(7220-MST) #show rights RoleTable --------- Name ACL Bandwidth ACL List Type ---- --- --------- -------- ---- S1-Facstaff 56 Up: No Limit,Dn: No Limit ra-guard/,allowall/,v6-allowall/ User S1-Guest 60 Up: Guest-BW-Contract (per user),Dn: Guest-BW-Contract (per user) ra-guard/,logon-control/,student-fw/ User S1-Student 62 Up: No Limit,Dn: No Limit ra-guard/,logon-control/,student-fw/ User S2-Facstaff 61 Up: No Limit,Dn: No Limit ra-guard/,allowall/,v6-allowall/ User S2-Guest 54 Up: Guest-BW-Contract (per user),Dn: Guest-BW-Contract (per user) ra-guard/,logon-control/,student-fw/ User S2-Student 64 Up: No Limit,Dn: No Limit ra-guard/,logon-control/,student-fw/ User ap-role 4 Up: No Limit,Dn: No Limit ra-guard/,control/,ap-acl/,v6-control/,v6-ap-acl/ System authenticated 63 Up: No Limit,Dn: No Limit ra-guard/,allowall/,v6-allowall/ User default-via-role 55 Up: No Limit,Dn: No Limit allowall/ User default-vpn-role 59 Up: No Limit,Dn: No Limit ra-guard/,allowall/,v6-allowall/ User guest 3 Up: No Limit,Dn: No Limit ra-guard/,http-acl/,https-acl/,dhcp-acl/,icmp-acl/,dns-acl/,v6-http-acl/,v6-https-acl/,v6-dhcp-acl/,v6-icmp-acl/,v6-dns-acl/ User guest-logon 6 Up: No Limit,Dn: No Limit ra-guard/,logon-control/,captiveportal/,v6-logon-control/,captiveportal6/ User logon 1 Up: No Limit,Dn: No Limit ra-guard/,logon-control/,captiveportal/,vpnlogon/,v6-logon-control/,captiveportal6/ User stateful-dot1x 5 Up: No Limit,Dn: No Limit System sys-ap-role 7 Up: No Limit,Dn: No Limit sys-control/,sys-ap-acl/ System (not editable) EDU-access-guest-logon 57 Up: No Limit,Dn: No Limit EDU-access-cp_prof_list_operations/,CPPM-Web-ACL/,EDU-Web-ACL/,google-play/,logon-control/,captiveportal/ User voice 58 Up: No Limit,Dn: No Limit ra-guard/,sip-acl/,noe-acl/,svp-acl/,vocera-acl/,skinny-acl/,h323-acl/,dhcp-acl/,tftp-acl/,dns-acl/,icmp-acl/ User Total Roles:17 (7220-MST) #show rights EDU-access-guest-logon Derived Role = 'EDU-access-guest-logon' Up BW:No Limit Down BW:No Limit L2TP Pool = default-l2tp-pool PPTP Pool = default-pptp-pool Periodic reauthentication: Disabled ACL Number = 57/0 Max Sessions = 65535 Check CP Profile for Accounting = TRUE Captive Portal profile = EDU-access-cp_prof access-list List ---------------- Position Name Type Location -------- ---- ---- -------- 1 EDU-access-cp_prof_list_operations session 2 CPPM-Web-ACL session 3 EDU-Web-ACL session 4 google-play session 5 logon-control session 6 captiveportal session EDU-access-cp_prof_list_operations ---------------------------------- Priority Source Destination Service Action TimeRange Log Expired Queue TOS 8021P Blacklist Mirror DisScan ClassifyMedia IPv4/6 -------- ------ ----------- ------- ------ --------- --- ------- ----- --- ----- --------- ------ ------- ------------- ------ 1 user Android svc-http permit Low 4 2 user Android svc-https permit Low 4 CPPM-Web-ACL ------------ Priority Source Destination Service Action TimeRange Log Expired Queue TOS 8021P Blacklist Mirror DisScan ClassifyMedia IPv4/6 -------- ------ ----------- ------- ------ --------- --- ------- ----- --- ----- --------- ------ ------- ------------- ------ 1 user clearpassIP svc-http permit Low 4 2 user clearpassIP svc-https permit Low 4 3 user clearpassIP svc-http permit Low 4 4 user clearpassIP svc-https permit Low 4 EDU-Web-ACL ----------- Priority Source Destination Service Action TimeRange Log Expired Queue TOS 8021P Blacklist Mirror DisScan ClassifyMedia IPv4/6 -------- ------ ----------- ------- ------ --------- --- ------- ----- --- ----- --------- ------ ------- ------------- ------ 1 user EDUWebsiteIP svc-http permit Low 4 2 user EDUWebsiteIP svc-https permit Low 4 3 user EDUWebsiteIP svc-http permit Low 4 4 user EDUWebsiteIP svc-https permit Low 4 google-play ----------- Priority Source Destination Service Action TimeRange Log Expired Queue TOS 8021P Blacklist Mirror DisScan ClassifyMedia IPv4/6 -------- ------ ----------- ------- ------ --------- --- ------- ----- --- ----- --------- ------ ------- ------------- ------ 1 user google-play any permit Low 4 logon-control ------------- Priority Source Destination Service Action TimeRange Log Expired Queue TOS 8021P Blacklist Mirror DisScan ClassifyMedia IPv4/6 -------- ------ ----------- ------- ------ --------- --- ------- ----- --- ----- --------- ------ ------- ------------- ------ 1 user any udp 68 deny Low 4 2 any any svc-dns permit Low 4 3 any any svc-dhcp permit Low 4 4 any any svc-icmp permit Low 4 5 any any svc-natt permit Low 4 6 any 169.254.0.0 255.255.0.0 any deny Low 4 7 any 240.0.0.0 240.0.0.0 any deny Low 4 captiveportal ------------- Priority Source Destination Service Action TimeRange Log Expired Queue TOS 8021P Blacklist Mirror DisScan ClassifyMedia IPv4/6 -------- ------ ----------- ------- ------ --------- --- ------- ----- --- ----- --------- ------ ------- ------------- ------ 1 user controller svc-https dst-nat 8081 Low 4 2 user any svc-http dst-nat 8080 Low 4 3 user any svc-https dst-nat 8081 Low 4 4 user any svc-http-proxy1 dst-nat 8088 Low 4 5 user any svc-http-proxy2 dst-nat 8088 Low 4 6 user any svc-http-proxy3 dst-nat 8088 Low 4 Expired Policies (due to time constraints) = 0