Network policy configuration
In some examples, a configurator device maps a configuration attribute received from a wireless device to a credential attribute, the credential attribute to be mapped to a network policy. The configurator device sends the credential attribute to the wireless device, the credential attribute useable by the wireless device to access an access point (AP), and useable by the AP to obtain the network policy to apply to a communication of the wireless device.
1. A method comprising:
as part of a configuration process of a wireless device by a configurator device:
receiving, by the configurator device from the wireless device, a configuration request including a configuration attribute of the wireless device;
mapping, by the configurator device using a first mapping comprising information that maps between configuration attributes and respective credential attributes, the configuration attribute in the configuration request received from the wireless device to a corresponding credential attribute, the corresponding credential attribute to be mapped to a corresponding network policy; and
sending, by the configurator device, a configuration response including the corresponding credential attribute to the wireless device, the corresponding credential attribute useable by the wireless device to access an access point (AP); and
as part of a configuration process of the AP by the configurator device:
sending, by the configurator device to the AP, a second mapping comprising a mapping table including information that maps between credential attributes and respective network policies, for use by the AP in obtaining, responsive to the corresponding credential attribute received by the AP from the wireless device, the corresponding network policy to apply to a communication of the wireless device.
2. The method of claim 1 , wherein the configuration attribute in the configuration request comprises a Device Provisioning Protocol (DPP) configuration attribute, and the corresponding credential attribute comprises a DPP Connector attribute.
3. The method of claim 1 , wherein the corresponding network policy is selected from among a communication filtering policy that specifies that communication of information is subject to filtering according to a rule or criterion, a quality of service policy that specifies that the communication of information is subject to management to ensure that the communication satisfies a specified quality of service specification, a location-based resource access policy that controls access of resources by the wireless device from respective different locations, a time-based resource access policy that controls access of resources within specified time windows, and a connection duration policy that controls how long a connection can be maintained before a disconnection should be initiated.
4. The method of claim 1 , further comprising:
sending, by the configurator device to the AP, an update of the second mapping.
5. The method of claim 1 , wherein the configurator device is a first configurator device, the method further comprising:
configuring, by the first configurator device, a second configurator device to use the second mapping.
6. The method of claim 5 , wherein the configuring of the second configurator device further comprises configuring the second configurator device to use a common set of attributes as the first configurator device.
7. The method of claim 5 , wherein the configuring further comprises configuring, by the first configurator device, the second configurator device to use the first mapping between configuration attributes and respective credential attributes used by the first configurator device.
8. The method of claim 1 , further comprising:
providing, to the wireless device, a list of authorized configurator devices including a scrambling of identities of the authorized configurator devices.
9. The method of claim 1 , wherein the configuration attribute in the configuration request describes a property of the wireless device, and the corresponding credential attribute is an attribute for use by the wireless device in gaining connectivity to the AP.
10. The method of claim 1 , wherein the configuration process of the wireless device by the configurator device is performed without an authentication server different from the configurator device.
11. The method of claim 1 , further comprising:
as part of the configuration process of the AP by the configurator device:
receiving, by the configurator device from the AP, a configuration request including a configuration attribute of the AP,
wherein the sending of the second mapping by the configurator device to the AP is in response to the configuration request received from the AP.
12. A configurator device comprising:
a communication transceiver to communicate with an access point (AP) and a wireless device; and
at least one processor configured to:
as part of a configuration process of the wireless device by the configurator device:
receive, through the communication transceiver from the wireless device, a configuration request including a configuration attribute of the wireless device; map, using a first mapping comprising information that maps between configuration attributes and respective credential attributes, the configuration attribute in the configuration request received from the wireless device to a corresponding credential attribute, the corresponding credential attribute to be mapped to a corresponding network policy; and
send, through the communication transceiver, a configuration response including the corresponding credential attribute to the wireless device, the corresponding credential attribute useable by the wireless device to access the AP; and
as part of a configuration process of the AP by the configurator device:
send, through the communication transceiver to the AP, a second mapping comprising a mapping table including information that maps credential attributes to respective different network policies, for use by the AP in obtaining the corresponding network policy to apply to a communication of the wireless device wirelessly connected to the AP, the obtaining of the corresponding network policy based on mapping, by the AP using the second mapping, the corresponding credential attribute received by the AP from the wireless device to the corresponding network policy.
13. The configurator device of claim 12 , wherein the at least one processor is configured to further send, through the communication transceiver to the AP, an update of the second mapping.
14. The configurator device of claim 12 , wherein the configuration attribute in the configuration request describes a property of the wireless device, and the corresponding credential attribute is an attribute for use by the wireless device in gaining connectivity to the AP.
15. The configurator device of claim 12 , wherein each network policy of the different network policies governs communication of data once a network connection has been established between the wireless device and the AP.
16. The configurator device of claim 12 , wherein the at least one processor is configured to further:
as part of the configuration process of the AP by the configurator device:
receive, through the communication transceiver from the AP, a configuration request including a configuration attribute of the AP,
wherein the sending of the second mapping by the configurator device to the AP is in response to the configuration request received from the AP.