Juniper NETWORK AND SECURITY MANAGER, Руководство пользователя

Страница: 307 / 340

Table 85: IF–MAP Session-Import Policy Configuration Details
Your Action Function Option
Enter a name for the session-import policy. Specifies a unique name for the
session-import policy. Name
Enter a brief description for the policy. Describes the policy. Description
Select this option to stop matching roles after a
successful match is found. Stops matching the roles when an IF-MAP
client has successfully matched the roles. Stop on match
Match Criteria > Identity tab
Select this action and the following identity
options appear.
• Identity —Enter the identity name. For example,
for a regular employee named Bob Smith you
might enter the Identity as
username bsmith
and select username for the identity type.
• Identity Type —Select the identity type. If you
choose Other for identity type, enter a unique
identity type in the text box.
• Administrative Domain —Type the
administrative domain for the session-import
policy.
All aspects of the IF-MAP identity (name, type,
and administrative domain) must exactly match
the session-import policy.
Specifies that identity should be used as
the criteria for assigning roles. Match IF-MAP Identity
Match Criteria > Roles tab
Select this action and the following role option
appears.
• Roles — From Roles, click New and enter a
specified role.
Specifies that role match should be used
as the criteria for assigning roles. Match IF-MAP Roles
Match Criteria > Capabilities tab
Select this action and the following option
appears.
• Capabilities —From Capabilities, click New and
enter a specified capability.
Specifies that capability match should be
used as the criteria for assigning roles. Match IF-MAP Capabilities
Match Criteria > Device Attributes tab
Select this action and the following option
appears.
• Device Attributes —From Device Attributes,
click New and enter a specified device
attribute.
Specifies that device attribute match
should be used as the criteria for assigning
roles. Match IF-MAP Device
Attributes
Actions > Assign Roles tab
289 Copyright © 2010, Juniper Networks, Inc.
Chapter 20: Configuring IF-MAP Federation Settings