Configuring Identity Control Policies Configuring a Control Class Command or Action Purpose • match-any—At least one of the conditions in the control class must evaluate true. • match-none—All of the conditions in the control class must evaluate false. Step 4 {match | no-match} activated-service-template template-name Example: Device(config-filter-control-classmap)# match activated-service-template SVC 1 _ (Optional) Creates a condition that evaluates true based on the service template activated on a session. Step 5 {match | no-match} authorization-status {authorized | unauthorized} Example:
Device(config-filter-control-classmap)# match authorization-status authorized (Optional) Creates a condition that evaluates true based on a session's authorization status. Step 6 {match | no-match} authorizing-method-priority {eq | gt | lt} priority-value Example: Device(config-filter-control-classmap)# match authorizing-method-priority eq 10 (Optional) Creates a condition that evaluates true based on the priority of the authorization method. • eq—Current priority is equal to priority-value. • gt—Current priority is greater than priority-value. • lt—Current priority is less than priority-value. • priority-value—Priority value to match. Range:
1 to 254, where 1 is the highest priority and 254 is the lowest. Step 7 {match | no-match} client-type {data | switch | video | voice} Example: Device(config-filter-control-classmap)# match client-type data (Optional) Creates a condition that evaluates true based on an event’s device type. Step 8 {match | no-match} current-method-priority {eq | gt | lt} priority-value Example: Device(config-filter-control-classmap)# match current-method-priority eq 10 (Optional) Creates a condition that evaluates true based on the priority of the current authentication method. Configuring Identity Control Policies 6