291
Appendix C. Policy Priority
Global Policy, Service Zone Policy, Authentication Policy and User Policy
WHG Controller supports multiple Policies, including one
Global Policy
and multiple individual
Policy
which can be
assigned and bound to
Group
.
Global Policy
is the system’s universal policy and applied to all clients, while other
individual Policy can be selected and defined to be applied to any Service Zone. On the other hand,
Service Zone
also has a
Default Policy
. For some authentication, such as Local, RADIUS and LDP, user can assign to different
Group individually. The clients belonging to a Service Zone will be bound by an applied Policy. In addition, a Policy
can be applied at a Group basis; a Group of users can be bound by a Policy. So one user may be applied different
policy at the same time. Which policy is actually applied to this user?
The Policy Priority must be:
User Policy >> Authentication Policy >> Service Zone Policy >> Global Policy
Now, let us discus different user policy type:
o
For Local, RADIUS and LDAP, if these users are assigned to different Group individually, these users can be
assigned to their Group. For example, a Local user, user01, is assigned to Group1 and the Local Authentication
is assigned to Group2. If Group1 in Service Zone1 can be applied Policy1. Then user01 login to Service Zone1
will get Policy1. This is a common case for users that can assign Group individually.
o
For Local, RADIUS and LDAP, if these users do not assigned any Group individually, so they are same as other
authentication server users that they can not assign to Group individually. For example, a POP3 user, pop01,
the POP3 Authentication is assigned to Group1. If Group1 in Service Zone1 can be applied Policy1. Then pop01
login to Service Zone1 will get Policy1. This is another common case for users that can assign Group by
authentication server.
o
If Authentication server also do not assign to a Group, then the user will applied the Service Zone Default Policy.
For example, a Local user, user01, is assigned to Group
None
and the Local Authentication is also assigned to
Group
None
. If the Default Policy of Service Zone1 is applied Policy1. Then user01 login to Service Zone1 will
get Policy1.
o
If the Default Service Zone Policy is
None
. Authentication server does not assign to a Group and user Group is
None
too. For example, a Local user, user01, is assigned to Group
None
and the Local Authentication is also
assigned to Group
None
. If the Default Policy of Service Zone1 is
None
. Then user01 login to Service Zone1 will
apply the Global Policy.
So, the Global Policy has the lowest policy priority; on the other hand, the User Policy will be the highest one.
Содержание WHG-311
Страница 1: ...LevelOne Secure WLAN Controller WHG 311 315 401 505 515 707 User Manual...
Страница 25: ...25 WHG Controller in a Business Headquarter WHG Controller in a Hotel Capable of integrating with DSLAM and PMS...
Страница 61: ...61...
Страница 67: ...67...
Страница 103: ...103...
Страница 118: ...118...
Страница 162: ...162 AP status Client List and WDS List information listed are collected from the remote AP via SNMP...
Страница 205: ...205 13 1 3 HW View Hardware Status go to Status HW This tab page displays the system s hardware usage information...
Страница 232: ...232 Custom Pages Login Page Uploaded Page Choose Uploaded Page and upload a login page to the built in HTTP server...
Страница 250: ...250 price duration serial number number is account s n...
Страница 252: ...252...
Страница 268: ...268...
Страница 273: ...273 4 Select root certification and then click View Certificate 5 Click Install Certificate...
Страница 275: ...275 8 Click Finish...
Страница 307: ...307 P N VWHG50020110601...