createOrgNacTag
POST https://{{host}}/api/v1/orgs/:org_id/nactags
Name | Type | Description |
---|---|---|
name | string | the name |
type | string | match / radius_group / vlan |
match | string | type of match, vendor / ssid / certcn / certsub / certserial / certissuer / certsan / idprole / realm / username / clientmac / mdmstatus / usermaclabel |
match_all | boolean | false': means it is sufficient to match any of the values (i.e., match-any behavior), 'true': means all values should be matched (i.e., match-all behavior), default is 'false This field is applicalbe only when 'type' field is set to 'match' Currently it makes sense to set this field to 'true' only if the 'match' is set to 'idprole' and 'usermaclabel'. |
values | list | list of values to match |
vlan | string | vlan id or name to return |
radius_group | string | filter_id to return |
gbp_tag | string | gbp tag to return |
session_timeout | int | session timeout value to return in seconds |
egress_vlan_names | list | list of egress vlans to return |
radius_attrs | list | list of one or more standard radius attributes in \format |
radius_vendor_attrs | list | list of one or more vendor specific radius attribute in \format |
NOTE:
match on 'vendor' is now obsoleted. DO NOT use it anymore. You can now add vendor based match directly as part of nacrule object
Request Body
{"type"=>"match", "name"=>"guest-wlan", "match"=>"vendor", "values"=>["cisco"]}