Aruba Networks ClearPass Guest 3.9, Deployment Manual

Page: 118 / 518

118 | RADIUS Services ClearPass Guest 3.9 | Deployment Guide
User roles can be used to apply different security policies to different classes of guest user accounts. For
example, guest users, employees, and contractors might all have differing network security policies. The
RADIUS attributes defined by a user role can then specify what each class of user is authorized to do.
To create and configure user roles for the server to use for RADIUS authorization:

Go to RADIUS > User Roles .
The User Roles list view defines the user roles for the RADIUS server and allows you to make changes to
existing user roles.
Each role is identified by a unique number. The ID is shown in the list view. When creating visitor accounts,
the
role_id field should contain the ID of one of the user roles defined in the RADIUS server.
The RADIUS attributes for each role are shown in the list view. The icon displayed with each attribute
indicates the type of condition attached to it:

The attribute is enabled and will always be included in a RADIUS Access-Accept message.

The attribute is disabled and will never be included in a RADIUS Access-Accept message.

The attribute has a condition expression that will determine if it is included in the RADIUS server’s
response.
Creating a User Role
To create a role that will be assigned to guest users:
1. Go to RADIUS > User Roles , then click the Create a new role link. The RADIUS Role Editor form
opens.
Figure 16 RADIUS Role Editor page