Security

Reply
New Contributor
Posts: 3
Registered: ‎10-24-2016

Re-order attributes in enforcement profile?

Hi,

I am pushing NAS-Filter-Rules (ACL entries) to a 2930 switch per user auth session, that works fine.
However, when a change needs to be made to the ACL list, it does not seem possible to re-order entries in a single enforcement profile, nor to insert attributes between records in the existing list.
I know I can export/edit xml/import, but that is not very convenient just to update an ACL.
Does anyone know of a workaround for this or should this be a feature request?
See attached example.

Thanks!

Peter.

Guru Elite
Posts: 8,643
Registered: ‎09-08-2010

Re: Re-order attributes in enforcement profile?

Unfortunately this is not possible from the GUI today.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
New Contributor
Posts: 3
Registered: ‎10-24-2016

Re: Re-order attributes in enforcement profile?

Hi Tim,

 

Thank you for the update.

1/ Can this be added as feature request?

2/ In the release 6.6.2.86786, the output of Access Tracker does not seem to respect the order of the configured attributes (they are simply sorted A-Z it seems). See attached for the Access Tracker output and the configured settings. This is not a big issue, since the real access-accept packet contains the correct order, but it is still confusing from a troubleshooting point of view. Should this be logged as a case?

 

best regards,Peter.

 

 

Guru Elite
Posts: 8,643
Registered: ‎09-08-2010

Re: Re-order attributes in enforcement profile?

1) Yes, please submit an RFE.

2) This is a known issue and is being addressed.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
New Contributor
Posts: 3
Registered: ‎10-24-2016

Re: Re-order attributes in enforcement profile?

Thanks again Tim!

 

@all: idea for the attribute re-ordering has been posted, please vote to get this done!

https://arubanetworkskb.secure.force.com/prm/ideas/viewIdea.apexp?id=08733000000DFer

 

Thanks,Peter.

Search Airheads
Showing results for 
Search instead for 
Did you mean: