Policy association enables gateways to manage user access policies in a unified manner and implement user access policies on gateways and authentication access devices to resolve the conflict between policy strength and complexity in large-scale campus networks.