabel'.
valueslistlist of values to match
vlanstringvlan id or name to return
radius_groupstringfilter_id to return
gbp_tagstringgbp tag to return
session_timeoutintsession timeout value to return in seconds
egress_vlan_nameslistlist of egress vlans to return
radius_attrslistlist of one or more standard radius attributes in \=\ format
radius_vendor_attrslistlist of one or more vendor specific radius attribute in \=\ format

NOTE:
match on 'vendor' is now obsoleted. DO NOT use it anymore. You can now add vendor based match directly as part of nacrule object

Request Body

{"type"=>"match", "name"=>"guest-wlan", "match"=>"vendor", "values"=>["cisco"]}