Ruckus Wireless ZoneDirector 3000, User Manual, Page: 309 / 430

Creating New User Roles
Role Based Access Control Policy
ZoneDirector 9.8 User Guide, 800-70599-001 Rev B
309
Figure 164. The Create New form for adding a role
Role Based Access Control Policy
Using the Role Based Access Control Policy (RBAC) feature, organizations can
deploy a single SSID for multiple roles and provide different access privileges based
on the user’s role in the organization. For example, a school could create a single
secure WLAN for both students and staff members. Then when either connects to
the network they would be given access rights based on their roles at the school.
Users created on an AAA server can be mapped to roles on ZoneDirector using
group attributes. When a client completes authentication successfully, ZoneDirector
gets the group attributes assigned to this user from the AAA server and uses the
group attributes to determine the user’s role, and applies the access control
restrictions defined in that role to the client’s access privileges.
When RBAC is enabled on a WLAN, Client Fingerprinting must be enabled and
Dynamic VLAN should also be enabled.