device-classification (security policy rule view)

Function

The device-classification command sets a device or device group to be referenced by a security policy rule.

The undo device-classification command cancels the setting.

Format

device-classification { device-group group-name | device-category category-name | any }

undo device-classification { device-group group-name | device-category category-name }

Parameters

Parameter	Description	Value
device-group group-name	Indicates the name of the device group to be referenced by a security policy rule.	The device group name must exist on the local system.
device-category category-name	Indicates the name of the device to be referenced by a security policy rule.	The device name must exist on the local system.
any	Indicates any device or device group.	-

Views

Security policy rule view

Default Level

2: Configuration level

Usage Guidelines

Configuring a security policy rule to reference a device or device group allows you to control the types of devices for Agile Controller SSO login. A security policy rule can reference a maximum of 32 devices or device groups. You can run the display device-classification device-group all command to view all device groups or display device-classification device-category all command to view all devices.

Example

# Configure security policy rule policy_sec to reference device group pc.

<sysname> system-view
[sysname] security-policy
[sysname-policy-security] rule name policy_sec
[sysname-policy-security-rule-policy_sec] device-classification device-group pc