(PL-Aruba01) #show rights Test-logon Valid = 'Yes' CleanedUp = 'No' Derived Role = 'Test-logon' Up BW:No Limit Down BW:No Limit L2TP Pool = default-l2tp-pool PPTP Pool = default-pptp-pool Number of users referencing it = 2 Periodic reauthentication: Disabled DPI Classification: Disabled Youtube education: Disabled Web Content Classification: Disabled ACL Number = 139/0 Max Sessions = 65535 Check CP Profile for Accounting = TRUE Captive Portal profile = Test-cp_prof Application Exception List -------------------------- Name Type ---- ---- Application BW-Contract List ---------------------------- Name Type BW Contract Id Direction ---- ---- ----------- -- --------- access-list List ---------------- Position Name Type Location -------- ---- ---- -------- 1 global-sacl session 2 apprf-Test-logon-sacl session 3 logon-control session 4 captiveportal session 5 vpnlogon session 6 Enterprise-NT-block session global-sacl ----------- Priority Source Destination Service Application Action TimeRange Log Expired Queue TOS 8021P Blacklist Mirror DisScan ClassifyMedia IPv4/6 Contract -------- ------ ----------- ------- ----------- ------ --------- --- ------- ----- --- ----- --------- ------ ------- ------------- ------ -------- 1 any any web-cc-category adult/pornography deny Low 4 apprf-Test-logon-sacl --------------------- Priority Source Destination Service Application Action TimeRange Log Expired Queue TOS 8021P Blacklist Mirror DisScan ClassifyMedia IPv4/6 Contract -------- ------ ----------- ------- ----------- ------ --------- --- ------- ----- --- ----- --------- ------ ------- ------------- ------ -------- logon-control ------------- Priority Source Destination Service Application Action TimeRange Log Expired Queue TOS 8021P Blacklist Mirror DisScan ClassifyMedia IPv4/6 Contract -------- ------ ----------- ------- ----------- ------ --------- --- ------- ----- --- ----- --------- ------ ------- ------------- ------ -------- 1 any Facebook svc-https permit Low 4 2 any Facebook svc-http permit Low 4 3 any any svc-dns permit Low 4 4 any any svc-dhcp permit Low 4 5 any any svc-natt permit Low 4 6 any 240.0.0.0 240.0.0.0 any deny Low 4 7 user any udp 68 permit Low 4 8 any 169.254.0.0 255.255.0.0 any deny Low 4 captiveportal ------------- Priority Source Destination Service Application Action TimeRange Log Expired Queue TOS 8021P Blacklist Mirror DisScan ClassifyMedia IPv4/6 Contract -------- ------ ----------- ------- ----------- ------ --------- --- ------- ----- --- ----- --------- ------ ------- ------------- ------ -------- 1 user 10.64.5.253 svc-https permit Low 4 2 user 10.64.5.253 svc-http permit Low 4 3 user 10.66.1.254 svc-http permit Low 4 4 user 10.66.1.254 svc-https permit Low 4 5 user controller svc-http permit Low 4 6 user controller svc-https permit Low 4 7 user any svc-http dst-nat 8080 Low 4 8 user any svc-https dst-nat 8081 Low 4 vpnlogon -------- Priority Source Destination Service Application Action TimeRange Log Expired Queue TOS 8021P Blacklist Mirror DisScan ClassifyMedia IPv4/6 Contract -------- ------ ----------- ------- ----------- ------ --------- --- ------- ----- --- ----- --------- ------ ------- ------------- ------ -------- 1 user any svc-ike permit Low 4 2 user any svc-esp permit Low 4 3 any any svc-l2tp permit Low 4 4 any any svc-pptp permit Low 4 5 any any svc-gre permit Low 4 Enterprise-NT-block ------------------- Priority Source Destination Service Application Action TimeRange Log Expired Queue TOS 8021P Blacklist Mirror DisScan ClassifyMedia IPv4/6 Contract -------- ------ ----------- ------- ----------- ------ --------- --- ------- ----- --- ----- --------- ------ ------- ------------- ------ -------- 1 user any udp src 68 dst 0 deny Low 4 2 any any svc-dhcp permit Low 4 3 any any svc-dns permit Low 4 4 user 10.64.5.253 svc-https permit Low 4 5 user rfc-1918-nets any deny Low 4 Expired Policies (due to time constraints) = 0 (PL-Aruba01) #