Extreme Networks Summit WM3000 Series, Справочное руководство

Страница: 410 / 513

Controller Security
Summit WM3000 Series Controller System Reference Guide
410
Modify the existing group’s guest designation, VLAN ID, access period(s) and WLAN assignment(s).
7 If an existing group is no longer needed (perhaps obsolete in function), select the group and click the
Delete button to permanently remove the group from the list. The group can only be removed if all
the users in the group are removed first.
8 To create a new group, click the Add button and provide the following information.
9 Refer to the Status field for the current state of the requests made from applet. This field displays
error messages if something goes wrong in the transaction between the applet and the controller.
10 Click OK to use the changes to the running configuration and close the dialog.
11
Click Cancel to close the dialog without committing updates to the running configuration.
Viewing Radius Accounting Logs
Accounting logs contain information about the use of remote access services by users. This information
is of great assistance in partitioning local versus remote users and how to best accommodate each.
Remote user information can be archived to a location outside of the controller for periodic network
and user permission administration.
To display the Radius accounting logs:
1 Select Security > Radius Server from the main menu.
2 Select the Accounting Logs tab.
Name
Define a unique group name that differentiates this new group from
others with similar attributes.
Guest Group
Select the
Guest Group
checkbox to assign this particular group (and the
users within) only temporary access to the local Radius server, thus
restricting their authentication period to a user defined access interval.
VLAN ID
Define the VLAN ID for the new group. The VLAN ID is representative of
the shared SSID each group member (user) employs to interoperate
within the controller managed network (once authenticated by the local
Radius server).
Time of Access Start
Set the time the group is authenticated to interoperate. Each user within
the group is authenticated with the local Radius server. Those group
members successfully authenticated are allowed access to the controller
using the restrictions defined for the group.
Time of Access End
Set the time each group’s user base will loose access privileges within
the controller managed network. After this time, users within this group
will not be authenticated by the local Radius server. However, if a user is
part of a different group that has not exceeded their access end interval,
the user may still interoperate with the controller (remain authenticated)
as part of that group.
Available WLANs
Use the Available WLANs
Add ->
and
Remove <-
functions to move
WLANs for this new group from the available list to the configured list.
Once on the configured list (and the changes applied), the members of
this group can interoperate with the controller on these WLANs (once
authenticated by the local Radius server).
Configured WLANs
The Configured WLANs columns displays the WLANs this new group can
operate within (once users are configured). Use the
Add ->
and
Remove
<-
functions to move WLANs from the available list to the configured list.
Time of access in
days
Select the checkboxes corresponding to the days of the week you would
like this new group to have access to the controller managed network. Of
course, the user base within the group still needs to be authenticated by
the local Radius server first.