Alcatel-Lucent IAP93 Betriebsanweisung PDF herunterladen (Seite 106)

l Role-based— Allows the users to obtain access based on the roles assigned to them.

l Unrestricted— Allows the users to obtain unrestricted access on the port.

l Network-based— Allows the users to be authenticated based on access rules specified for a network.

b. If the Role-based access control is selected, perform the following steps:

l Under Roles, select an existing role for which you want apply the access rules, or click New and add the

required role. The list of roles defined for all networks is displayed under Roles.

The default role with the same name as the network, is automatically defined for each network. The default roles

cannot be modified or deleted.

l Select the access rule associated with a specific role and modify if required. To add a new access rule,

click New in the Access Rules window. You can configure up to 64 access rules. For more information on

configuring access rules, see Configuring Access Rules on page 169.

l Configure rules to assign roles for an authenticated client. You can also configure rules to derive VLANs

for the wired network profile. For more information on role assignment rules and VLAN derivation rules, see

Configuring Derivation Rules on page 178 and Configuring VLAN Derivation Rules on page 182.

l Select the Assign pre-authentication role check box to add a pre-authentication role that allows some

access to the users before the client authentication.

l Select the Enforce Machine Authentication check box, to configure access rights to clients based on

whether the client device supports machine authentication. Select the Machine auth only and User auth

only rules. Machine Authentication is only supported on Windows devices and devices such as iPads.

If Enforce Machine Authentication is enabled, both the device and the user must be authenticated for

the role assignment rule to apply.

2. Click Finish.

In the CLI

To configure access rules for a wired profile:

(Instant Access Point)(config)# wired-port-profile <name>

(Instant Access Point)(wired ap profile <name>)# access-rule-name <name>

(Instant Access Point)(wired ap profile <name>)# end

(Instant Access Point)# commit apply

To configure role assignment rules:

(Instant Access Point)(config)# wired-port-profile <name>

(Instant Access Point)(wired ap profile <name>)# set-role <attribute>{{equals| not-equal| star

ts-with| ends-with| contains| matches-regular-expression}<operator> <role>| value-of}

(Instant Access Point)(wired ap profile <name>)# end

(Instant Access Point)# commit apply

To configure a pre-authentication role:

(Instant Access Point)(config)# wired-port-profile <name>

(Instant Access Point)(wired ap profile <name>)# set-role-pre-auth <pre-authentication-role>

(Instant Access Point)(wired ap profile <name>)# end

(Instant Access Point)# commit apply

To configure machine and user authentication roles:

(Instant Access Point)(config)# wired-port-profile <name>

(Instant Access Point)(wired ap profile <name>)# set-role-machine-auth <machine-auth-only>

<user-auth-only>

(Instant Access Point)(wired ap profile <name>)# end

(Instant Access Point)# commit apply

AOS-W Instant 6.3.1.1-4.0 | User Guide Wired Profiles | 106

1 2 ... 101 102 103 104 105 106 107 108 109 110 111 ... 334 335

Kommentare zu diesen Handbüchern

Keine Kommentare

Alcatel-Lucent IAP93 Betriebsanweisung Seite 106

Kommentare zu diesen Handbüchern