Extreme Networks Summit WM20, Руководство пользователя

Страница: 128 / 270

WM Access Domain Services Configuration
Summit WM20 User Guide, Software Release 4.2
128
Once a wireless device user has logged in on the Captive Portal page, and has been authenticated by
the RADIUS server, then the following filters will apply:
●
Filter ID – If a filter ID associated with this user was returned by the authentication server.
●
Default filter – If no matching filter ID was returned from the authentication server
Filtering Rules for a Filter ID group
When the wireless device user provides the identification credentials, identification is sent by the
Summit WM Controller to the RADIUS server, or other authentication server, through a sequence of
exchanges depending on the type of authentication protocol used.
When the server allows this request for authentication—the server sends an access-accept message, the
RADIUS server may also send back to the Summit WM Controller a filter ID attribute value associated
with the user. For an AAA WM-AD, a Login-LAT-Group identifier for the user may also be returned.
WM-AD Policy is also applicable for Captive Portal and MAC-based authorization.
If the filter ID attribute value (or Login-LAT-Group attribute value) from the RADIUS server matches a
filter ID value that you have set up on the Summit WM Controller, the Summit WM Controller applies
the filtering rules that you defined for that filter ID value to the wireless device user.
If no filter ID is returned by the authentication server, or no match is found on the Summit WM
Controller, the filtering rules in the default filter will apply to the wireless device user.
To define filtering rules for a filter ID group:
1 From the main menu, click WM-AD Configuration . The WM-AD Configuration screen is
displayed.
2 In the left pane WM Access Domains list, click the WM-AD you want to define filtering rules for a
filter ID group. The Topology tab is displayed.
3 Click the Filtering tab.