LevelOne WHG-311, Руководство пользователя, Страница: 97 / 307

97
7. Policies and Access Control
7.1. Policy
Configure Policy; go to: Users >> Policy .
WHG Controller supports multiple Policies, including one Global Policy and individual Policies . Each Policy
consists of access control profiles that can be configured respectively and applied to a certain Group of users.
Global Policy is the system’s universal policy and applied to all clients, while other individual Policy can be selected
and defined to be applied to any Service Zone.
The clients belonging to a Service Zone will be bound by an applied Policy. In addition, a Policy can be applied at a
Group basis; a Group of users can be bound by a Policy. The same Group can be applied with different Policies
within different Service Zones.
When the type of authentication database is RADIUS , the Class-Group Mapping function will be available to allow
the administrator to assign a Group for a RADIUS class attribute; therefore, a Policy applied to this Group will be
mapped to a user Group of a RADIUS class attribute.
When the type of authentication database is LDAP , the Attribute-Group Mapping function will be available to allow
the administrator to assign a Group for LDAP attribute; therefore, a Policy applied to this Group will be mapped to a
user Group of a LDAP attribute.
When the type of database is Local , the Group selection function will be available to allow the administrator to
assign a Group to each user one by one.
Global Policy
Global is the system’s universal policy including Firewall Rules , Specific Routes Profile and Maximum
Concurrent Session which will be applied to all users unless the user has been regulated and applied with another
Policy.

Select Policy: Select Global to set the Firewall Profile , Specific Route Profile and Maximum Concurrent
Session .

Firewall Profile: Global policy and each policy have a firewall service list and a set of firewall profile which is
composed of firewall rules.

Specific Route Profile: The default gateway of WAN1, WAN2, or a desired IP address can be defined in a
policy. When Specific Default Route is enabled, all clients applied this policy will access the Internet through this
gateway settings, include default gateway.

Maximum Concurrent Sessions: Set the maximum concurrent sessions for each client.