Configuring PPSK and CCG in XIQ“PPSK Classification in ExtremeCloud IQ allows you to deploy a singular SSID, with multiple individual authentication credentials assigned to different locations, thereby avoiding the need for creating many Network Policies.PPSK classification is the ability to assign classification rules to individual PPSK users.” For this doc, the Company is ABC Coffee and many store fronts.PPSK: Private Pre-Shared KeyCCG: Cloud Configuration GroupExample:ABC Coffee chain with many store fronts, each ABC Coffee Store front having their own unique authentication credential using one SSID for all locations.This can be done using PPSK Classification using the four steps below.
Step One: Make Cloud Config Group (CCG) for store locations.CONFIGURE>COMMEN OBJECTS>POLICY>Cloud Config Group.Click “ADD”, enter Store 4 located in Milpitas (stores 1,2, and 3 have already been created)
Step Two: Create a Local User GroupCONFIGURE>USERS>User Group: click “ADD”, enter Coffee-Store-User-Group.NOT: be sure that “Password DB Location” is LOCAL, and “PPSK classification” is enabled.
Step Three: Create a new SSIDCONFIGURE>NETWORK POLICY: click ADD NETWORK POLICY.
- Give it a name, ABC-Coffee-Shop under “Policy Detail” tab
- Give it an SSID, ABC-Coffee under “Wireless Network” tab
- “Private Pre-Shared Key”
Under “Policy Details” tab:
Policy Name: ABC-Coffee-Shop: Save Click “Wireless Network”…
Under “Wireless Network” tab:
Add a “wireless Network” called ABC-Coffee, click “Save”, click Private Pre-Shared Key”
Under “Wireless Network” tab>“Private Pre-Shared Key”
Enable “PPSK Classification Option”.
Under “User Groups”, Select the User Group created in Step Two “Coffee-Store-User-Group”
Step Four: Create and Assign, individual PPSK user, Pluss Assign Classification Rule:CONFIGURE>USERS>Users: Click “ADD” to create individual PPSK users
A. From “Create account in user group”, select “Coffee-Store-User-Group” (created in step 2)
B. Auto generate a password
C. give the PPSK user group a name, “Store 1”
D. Click Save
Assign Classification Rule:From CONFIGURE>USERS>PPSK ClassificationFrom “Network Policy”, Select “ABC-Coffee-Shop”(“ABC-Coffee-Shop” generated from step 3)Click ADDSelect induvial CCG (Cloud Config Groups)(Store 1, Store 2, Store 3, Store 4, etc.. generated in Step 1)
Assign CCG Classification Rule.Once a CCG is selected, click, +, under Classification Rules.
- Give CCG Classification Rule a name “Store-1-Classification”
- Click ADD, select “Cloud Config Group”
- Match Type “Contains”, select “Store 1”
- Click CONTINUE