SMC Networks ELITECONNECT SMC2504W, User Manual

Page: 183 / 242

EliteConnect WLAN Security System User Manual C-15
The XML that follows is an XML representation of the rights that will be passed to
the WLAN Access Manager for this client. Notice it has traffic allowed and
redirected, as specified by the Allow and Redirect streams above, and it has the
NAT setting. It has been reformatted for readability, but contains the same data.
Client Rights for 00:02:e3:1e:36:4a
These rights expire in 1 week, 2 days:
<?xml version="1.0" standalone="yes"?>
<client_rights>
<expiry>799977</expiry>
<id></id>
<allow_real_ip>True</allow_real_ip>
<allow_static_ip>False</allow_static_ip>
Table C-4 Rights Explained
Right Description
Match groups=Guest tells us that for the user Guest we found one group called Guest
of which this user is a member.
Guest Initial Group Expire
= Guest:Never Never says the Guest group has rights that never expire.
Location Expire =
Everywhere Else:Never Never tells us that we matched the location Everywhere Else,
and rights from this location never expire.
Final Group Expire =
Guest: Never
tells us that based on the location, the Guest group is allowed,
so we keep this group and its expire time.
Allows = HTTPS Logon
page, DHCP, Outside
World, SSL Stop page.
HTTP logon redirector
tells us that given the list of above groups, we are going to
manually allow the traffic specified by the each colon separated
Allow.
Redirects = DNS
redirect:Internal blocker,
Logon page shortcut, No
internal rights UI, no
external rights UI, no
internal admin UI, no SSL
internal admin UI tells us that in addition to allowing the traffic specified in the
Allows, we are going to also allow the traffic specified in these
Redirects, but each redirect will have its traffic redirected as
specified in the individual Redirects settings.
NAT = 1 tells us that either the Guest group, or the location forces NAT.
If any group that matches for a user, or the location setting has
NAT checked, then that user will use a NAT type address.
Expire max = Never indicates that based on the location and groups, the maximum
expire time for these rights is Never.
Expire min = Never indicates that based on the location and groups, the minimum
expire time for these rights is Never.
Linger = 0 indicates that the client should not linger at all based on the
settings in the groups.