Configuring a Control Class A control class defines the conditions under which the actions of a control policy are executed. You define whether all, any, or none of the conditions must evaluate true to execute the actions of the control policy. Control classes are evaluated based on the event specified in the control policy. Note This procedure shows all of the match conditions that you can configure in a control class. You must specify at least one condition in a control class to make it valid. All other conditions, and their corresponding steps, are optional (steps 4 through 18 below).
Procedure Configuring Identity Control Policies Configuring a Control Class Command or Action Purpose want to continue because this command will be disabled and you cannot revert to legacy mode. Note If you save the configuration while the new-style mode is enabled, and then perform a reload, the display mode is permanently set to new-style. The authentication display command is disabled and you cannot revert to legacy mode. For the stack devices and standalone devices to revert to legacy mode, save the new-style configuration in a flash, write erase the device and then perform a reload. Command or Action Purpose Step 1 enable Example: Device> enable Enables privileged EXEC mode.
• Enter your password if prompted. Step 2 configure terminal Example: Device# configure terminal Enters global configuration mode. Step 3 class-map type control subscriber {match-all | match-any | match-none} control-class-name Example: Device(config)# class-map type control subscriber match-all DOT1X NO AGENT _ _ Creates a control class and enters control class-map filter mode. • match-all—All of the conditions in the control class must evaluate true. Configuring Identity Control Policies 5