policy
This optional attribute is used to handle all requests by AAA policy that is named as the same as the policy name given. The policy attribute works as follows:
- Check if there exists policy that matches the name, if yes, use it regardless what might be the conditions for the policy.
- If there is no policy with exact name match, use the first policy that has matching conditions.
- Use DEFAULT policy if such exists. We always recommend having a DEFAULT policy where authentications can be rejected and accounting accepted.
- If no matching policy is found, the request is not processed.
The parameter type for the policy is string. For more information, see Policy documentation.