Configuring Identity Control Policies Configuring Identity Control Policies, on page 1 Feature History for Identity Control Policies, on page 21 Configuring Identity Control Policies Identity control policies define the actions that Cisco Identity Based Networking Services (IBNS) takes in response to specified conditions and subscriber events. A variety of system actions, conditions, and events can be combined using a consistent policy language. This module provides information about how to configure identity control policies for Cisco IBNS.
Information About Identity Control Policies Cisco Identity Based Networking Services Configuration To convert all relevant authentication commands to their Class-Based Policy Language(CPL) control policy equivalents, use the authentication convert-to new-style command. This command permanently converts the legacy configuration on the switch to identity-based networking services. This configuration is irreversible. It disables the conversion command – authentication display [legacy | new-style] .
Note Use the authentication display config-mode command in EXEC mode to display the current configuration mode; legacy if it is legacy mode and new-style if it is Identity-Based Networking Services configuration mode. (Device)# authentication display config-mode Current configuration mode is legacy Device)# authentication display config-mode Current configuration mode is new-style Concurrent Authentication Methods Cisco IBNS allows the concurrent operation of IEEE 802.1x (dot1x), MAC authentication bypass (MAB), and web authentication methods, making it possible to invoke multiple authentication methods in parallel on Configuring Identity Control Policies 1