D-Link DSA-3600, Руководство пользователя

Страница: 74 / 204

Chapter 4. Web Interface Configuration
68
¾
Action for Matched Packets:
There are two options,
Block
and
Pass
.
Block
is to prevent
packets from passing and
Pass
is to permit packets passing.
B. Specific Route Profile:
Click the button of
Setting
for
Specific Route Profile
, the Specific Route Profile
list will appear.
¾
Route No.:
The number of route.
¾
IP Address (Destination):
The destination IP address of the host or the network.
¾
Subnet Netmask:
Select a destination subnet netmask of the host or the network.
¾
IP Address (Gateway):
The IP address of the next router to the destination.
C. Privilege Profile:
Click the button of
Setting
for
Privilege Profile
to enter the
Privilege Configuration
for
configuring the item of
Maximum Concurrent Session for User
from
Unlimited
to
10
.
¾
Maximum Concurrent Session for User:
Include Maximum Concurrent Session for User, from 10
to Unlimited. The concurrent sessions for each user, it can be restricted by administrator.
Note: For more information, please refer to Appendix J. Session Limit and Session Log.
4.2.3.2 Policy 1 ~ Policy 12
Polices can be defined in the Policy tab. The administrator can select one of the defined policies to apply it to the
specific authentication option. All clients belong to this authentication option will be bound by this policy. A policy
could be applied at zone level, at group level or at user level. User level policy overrides group level policy.
Group level policy overrides zone level policy. Zone level policy overrides the global policy.
When the type of authentication database is “Local”, a policy is applied at per user basis. When the type of
database is NTDOMAIN or ONDEMAND, a policy is applied to the whole user database. When type of database
is RADIUS, a policy is mapped to a user group of a RADIUS class. The Class-Policy Mapping function will be
available to let the administrator assign a policy for a RADIUS Class attribute. When the type of database is
LDAP, a policy is applied to user group defined an attribute-value pair. The Attribute-Policy Mapping function will
be available to let administrator assign a policy for a LDAP Attribute. When the type of database is SIP, the
Policy selection function will be available to let the administrator assign a policy for all SIP users.